Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kyPeZW_uWaqmS3lM1tClwqmMQwM.roa
File: kyPeZW_uWaqmS3lM1tClwqmMQwM.roa (raw, json)
Hash identifier: nu/Ov8+iND9O5phqdtIbDlrSZuPfIkm44RVDIQctcdI=
Subject key identifier: 93:23:DE:65:6F:EE:59:AA:A6:4B:79:4C:D6:D0:A5:C2:A9:8C:43:03
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0C330DD8DEF02C64B16CFB9205DCFAB1
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kyPeZW_uWaqmS3lM1tClwqmMQwM.roa
Signing time: Sun 26 Nov 2023 15:15:21 +0000
ROA not before: Sun 26 Nov 2023 15:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0c:33:0d:d8:de:f0:2c:64:b1:6c:fb:92:05:dc:fa:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 15:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9323de656fee59aaa64b794cd6d0a5c2a98c4303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:3d:56:32:9f:ae:11:1b:f5:33:e7:93:c1:
47:21:f5:76:53:70:55:39:65:6d:6e:87:15:59:87:
b0:84:a9:6f:27:5e:db:4d:d6:01:64:6a:ac:2f:24:
73:d4:ea:d0:5f:d8:e6:37:e7:4a:ae:a2:21:22:93:
d3:72:49:e2:74:9d:55:eb:f4:7c:dd:b1:21:39:2f:
45:67:c1:05:0f:5b:1e:3a:4f:f4:d4:df:5e:b2:71:
f9:bb:f4:7d:6f:ce:80:da:6f:b3:01:38:d6:97:14:
9b:d5:2c:1b:29:20:88:aa:fd:74:60:d3:d0:29:63:
24:82:a9:6d:2f:f4:26:0c:06:2c:0b:4b:f2:1a:d7:
72:59:08:9d:ef:60:47:1e:50:10:46:4f:f3:f8:7a:
6a:a7:ca:ac:a0:da:6e:b6:90:ef:fa:25:7a:c2:b2:
65:a6:96:aa:62:d3:bb:53:02:9d:ff:f9:ec:a4:da:
79:a1:8e:6a:fe:88:4a:0b:d2:ad:92:93:15:e1:4d:
4d:d5:d4:31:68:c2:30:cb:3a:62:18:9a:f8:91:9c:
37:bc:ac:d3:48:5d:40:d4:00:3c:25:ad:4f:a3:8f:
83:65:0e:2d:4b:0b:0c:e4:59:68:9d:d8:20:f6:87:
66:79:44:fb:09:92:ab:d8:e1:05:3f:d9:48:5a:c3:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:23:DE:65:6F:EE:59:AA:A6:4B:79:4C:D6:D0:A5:C2:A9:8C:43:03
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/kyPeZW_uWaqmS3lM1tClwqmMQwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:a2:f5:94:37:09:9b:69:73:9b:92:cf:81:be:bc:5c:58:bf:
86:d1:22:65:33:01:c7:91:38:a9:09:d0:a8:69:01:89:ef:95:
af:8e:8c:1f:01:c3:05:76:d7:ed:26:91:df:9d:65:f6:d7:70:
af:5f:bf:e7:ee:29:0e:b8:c5:72:a3:89:99:5c:e0:0f:f7:54:
94:48:f3:40:70:f2:a2:c9:3f:b8:80:40:18:3b:67:f1:f6:d5:
36:53:50:0c:a8:28:60:ec:a9:bd:0f:7f:a6:ad:23:29:52:2d:
ee:ca:55:af:a5:2b:8b:88:20:2b:93:68:91:a6:d6:2a:22:84:
bf:46:10:83:09:d2:8f:0d:87:c7:f9:c7:99:ce:8a:1c:c6:1e:
09:85:bb:93:a1:30:a6:ee:62:7a:c2:06:c7:85:8f:df:e0:b7:
f6:86:dd:46:50:e1:51:60:03:5f:e2:b8:78:da:e2:a2:cd:69:
8d:4a:11:da:31:39:a2:36:9c:ef:76:73:96:f5:78:f5:24:68:
d4:f3:32:ea:d3:f4:ce:23:e3:c1:f8:2d:68:7c:56:43:6e:bb:
14:a9:57:3b:dc:23:c3:10:13:18:89:b4:75:dc:a0:9a:d4:3c:
5c:32:ba:83:04:51:75:a0:b7:b9:6a:0a:61:f8:07:2e:e1:22:
f3:81:f2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:36:24 2025 by rpki-client