Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/97IvftExBN2WH8241efdg-hb7Hk.roa
File: 97IvftExBN2WH8241efdg-hb7Hk.roa (raw, json)
Hash identifier: 8Tb2A96AndMhfFfcCMqPseNmCkRwMhWjQi5ScwvUclc=
Subject key identifier: F7:B2:2F:7E:D1:31:04:DD:96:1F:CD:B8:D5:E7:DD:83:E8:5B:EC:79
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C19ADAD4904F1A567ACEA378C03DF4999
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/97IvftExBN2WH8241efdg-hb7Hk.roa
Signing time: Wed 29 Nov 2023 06:04:21 +0000
ROA not before: Wed 29 Nov 2023 06:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:19ad:85f8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:ad:ad:49:04:f1:a5:67:ac:ea:37:8c:03:df:49:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 29 06:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7b22f7ed13104dd961fcdb8d5e7dd83e85bec79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:89:81:a6:1a:db:09:cb:52:a3:89:cb:f5:
01:ae:d2:32:1a:ab:db:bb:05:83:bd:8f:d3:8a:27:
21:ea:60:47:d7:e0:23:ff:12:69:c8:49:24:73:a8:
d1:15:96:eb:e3:0c:c8:98:e9:ab:d4:1f:21:3d:01:
2a:58:d4:77:01:f5:41:a3:3c:21:04:a0:13:3e:f8:
29:44:7e:29:1e:8b:cc:e7:dc:83:22:68:55:7f:d2:
89:c1:5a:f6:c7:1e:68:31:0e:c8:9d:6e:0f:f8:bb:
da:eb:e4:e6:a4:cc:6c:46:23:38:6e:08:99:71:03:
8a:c2:b2:53:ce:aa:fe:aa:a5:61:b8:4a:2c:20:7b:
d0:64:31:8f:1b:05:14:4f:c9:b2:4a:ae:29:82:5e:
fd:8d:46:a4:ba:d1:2c:cc:50:d3:87:52:09:b2:16:
3d:e0:d4:f8:23:ec:d9:ea:84:fe:95:84:57:fa:03:
1f:74:d3:1b:aa:3d:c1:cb:71:13:1d:94:d8:cb:2d:
e2:50:eb:a7:10:ab:20:fd:da:02:9d:4c:88:5d:d2:
cc:7b:9c:60:0f:79:50:18:e7:f1:4a:5a:38:e9:4e:
cd:53:c7:c3:6d:50:71:34:65:c1:2b:17:2a:51:50:
ee:8a:7b:66:02:18:58:9e:0a:20:26:2f:b5:c7:3c:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B2:2F:7E:D1:31:04:DD:96:1F:CD:B8:D5:E7:DD:83:E8:5B:EC:79
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/97IvftExBN2WH8241efdg-hb7Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:64:18:f3:ab:ba:51:15:84:0d:14:34:9a:97:c3:08:26:58:
26:cf:58:77:af:2f:5e:cf:83:ac:11:de:6a:b4:95:0a:36:5f:
df:2c:16:88:83:d7:66:f8:53:d7:a6:24:4c:4e:66:eb:7a:b3:
7b:07:59:66:b3:d1:06:bb:67:0b:28:09:12:8d:d5:6a:70:c5:
c7:5b:72:6b:47:e8:8f:98:fc:79:ac:f1:a7:e2:50:f3:ab:3f:
35:4e:69:e7:ae:50:b5:02:49:8b:21:7e:24:da:75:88:4f:c3:
ef:3a:14:41:c6:fb:2f:89:b1:09:d6:3c:65:cc:87:b3:13:25:
2e:13:5f:92:f6:4b:f0:6b:cf:59:84:2b:e1:de:04:d0:5a:31:
7b:a4:a2:5e:ed:86:79:94:fe:be:0f:ec:6b:81:2e:c2:c1:c4:
70:8d:86:21:84:49:32:18:7f:8c:dd:da:bd:b1:5b:2e:a7:b1:
e2:4f:d1:2a:5a:78:6f:fb:4c:ec:55:9b:b3:8f:06:28:ed:d7:
61:62:a6:b7:2d:7a:a4:99:c1:c8:87:3f:11:67:4f:58:41:6d:
82:89:f9:b7:08:64:36:2f:00:6a:db:7a:d3:83:ec:bf:31:42:
77:43:46:de:1e:7d:4c:db:4e:61:0d:a4:d9:ba:e4:fa:68:60:
8c:c5:4c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:37:26 2025 by rpki-client