Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ri92IP_nZwYuQRCerjry483piMc.roa
File: ri92IP_nZwYuQRCerjry483piMc.roa (raw, json)
Hash identifier: jGKUEq3C4wiuVu2k0eIz01WQ9W5P/aivxGWSy//2bhw=
Subject key identifier: AE:2F:76:20:FF:E7:67:06:2E:41:10:9E:AE:3A:F2:E3:CD:E9:88:C7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2B1935EC828AC52886027EDA0715BE86
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ri92IP_nZwYuQRCerjry483piMc.roa
Signing time: Sat 02 Dec 2023 15:15:21 +0000
ROA not before: Sat 02 Dec 2023 15:15:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2b:19:35:ec:82:8a:c5:28:86:02:7e:da:07:15:be:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 2 15:15:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae2f7620ffe767062e41109eae3af2e3cde988c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:b7:c8:7e:58:4d:1b:52:91:79:2a:82:10:
07:85:30:17:c1:f5:1e:7c:d7:8d:f8:bb:b6:7b:fc:
44:83:7a:a8:de:c5:59:68:d0:60:e6:7e:8f:12:03:
db:0f:de:2d:fd:1d:4b:14:54:6f:27:1a:e0:f2:ac:
81:3e:f0:87:9d:1b:3a:ca:c4:aa:77:86:50:7f:e1:
b6:0c:8f:f3:6d:4a:d2:e9:74:77:e6:fe:20:3c:e7:
fd:76:bd:4e:53:9c:61:26:97:ee:3c:bd:3c:a2:f3:
63:0c:3e:e4:27:ce:22:ad:51:bb:9a:47:75:dd:f7:
4d:0a:87:03:d3:a3:bd:ab:f7:ec:3b:dc:6b:de:e6:
4e:2b:dc:66:9a:f5:ba:e0:40:a5:bd:9a:8c:90:d4:
b7:4b:70:d9:8c:6f:fa:3f:dc:ed:c2:01:1f:a7:45:
9f:88:fd:04:14:f4:11:ac:44:90:15:e1:c5:df:0e:
35:dc:13:ff:12:bc:10:65:9c:53:95:4f:38:5a:fd:
c1:88:4c:f1:80:8c:b5:e1:52:ba:5a:be:8f:d5:e8:
74:ec:ae:6f:32:01:7b:17:92:2f:5d:bc:f9:ee:b9:
28:a1:1c:27:f4:8d:66:9e:f1:82:b9:cf:e0:4f:ad:
a2:7d:71:8f:a1:e4:1d:64:0a:52:18:40:11:4a:e7:
11:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2F:76:20:FF:E7:67:06:2E:41:10:9E:AE:3A:F2:E3:CD:E9:88:C7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ri92IP_nZwYuQRCerjry483piMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c0:34:da:ca:c9:40:83:38:c9:b3:9a:9f:55:6a:64:62:0d:29:
da:d4:cf:ec:1c:87:8d:0c:30:72:82:17:a6:b2:f1:40:d9:e2:
16:8d:eb:09:2a:6e:f0:fc:6b:a4:57:66:41:f4:4e:96:e2:87:
5c:68:60:b8:65:41:a4:9a:20:13:90:0f:fd:fc:47:bc:53:c8:
32:69:bc:e3:c4:e1:72:e3:44:38:c4:68:be:84:93:d8:29:32:
37:04:9f:d0:64:ae:c5:aa:11:34:64:d9:69:b0:79:85:dd:1c:
b1:47:64:a0:02:2f:5b:7b:ba:8e:2a:d9:fd:d1:8c:c7:11:ea:
e3:09:6a:7c:71:c8:f5:96:f1:6f:8b:7a:f2:e0:df:9d:bc:c4:
5f:91:60:bb:72:1f:6f:f7:fa:0d:66:9e:25:3d:a5:91:bd:78:
42:65:06:0d:c7:3e:4a:42:4e:15:70:97:91:86:fe:2b:5b:45:
49:1a:96:05:33:47:96:03:d6:d3:bf:c2:4a:84:84:7b:31:24:
b1:88:33:00:a7:72:0d:ab:c8:52:b3:20:58:84:24:8a:94:0c:
de:7e:e1:40:70:cc:ac:e1:84:92:43:09:b9:4d:71:39:37:71:
2e:42:98:ca:db:97:50:2d:06:59:1a:d6:eb:60:4d:a6:e0:71:
76:19:c5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:18:23 2025 by rpki-client