Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JhniQvwEHSOfDH2sEtj9chPYa68.roa
File: JhniQvwEHSOfDH2sEtj9chPYa68.roa (raw, json)
Hash identifier: EgNb+1nZttY25el3LoM+XOwwdrnAxrzOq0jJKYQy9xg=
Subject key identifier: 26:19:E2:42:FC:04:1D:23:9F:0C:7D:AC:12:D8:FD:72:13:D8:6B:AF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C2D355E2777BAEBF898156D33F58F8A73
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JhniQvwEHSOfDH2sEtj9chPYa68.roa
Signing time: Sun 03 Dec 2023 01:05:21 +0000
ROA not before: Sun 03 Dec 2023 01:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:2d34:c4fe/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2d:35:5e:27:77:ba:eb:f8:98:15:6d:33:f5:8f:8a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 3 01:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2619e242fc041d239f0c7dac12d8fd7213d86baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:40:a8:92:c9:77:65:0a:aa:13:49:dc:63:
d3:3c:72:31:91:90:99:a6:b2:19:3e:4a:1b:0e:3c:
87:64:ca:1f:52:97:8d:49:7f:21:a4:d9:ff:a4:4d:
a0:e3:58:21:17:90:d1:fb:f8:52:8f:f2:ce:ee:89:
e2:27:41:0c:9d:e0:32:84:3c:8d:4f:d7:75:83:92:
e4:a3:ab:ee:79:24:75:e5:29:8e:04:d5:25:06:9d:
60:05:f0:21:2f:80:f1:4b:65:f1:0b:bf:97:63:5d:
a8:b4:90:d1:b6:2e:db:20:44:df:e6:56:57:90:35:
ad:7f:fa:54:9e:97:17:15:4c:1f:d2:5e:40:6a:47:
72:3f:d8:25:bf:29:82:87:59:cc:dd:3c:fa:f2:12:
1d:9f:18:d8:ff:b9:91:e5:1c:4b:d1:f9:c7:c0:f7:
49:cf:a2:a8:fe:25:2f:41:7c:22:d3:18:7b:c2:4d:
17:a8:53:1b:14:13:a3:2b:3a:71:e3:d0:76:53:5f:
37:51:b3:f9:2c:96:9a:b4:6a:ff:3b:1e:88:3c:c8:
98:62:76:97:4c:e1:50:95:9a:57:94:6e:c6:f2:81:
7a:f5:18:11:51:68:fc:e7:38:8c:7d:00:71:0a:96:
5f:73:90:7c:b6:f9:22:81:6a:39:3c:5d:88:d4:1a:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:19:E2:42:FC:04:1D:23:9F:0C:7D:AC:12:D8:FD:72:13:D8:6B:AF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JhniQvwEHSOfDH2sEtj9chPYa68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:cd:91:e7:34:96:e2:9a:49:2b:cb:0f:4c:01:c0:b7:49:f9:
3e:89:7a:30:19:c9:cd:4f:5b:3c:ff:2d:f3:66:1d:8b:68:8d:
c0:7d:5c:08:d2:7f:d9:4d:78:47:dd:51:b2:f1:1f:4f:ac:06:
a2:8a:62:44:ae:dd:6f:1d:c2:66:71:04:43:e8:d5:3f:56:c2:
09:93:e2:d7:51:04:46:fc:a3:4e:1c:e6:45:5b:56:0c:b6:e6:
28:68:a8:b6:45:d7:bc:f6:82:ed:1c:10:9f:61:97:cb:c2:a0:
9e:9d:70:ae:1e:ac:63:27:c3:99:94:53:92:3c:3a:c0:ae:27:
77:28:82:1d:da:39:91:c6:2c:87:24:57:3b:49:e3:03:61:1f:
ac:d9:f6:e8:ee:e2:79:05:96:8f:5e:9d:f6:2a:dd:91:2d:e9:
a7:a4:92:76:a2:71:92:77:63:15:d4:ef:cc:d1:22:e6:a2:8e:
58:ee:43:09:67:1c:28:13:3a:28:22:e2:f1:0b:e3:a0:53:45:
e0:43:42:32:b4:56:e3:40:77:e2:94:e8:e2:f6:ea:5c:6d:5f:
6c:6e:e9:5d:2d:37:a6:74:1b:da:21:f4:a5:79:ee:e3:21:48:
b6:0f:08:19:40:04:cf:80:32:2a:3b:4a:ac:60:7a:95:a9:7b:
87:e0:f8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:26:09 2025 by rpki-client