Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/i7xdcOvhXHNiNNcQ9KShBwPc4Fk.roa
File: i7xdcOvhXHNiNNcQ9KShBwPc4Fk.roa (raw, json)
Hash identifier: uQXu9tdqDgmorE/xzOsSga3EabAshzC+CU6pk6eMY/w=
Subject key identifier: 8B:BC:5D:70:EB:E1:5C:73:62:34:D7:10:F4:A4:A1:07:03:DC:E0:59
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B676A373D81C5533CC17C585FD10F786C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/i7xdcOvhXHNiNNcQ9KShBwPc4Fk.roa
Signing time: Wed 25 Oct 2023 15:18:15 +0000
ROA not before: Wed 25 Oct 2023 15:18:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:6a:37:3d:81:c5:53:3c:c1:7c:58:5f:d1:0f:78:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 25 15:18:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bbc5d70ebe15c736234d710f4a4a10703dce059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:c1:52:34:e7:58:bc:3e:b0:54:87:27:08:
a5:5a:14:b7:b1:6e:f1:95:c3:8b:f1:e0:f8:0c:5e:
c3:24:bd:fb:8c:1c:3f:f9:35:bb:ba:00:38:e7:d6:
ad:63:96:14:c2:89:fa:34:f8:ca:af:c7:a6:2f:48:
d6:16:60:4e:68:0f:45:2d:4d:ab:9c:62:3c:a1:97:
15:dc:43:d2:3a:aa:44:0a:bb:a8:27:90:c7:a3:51:
ca:a2:71:34:91:91:17:a7:73:ec:ae:34:b2:80:39:
72:86:83:d2:71:a7:17:67:37:32:b5:70:b2:de:b4:
93:cd:7e:9d:7f:9f:25:cd:3c:4c:1f:2b:2f:d4:83:
12:ed:04:9e:2b:93:ba:80:ef:81:6d:0d:d3:7c:1b:
b0:c6:8a:1c:c6:6c:1e:9a:d3:04:d1:aa:1b:67:b2:
50:a7:63:51:1e:96:7b:c8:12:f1:02:7e:49:23:f0:
39:38:91:be:6f:38:38:db:b9:8d:23:64:e8:84:9d:
d6:23:c0:ae:6d:4f:65:83:52:db:85:4b:1f:2d:e4:
7b:8b:c3:92:64:80:bf:b0:c3:ce:b4:22:56:b6:42:
e9:6a:0f:6b:82:86:2c:c8:9e:b0:e1:2a:3e:1a:36:
57:88:21:7f:59:17:8b:dc:04:e2:b5:d7:8e:7a:16:
60:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BC:5D:70:EB:E1:5C:73:62:34:D7:10:F4:A4:A1:07:03:DC:E0:59
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/i7xdcOvhXHNiNNcQ9KShBwPc4Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:78:a4:88:c0:52:7b:f6:4c:4f:a7:57:82:8c:4b:c2:3a:b5:
e3:02:cb:da:f7:bc:e3:e1:3f:62:78:49:02:00:f0:a9:1b:13:
28:5a:41:b6:19:2c:23:0e:31:b4:08:8f:55:fd:05:fb:c1:00:
3f:52:3c:2f:27:1e:1c:5c:e0:d0:74:49:b1:bd:89:c6:40:d4:
0d:82:11:76:9c:9b:b7:9f:e3:81:14:dc:93:b1:82:9d:ed:32:
cc:ca:0f:aa:cf:9b:50:e4:33:fb:e9:e9:da:61:39:71:c0:4e:
66:9b:e4:6e:41:e8:d7:9f:9c:fe:9f:45:66:2b:e5:be:d6:0a:
f2:80:18:a2:96:7f:a8:9f:b2:13:a5:9f:03:ac:25:27:9d:b5:
6a:ef:8a:a3:46:89:e8:7c:9c:1a:52:a6:1d:bc:06:18:da:d2:
df:33:f5:95:ec:8b:e4:b4:ac:c4:87:a1:57:e6:bf:76:f2:a8:
39:6f:b6:49:5b:75:bd:73:b9:9a:6e:7f:54:1a:af:aa:c1:5c:
d6:bb:14:7f:08:18:14:33:3b:32:4c:ad:4d:7d:7d:c6:1e:1b:
42:2e:06:6d:61:06:66:d9:31:e7:e4:17:94:1e:c3:f3:df:a0:
04:f2:b7:1e:83:18:61:a0:f8:b9:fc:f1:fd:a8:96:a3:8b:9c:
a4:0f:ba:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:18:07 2025 by rpki-client