Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-iX5QTG-4cpDx556vWbu8h5rGXA.roa
File: 1-iX5QTG-4cpDx556vWbu8h5rGXA.roa (raw, json)
Hash identifier: 2V07BIpfpusl62nw2V+VsNq1BhUMAAfQo5VuHZ/vAQk=
Subject key identifier: FA:25:F9:41:31:BE:E1:CA:43:C7:9E:7A:BD:66:EE:F2:1E:6B:19:70
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C511466A479DC5E7BE73F81E4BEF54070
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-iX5QTG-4cpDx556vWbu8h5rGXA.roa
Signing time: Sun 10 Dec 2023 00:15:40 +0000
ROA not before: Sun 10 Dec 2023 00:15:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:51:14:66:a4:79:dc:5e:7b:e7:3f:81:e4:be:f5:40:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 10 00:15:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa25f94131bee1ca43c79e7abd66eef21e6b1970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:7d:7d:55:8d:4b:ad:6b:fa:0a:25:f3:28:
72:41:ce:4b:77:cf:2b:8a:e0:d6:ed:58:6b:f8:e0:
ce:78:0a:67:68:ea:9e:2e:1f:06:66:2d:b4:45:1d:
2e:d8:98:42:7d:10:62:4c:e4:b5:46:b8:c5:ca:0a:
0d:34:10:87:b9:49:fe:9b:b4:a5:3d:db:5b:41:45:
3a:74:32:28:04:c3:2c:a0:ef:93:b8:7a:76:92:1f:
8b:40:64:e2:d1:6e:32:f4:06:15:4b:72:bc:cf:db:
98:ba:9e:31:d6:f9:82:f0:ff:4e:0b:ba:c4:6e:81:
d6:b8:40:0c:f1:48:d1:0d:d3:31:63:af:c8:33:9b:
4b:ae:47:d5:be:03:3b:55:dd:5c:fc:9d:20:4b:f3:
81:f7:93:c6:10:52:e4:28:f6:2e:e0:bb:54:83:fb:
c7:6e:42:e2:a9:aa:25:eb:b9:6f:de:33:60:27:3e:
07:f1:63:1e:20:b2:24:93:e3:54:cd:42:ad:48:d2:
d5:51:22:7a:b7:5b:6b:1c:48:b2:79:94:d9:75:d4:
63:ae:ec:ce:0a:0a:02:c7:ed:23:ad:39:58:b5:6c:
e5:da:b4:94:95:22:33:9d:73:69:7c:1f:23:20:5f:
a4:79:44:f1:9c:31:0b:a5:35:6a:47:fe:6a:a5:d3:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:25:F9:41:31:BE:E1:CA:43:C7:9E:7A:BD:66:EE:F2:1E:6B:19:70
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-iX5QTG-4cpDx556vWbu8h5rGXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:80:f0:73:09:8c:0b:12:18:0f:40:b4:73:52:fd:d6:ed:59:
cb:d6:09:03:78:42:6a:de:19:d3:cb:f5:17:ea:21:99:b8:c0:
53:57:af:e7:fe:a6:5a:53:ed:d5:88:9f:2a:b5:17:69:d8:03:
33:23:e2:83:0d:77:f9:6e:13:5f:e4:d3:83:b2:c7:b3:db:a0:
54:d4:71:fa:f9:db:4c:01:04:60:17:df:c7:0c:73:5e:52:f1:
ad:dd:bc:36:52:ed:b1:0e:ce:60:07:db:59:d5:b0:5d:f9:26:
32:46:aa:66:fd:24:d4:e2:97:b3:73:c7:9b:2e:56:46:aa:fc:
76:06:8c:1b:81:dd:2d:bd:fe:17:08:8f:58:ca:10:32:f8:b1:
85:e9:ac:fa:27:e8:bf:07:60:8c:81:83:bc:80:ec:12:21:30:
99:74:e7:33:49:a0:47:8a:a5:c3:9a:35:e6:d9:c2:3a:d4:18:
8c:42:85:44:bd:c6:6a:c8:5b:ab:5d:1a:14:1f:f4:58:5b:ef:
23:69:1f:6a:bb:ea:81:21:0d:9e:71:6f:71:67:83:b1:72:3d:
9d:02:cb:d7:07:be:47:a3:64:e2:f6:66:9f:ce:c6:f0:5a:9e:
fa:17:88:9d:9b:44:be:13:e8:51:3d:a4:2a:0a:d6:d5:c7:3c:
1e:39:6e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:49:57 2025 by rpki-client