Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-Jop78IIEIvtvgeLyNWICwhb-SU.roa
File: 1-Jop78IIEIvtvgeLyNWICwhb-SU.roa (raw, json)
Hash identifier: XrqersWcnJXUfXgXDRsPE7Hu+lgYTFXD9cHjR/qtA3M=
Subject key identifier: F8:9A:29:EF:C2:08:10:8B:ED:BE:07:8B:C8:D5:88:0B:08:5B:F9:25
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4084CF732F362DB5A5C16AFDCE03F6EC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-Jop78IIEIvtvgeLyNWICwhb-SU.roa
Signing time: Wed 06 Dec 2023 19:04:54 +0000
ROA not before: Wed 06 Dec 2023 19:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:4084:6293/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:40:84:cf:73:2f:36:2d:b5:a5:c1:6a:fd:ce:03:f6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 6 19:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f89a29efc208108bedbe078bc8d5880b085bf925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:d6:51:93:74:d3:89:e3:8c:c8:34:34:f3:
f0:f6:c0:3d:9e:50:ea:d9:3c:be:e6:93:b5:04:12:
76:fa:a6:d1:86:6b:55:ba:4a:6e:71:ce:9c:f4:d2:
2d:bd:8a:5f:d1:8a:bb:65:91:30:15:74:82:70:65:
9f:7b:d5:a0:cd:85:14:ad:0f:07:64:03:ed:87:86:
de:6f:74:09:ad:b5:db:4e:34:4f:5b:37:d2:a9:04:
07:9d:cb:56:6a:0a:a3:32:c3:61:69:98:f8:09:7d:
59:23:56:0f:4a:a9:84:e0:10:90:65:5e:79:72:35:
3c:e7:aa:41:39:4e:7d:5a:10:29:b1:26:e1:49:7f:
ff:e1:0c:00:ee:da:ce:2c:b7:ee:68:f1:aa:51:53:
24:4d:81:08:8e:5d:4f:45:f8:18:d6:cf:0f:92:91:
fe:fc:b1:1e:a0:d6:2f:69:0d:f7:a7:17:80:98:19:
9c:a5:16:1c:1b:a1:1d:5e:8d:dd:02:73:46:1f:e5:
97:72:a7:10:c0:8f:fd:a1:92:e4:1e:41:ea:9e:90:
81:d3:fd:b8:17:20:81:40:4c:31:24:26:89:53:41:
95:ac:f4:5c:88:9a:1e:26:f1:91:8c:15:68:07:bb:
86:f8:f5:67:3d:8b:b8:e7:e5:cc:35:a0:28:53:9a:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9A:29:EF:C2:08:10:8B:ED:BE:07:8B:C8:D5:88:0B:08:5B:F9:25
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/1-Jop78IIEIvtvgeLyNWICwhb-SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:90:32:31:cb:12:36:26:23:dc:21:de:58:d1:48:62:35:fa:
d3:b1:cb:94:2f:78:52:9d:cc:27:e5:7c:87:3e:e7:b8:ec:d2:
cb:ed:ea:04:07:68:ca:8b:31:03:1a:06:3d:5a:b2:d5:09:d7:
78:2d:65:79:17:b9:55:34:94:62:c8:e0:9e:ec:38:d3:ca:4f:
18:ce:85:4c:75:e8:4f:a7:97:63:22:24:b0:e4:7a:dd:7b:57:
da:5e:bb:58:79:a3:5e:d8:19:3e:3e:db:12:42:4f:19:ff:82:
34:de:87:af:c3:8a:5e:1c:da:f7:d0:a3:f1:1d:98:32:04:a8:
4a:0b:b6:51:21:05:c7:e9:87:8a:e5:a6:35:2b:b6:fc:f0:79:
d6:cd:ee:74:f2:45:06:b2:e0:32:9f:3f:b5:57:92:78:ca:f2:
9c:be:12:76:37:2f:d6:94:70:79:78:a5:03:f5:6b:46:10:4c:
29:d2:64:ed:ca:94:91:b1:06:6e:9f:db:aa:5b:ca:f1:f4:6f:
3e:95:5a:26:de:7f:50:67:39:d2:4d:7b:86:1e:ae:d6:8c:cb:
b2:23:61:3b:00:8b:51:31:bb:40:55:a0:fd:b6:68:4b:72:f4:
f5:bc:87:ab:af:0a:58:3e:77:1a:fb:40:79:68:60:d0:9b:19:
72:fb:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:48:31 2025 by rpki-client