Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/k2RnfSzunzHJnPnFibx1c3q7LjE.roa
File: k2RnfSzunzHJnPnFibx1c3q7LjE.roa (raw, json)
Hash identifier: wc2uzim+fBa9qeggdmIeIv853WdcFjPLECCXxVXJ3xM=
Subject key identifier: 93:64:67:7D:2C:EE:9F:31:C9:9C:F9:C5:89:BC:75:73:7A:BB:2E:31
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD81038F204EFC2A4771580817573B171
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/k2RnfSzunzHJnPnFibx1c3q7LjE.roa
Signing time: Thu 16 Nov 2023 12:17:03 +0000
ROA not before: Thu 16 Nov 2023 12:17:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:10:38:f2:04:ef:c2:a4:77:15:80:81:75:73:b1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 16 12:17:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9364677d2cee9f31c99cf9c589bc75737abb2e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:3c:39:87:02:d2:27:b1:e9:eb:6e:1a:87:
6f:a5:d6:42:f6:33:2d:00:0a:3b:49:d2:03:49:1f:
1f:2a:1e:b2:41:cb:03:68:03:22:94:3d:60:81:69:
aa:51:31:ff:52:6d:73:93:46:a7:7e:34:c0:d6:fd:
6e:5d:5e:81:ce:82:b0:cc:22:4d:e2:c1:8b:3d:14:
d3:e7:a7:1e:d2:fb:a7:08:9d:8f:af:a4:fe:78:8f:
48:57:1c:75:2b:24:c4:7f:8d:a7:f0:eb:cd:74:55:
2a:59:ba:70:0c:3a:c3:24:a5:d3:3b:a9:0f:a5:da:
7e:21:12:df:26:49:96:28:21:d5:bb:dc:87:8e:3e:
5f:db:01:64:6d:51:3e:4c:9e:9f:95:d2:51:af:76:
c3:49:48:24:c5:3e:26:1c:40:ae:b3:29:5d:28:3a:
1d:6e:13:b0:5f:ea:7f:39:92:b1:f4:0c:9a:f7:1f:
85:da:15:dc:25:b4:61:e9:da:57:04:36:be:91:2d:
34:2d:a9:bc:45:fa:bd:92:dd:6d:19:2b:59:25:2c:
a2:40:67:79:50:64:16:a5:6c:e6:50:52:f9:86:cc:
cc:89:cd:e4:71:4f:58:19:bf:1c:4f:ef:73:99:e4:
38:f3:d1:6b:00:fa:e2:d8:95:66:19:14:d0:fd:5b:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:64:67:7D:2C:EE:9F:31:C9:9C:F9:C5:89:BC:75:73:7A:BB:2E:31
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/k2RnfSzunzHJnPnFibx1c3q7LjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:ce:23:10:a5:37:d2:bf:88:9c:fa:94:5b:5d:14:37:06:c1:
c0:2b:20:a3:ae:47:c1:e2:fa:fc:d7:37:88:7a:84:6f:5a:f7:
18:2a:f6:60:23:bd:ac:33:d1:06:6d:5e:6d:63:ef:2c:df:7d:
a2:00:93:db:cc:33:ca:3f:28:ce:71:26:b4:4f:00:56:88:cd:
83:ba:e6:d5:bf:08:3a:1d:58:38:e7:d1:d4:4d:0c:c6:d1:55:
75:26:7a:fd:b9:97:2a:0d:45:87:13:1d:51:33:31:74:6d:59:
93:56:9e:73:63:83:42:f6:11:0b:62:a5:5f:78:3a:39:07:35:
b5:3a:dd:00:23:20:0a:fc:a7:be:49:da:1f:0d:e3:76:cf:1a:
9d:d3:de:8d:dd:59:89:bc:e3:17:e9:ba:42:09:ba:4e:ec:fa:
a7:e5:7b:0b:e8:20:c7:77:c9:e8:01:29:b0:22:a8:ab:46:8c:
2d:1b:a5:9e:56:bd:59:4f:50:c4:57:0a:9f:6f:c3:98:54:27:
55:22:d5:75:af:6d:c3:17:18:fb:bf:3a:6f:53:5b:ce:82:46:
5b:f2:cd:3e:58:21:ac:ec:b5:74:b1:25:a4:a1:56:b7:59:e9:
1a:d6:1d:16:6c:57:bb:6a:4d:64:7f:b3:25:3b:61:27:bb:df:
54:43:db:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:31:23 2025 by rpki-client