Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_67vh6BVITQloGzcpA7ikohiL6I.roa
File: _67vh6BVITQloGzcpA7ikohiL6I.roa (raw, json)
Hash identifier: YPTXO1dVMs8IzhgMma8huudZ6ObucvEqXhmNF90cF0k=
Subject key identifier: FF:AE:EF:87:A0:55:21:34:25:A0:6C:DC:A4:0E:E2:92:88:62:2F:A2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD5768A3228AEA5F3BA90C522C7C23871
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_67vh6BVITQloGzcpA7ikohiL6I.roa
Signing time: Thu 16 Nov 2023 00:09:57 +0000
ROA not before: Thu 16 Nov 2023 00:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d5:76:8a:32:28:ae:a5:f3:ba:90:c5:22:c7:c2:38:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 00:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffaeef87a055213425a06cdca40ee29288622fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:15:b8:91:19:55:4d:ca:bc:bb:38:91:d8:f1:
17:07:56:00:bc:e5:b0:83:3b:1d:01:d2:a2:ab:75:
41:2d:d2:5d:19:50:b2:71:7e:c6:5b:38:5f:a2:98:
ed:54:07:d6:34:31:a9:67:e6:a7:a4:d0:f2:f2:16:
4c:34:37:20:fe:14:cf:0e:b1:bc:2d:1e:e5:9f:7b:
61:91:5f:3f:3a:d0:2f:c6:d0:0b:b7:11:cc:5a:a1:
27:4d:10:cd:c9:54:48:b2:78:f9:c7:b2:bb:7c:49:
3f:05:09:37:44:a4:87:2c:ca:93:17:ae:70:ca:5c:
eb:b1:da:23:e9:51:f2:c4:28:ff:0c:1f:e2:0c:f6:
31:c5:2d:92:17:87:9c:e2:fb:36:5b:7a:ce:51:ca:
4d:f4:8b:fb:c2:1a:5c:9b:87:77:2f:20:8e:ea:d9:
2f:6d:3c:2a:fc:39:97:ae:c2:b6:b9:fa:b0:da:ab:
8f:cd:96:10:c4:36:71:ec:20:ad:d0:c2:fa:5b:f6:
f5:70:cd:79:73:ce:93:2a:6e:d7:b3:a4:28:91:f8:
07:4d:80:a6:8d:ca:47:cc:3b:75:e2:72:a9:b9:13:
72:9a:92:9b:69:06:ce:18:08:99:fc:e7:8a:3d:ff:
42:60:d2:b1:bf:40:49:fc:65:3f:ed:38:53:9c:be:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AE:EF:87:A0:55:21:34:25:A0:6C:DC:A4:0E:E2:92:88:62:2F:A2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/_67vh6BVITQloGzcpA7ikohiL6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:9d:c7:96:cf:c9:5c:61:ab:b7:e2:78:63:28:74:bc:5a:f7:
7a:8f:40:3e:8c:a7:72:d1:07:98:5f:1d:8d:8d:ca:5c:2e:7f:
59:24:3e:a7:f6:3d:ec:aa:f5:2d:5b:31:54:82:61:fd:ce:8f:
fb:5a:1f:4c:f9:74:95:64:12:b7:4c:74:f7:94:89:e1:57:26:
64:e3:19:63:4c:f1:bf:16:59:ef:ee:96:a3:4c:64:df:90:df:
ba:37:22:6e:38:e1:c7:7d:58:df:7f:c1:67:46:26:0f:fd:88:
6c:d1:e0:e3:be:08:d7:7a:7c:b0:0d:74:bc:c6:7f:0a:07:98:
8f:82:49:5c:cf:65:65:9b:7a:24:09:cc:8d:8f:9e:fe:85:23:
9e:d9:4d:e2:ae:69:be:ea:a7:8b:2e:d0:4c:d3:42:6e:4e:09:
70:e7:09:57:ce:99:ed:fb:22:78:6e:13:23:7a:cc:88:23:f3:
75:eb:d8:d0:df:a4:89:bb:c9:91:1b:9f:e5:f2:76:a5:39:00:
28:2a:3e:22:d3:09:f8:21:88:89:fb:4a:99:02:74:f3:97:87:
8d:29:39:68:de:80:54:ca:fc:60:27:11:8b:49:b7:ed:51:a2:
6a:15:29:f3:9b:a9:14:e0:51:68:b7:d5:01:2c:d6:e9:6d:c6:
3f:67:b4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:18:13 2025 by rpki-client