Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SFpFaJcU6AFviVdEdfXPUWN6nng.roa
File: SFpFaJcU6AFviVdEdfXPUWN6nng.roa (raw, json)
Hash identifier: Mo6y83KqW+AQyOKFsXZ5mCak5oSiUvW8LypXDKXOUmk=
Subject key identifier: 48:5A:45:68:97:14:E8:01:6F:89:57:44:75:F5:CF:51:63:7A:9E:78
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C3E966E152A5E31CF1A52227F13F8B48C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SFpFaJcU6AFviVdEdfXPUWN6nng.roa
Signing time: Wed 06 Dec 2023 10:04:55 +0000
ROA not before: Wed 06 Dec 2023 10:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:3e95:a928/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:96:6e:15:2a:5e:31:cf:1a:52:22:7f:13:f8:b4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 10:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=485a45689714e8016f89574475f5cf51637a9e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3d:6d:10:1e:9d:cb:6c:6d:cb:93:e1:c2:90:
5f:71:fd:ca:fa:a0:c6:42:6b:60:61:0d:4b:f7:ba:
26:b1:dc:fc:06:00:7b:2e:8b:ed:69:3c:b6:7c:74:
d2:81:1b:0d:d6:b3:03:39:41:81:c0:9b:a0:7f:a3:
f0:8a:d8:d3:f4:92:00:fc:d1:9c:7c:8e:54:7d:4e:
cd:4e:af:45:2b:6d:af:70:e5:0c:d3:7a:4d:34:d7:
55:5e:91:46:b7:ad:cb:50:d3:3e:db:6a:13:eb:38:
13:98:e4:33:8c:49:83:4e:1b:f4:bc:90:45:e2:33:
44:b3:e8:78:9c:2b:f7:1f:59:44:63:31:e9:79:5e:
25:0f:4e:10:9a:c7:50:f2:d3:83:d6:ea:42:2a:bf:
b3:b9:88:e3:e4:87:92:fa:dd:0a:80:c9:22:99:55:
c0:44:77:fc:0b:97:96:12:c4:68:26:21:7b:0d:7a:
af:fe:7b:d1:2d:fa:f4:64:6c:84:e8:d6:13:f6:9f:
ba:52:3e:fe:e9:e0:ea:16:b5:27:dc:f5:a2:6a:6b:
0a:b8:db:33:b1:33:82:83:97:77:3c:72:3c:d6:e5:
fe:af:bb:2e:8b:1f:b9:e7:a8:4a:95:85:0c:72:af:
e7:0c:82:5c:a7:5f:39:ca:22:34:66:82:e0:f6:81:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5A:45:68:97:14:E8:01:6F:89:57:44:75:F5:CF:51:63:7A:9E:78
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/SFpFaJcU6AFviVdEdfXPUWN6nng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:d9:27:2f:50:97:db:7f:a1:f0:ac:01:9b:a3:a2:19:3b:ab:
f1:ba:56:01:12:94:31:78:2a:ec:41:ff:ab:71:65:6f:04:1d:
da:e5:cb:6f:f4:2c:4c:f9:7a:fc:cf:e5:a8:2e:1a:6f:fa:08:
3d:ef:4b:bb:0e:85:47:15:37:e5:2f:8c:d1:fa:81:de:f0:ff:
aa:b2:0e:7e:3a:1e:50:fe:d2:ea:df:d3:62:66:d7:d5:65:a4:
ab:8b:d6:28:6f:3c:f2:43:e5:d8:0d:ed:a6:4b:ed:a1:1f:b3:
9a:00:45:bf:92:a7:91:82:92:4c:28:05:9d:08:66:b3:91:a7:
13:00:69:c6:75:3c:f1:11:20:e8:1b:3a:55:d5:9a:41:cc:88:
ae:7a:1a:49:12:9d:8e:db:41:e5:8d:23:25:82:b9:8f:aa:8a:
a2:c2:cb:3f:e7:e8:7c:b7:e5:6b:5c:fb:e0:4f:da:20:b4:62:
ac:82:2e:66:cf:de:d7:f4:31:3b:65:96:1c:8a:2d:33:26:94:
22:30:4f:ca:26:8e:90:3f:91:05:db:9c:68:29:7d:7f:42:84:
22:c7:ca:c0:cc:60:17:62:aa:25:c2:aa:be:71:31:af:2f:35:
10:47:91:79:ae:b6:3b:64:c1:04:91:13:07:02:3c:ae:1a:00:
18:59:c7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:43:47 2025 by rpki-client