Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JxtvfcbbdWwhmtZVo44rX-NpH6E.roa
File: JxtvfcbbdWwhmtZVo44rX-NpH6E.roa (raw, json)
Hash identifier: It6hpZg0YjClA0XAigeCStBbAl/HyCsiw1H107MGfdE=
Subject key identifier: 27:1B:6F:7D:C6:DB:75:6C:21:9A:D6:55:A3:8E:2B:5F:E3:69:1F:A1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B7DB4771424048462E9DB8AA9DD76072F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JxtvfcbbdWwhmtZVo44rX-NpH6E.roa
Signing time: Sun 29 Oct 2023 23:11:00 +0000
ROA not before: Sun 29 Oct 2023 23:11:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:7dae:a95a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7d:b4:77:14:24:04:84:62:e9:db:8a:a9:dd:76:07:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 29 23:11:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=271b6f7dc6db756c219ad655a38e2b5fe3691fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:7f:f5:c7:bd:fb:91:39:01:36:25:5e:61:
a2:91:cf:26:82:4a:c4:fe:bf:a8:3b:55:60:a2:db:
52:48:e9:f3:93:16:a8:0f:9c:d8:8e:34:29:e6:c3:
8b:aa:d3:77:d0:f2:86:6e:22:1c:18:df:2d:62:ef:
33:bf:d0:ac:4a:01:b5:35:89:08:74:e7:f5:1e:3e:
05:f4:99:33:d9:4f:c9:79:43:b1:2b:40:c6:40:36:
00:03:55:81:26:02:15:96:ad:9e:24:50:33:a6:31:
6c:91:5e:e6:e0:fb:76:58:80:74:85:19:ed:ab:e2:
0a:76:a6:25:a3:04:f9:85:88:8f:79:a3:9b:1c:e2:
f7:a4:c5:26:87:87:e9:d9:c5:a0:1a:9b:22:b9:b0:
9f:ce:5b:72:bd:3f:e4:bd:08:1b:f0:5d:75:57:63:
77:27:80:e7:dc:8a:5c:b8:02:92:34:53:11:1e:8b:
84:e3:c4:53:ac:a3:ce:a9:68:0e:36:3b:b9:3f:4e:
cf:7c:9d:1f:05:65:a9:1a:2b:07:bd:37:29:dc:53:
ff:66:29:ef:f0:44:21:ce:c8:88:a3:1d:b5:0d:e9:
da:a1:14:9c:33:dd:6c:e9:7e:00:1c:23:61:d7:e1:
36:2b:02:14:bb:1a:4d:6d:fb:3d:6d:8c:24:05:ea:
b9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1B:6F:7D:C6:DB:75:6C:21:9A:D6:55:A3:8E:2B:5F:E3:69:1F:A1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/JxtvfcbbdWwhmtZVo44rX-NpH6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:10:d8:fd:0c:9d:b4:45:87:5d:e6:bd:c2:05:98:31:dc:95:
56:b0:34:4d:b2:29:2d:ef:9f:d7:d2:a8:1f:82:5a:97:a5:5d:
d6:14:57:b0:7c:99:4d:97:0b:f1:6e:31:f9:33:38:bd:e3:e2:
89:d7:d3:9f:f2:d9:0c:f2:a0:f5:6a:3e:2e:dc:4f:44:58:58:
bc:22:a2:a1:71:8c:65:fd:33:83:4e:73:48:da:ef:bd:da:2a:
f1:e3:48:84:12:19:69:78:7b:15:2c:c3:f7:63:35:e6:be:9f:
d4:23:7e:28:0a:d8:a4:da:49:74:12:9e:e7:c3:30:80:f7:02:
9f:02:d2:42:dc:69:65:c9:0f:b3:16:dc:ec:3f:17:b6:39:ed:
ce:c5:01:aa:fa:b1:7b:df:8d:33:11:22:15:59:28:16:ed:2b:
4f:b0:fb:2c:42:2a:a0:f3:04:5b:b6:2a:44:62:6f:92:05:28:
86:3a:f1:20:f2:31:fa:4f:a0:32:bb:67:7e:23:37:5a:1b:6f:
d0:07:ef:65:ca:77:64:28:19:b4:6b:55:fb:ff:db:5c:e6:8e:
d9:05:7b:4f:6f:d9:2a:d2:71:20:aa:1f:0f:67:01:95:3e:51:
57:d3:eb:21:44:9d:3a:6d:25:1f:c5:9f:c7:f1:fb:16:b3:fd:
21:29:10:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:03:08 2025 by rpki-client