Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/loEzRSR2m1MvmyvHR0QCm2wzoZg.roa
File: loEzRSR2m1MvmyvHR0QCm2wzoZg.roa (raw, json)
Hash identifier: gcNtYYpKUcdLrOi2qh0Itjk9yvT+4qVLbxBUTF5uAgE=
Subject key identifier: 96:81:33:45:24:76:9B:53:2F:9B:2B:C7:47:44:02:9B:6C:33:A1:98
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0FA3EFCA89A5F702B6E14598994DCB95
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/loEzRSR2m1MvmyvHR0QCm2wzoZg.roa
Signing time: Sun 08 Oct 2023 14:14:43 +0000
ROA not before: Sun 08 Oct 2023 14:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0f:a3:ef:ca:89:a5:f7:02:b6:e1:45:98:99:4d:cb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 14:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9681334524769b532f9b2bc74744029b6c33a198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5b:82:8d:8d:9c:e4:0e:0f:56:dd:7d:c5:6a:
78:78:59:37:55:88:62:12:f0:e8:e8:db:79:1a:7b:
70:5d:81:12:5a:0e:23:4c:4d:aa:4b:84:64:b5:78:
7c:61:d1:02:bb:12:8b:4c:96:84:f3:b3:e9:b4:b4:
04:f5:00:cf:f4:79:4d:28:73:1b:17:bf:15:3d:78:
3b:a9:61:99:69:c5:f8:62:45:aa:d3:33:59:3a:71:
c4:c3:b2:2a:50:6c:5c:ed:81:65:e6:2c:de:da:6b:
68:81:81:50:58:15:3d:01:60:bc:43:cb:2f:57:c2:
fa:8f:1e:0e:56:43:b6:26:20:8d:86:4f:ad:8c:a0:
e5:af:b8:f6:0c:a2:e4:ed:3c:da:3b:44:d2:78:a9:
a0:6b:74:e1:d9:33:8e:82:62:cc:d8:10:83:5f:62:
7f:79:d4:cd:35:f0:53:8d:41:aa:94:87:c0:7c:3b:
d3:19:a9:e2:a8:53:51:e0:44:62:3d:7e:5e:83:e2:
c4:91:0e:33:e3:36:6b:fd:d0:f4:cd:00:30:86:6e:
64:ad:6e:b9:f0:37:ba:1b:fe:e4:23:6d:cd:56:56:
cc:75:96:02:24:ae:af:36:9e:0e:12:b2:df:f5:c4:
fd:6b:1e:29:f8:73:89:21:64:98:34:87:4b:7f:2b:
39:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:81:33:45:24:76:9B:53:2F:9B:2B:C7:47:44:02:9B:6C:33:A1:98
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/loEzRSR2m1MvmyvHR0QCm2wzoZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:12:fd:74:66:98:79:f8:72:b0:59:df:7d:16:68:64:bd:97:
92:c9:5e:bb:0a:be:ed:53:48:9b:64:0b:60:13:3b:c9:2e:eb:
27:a0:af:ba:49:b1:a4:43:81:32:34:bb:b2:10:38:3f:a5:f3:
32:93:89:dd:92:1a:3b:20:a1:d4:f2:04:ef:2a:1f:cc:da:1f:
fa:bf:60:e9:b8:d1:99:b8:33:f9:9b:58:9d:7c:7c:8a:15:ff:
2f:f9:c4:31:e1:53:b3:75:6a:84:ac:40:61:8c:7e:e1:43:7f:
b3:58:2f:8a:82:aa:61:b3:9e:f7:61:c8:d9:51:17:9f:01:fc:
85:8a:37:26:24:97:b0:15:34:8f:09:88:9d:bd:a9:0d:12:07:
a9:cf:a3:15:be:b3:0c:dc:0f:82:89:6b:1e:f4:ed:a4:c2:5c:
ef:65:b3:9d:aa:bc:6f:b1:70:8b:0b:7f:da:25:8e:2c:fd:ed:
5c:9f:40:d4:92:84:85:fb:7e:33:04:1c:c0:ef:d4:75:72:b7:
d7:57:63:9b:71:b3:67:49:31:bb:4a:45:fa:30:64:d2:9d:35:
42:23:1a:10:03:43:44:b2:2e:e4:ff:3f:c2:4d:83:c1:e3:f2:
13:89:c3:bd:3b:f6:e2:1c:88:c6:e7:1f:1d:43:56:cb:d1:b6:
fb:e6:64:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:44:20 2025 by rpki-client