Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N19K9NnNXMdqNzCoLshVnM_WrtM.roa
File: N19K9NnNXMdqNzCoLshVnM_WrtM.roa (raw, json)
Hash identifier: DF6qhlGCQE/cf3E6ZgJBUVF0TEDbg3q/TEc5PxRtkTQ=
Subject key identifier: 37:5F:4A:F4:D9:CD:5C:C7:6A:37:30:A8:2E:C8:55:9C:CF:D6:AE:D3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD1296AC0ECF0FFAC643896913C6D3CBA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N19K9NnNXMdqNzCoLshVnM_WrtM.roa
Signing time: Tue 26 Sep 2023 11:04:27 +0000
ROA not before: Tue 26 Sep 2023 11:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:d129:50b4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:29:6a:c0:ec:f0:ff:ac:64:38:96:91:3c:6d:3c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 11:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=375f4af4d9cd5cc76a3730a82ec8559ccfd6aed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:19:e0:80:4d:08:91:d7:b7:a4:f4:65:fe:
b5:04:14:e1:66:00:6c:aa:b2:ee:07:d4:90:39:04:
c3:97:26:ab:93:65:e9:e9:89:26:d2:b0:38:65:b5:
6f:48:27:72:b6:d5:6c:89:f2:1b:a9:99:a0:4b:09:
75:66:77:ca:35:6a:21:4d:43:c3:d0:cb:2a:6f:5c:
15:01:c4:85:8c:6f:ad:a4:80:f8:8e:e0:39:7e:43:
5a:14:e4:c7:ad:9b:c1:2d:8e:04:be:07:89:40:03:
b2:f0:e3:94:4b:a7:ae:51:f4:b2:47:4c:9f:2f:0a:
0d:07:96:b7:47:eb:ee:dc:7d:ba:00:57:81:1a:39:
e8:59:a5:d0:1d:be:9c:85:35:fc:41:c8:ef:9c:d9:
19:e5:b6:82:ec:45:20:3e:5a:87:d8:04:9e:14:6b:
82:f0:76:92:d3:1d:6b:e6:8c:00:27:da:4f:42:5d:
b7:a0:20:08:79:20:f5:f3:30:3d:aa:65:f2:56:4f:
bd:a6:c8:fa:a7:61:0c:7d:f2:03:9b:55:79:ab:ca:
dd:bd:17:b8:aa:cb:52:34:8f:69:8f:37:ce:dd:af:
b8:cb:d3:cf:5d:7f:73:e1:ed:19:88:9c:92:a6:ea:
40:45:01:be:cf:2e:29:7a:25:a1:61:75:43:55:e5:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5F:4A:F4:D9:CD:5C:C7:6A:37:30:A8:2E:C8:55:9C:CF:D6:AE:D3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N19K9NnNXMdqNzCoLshVnM_WrtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:b7:17:b4:32:5d:1e:84:1e:84:45:69:8b:f6:34:03:44:9c:
8f:78:02:65:0a:ec:a1:30:81:02:ff:90:01:9b:e3:03:77:4a:
9e:3b:62:dc:7a:85:e5:7e:33:90:6b:3d:29:68:53:e3:46:70:
e3:ca:24:20:8e:1b:55:b5:08:36:89:c4:e0:aa:f3:39:70:66:
81:a3:59:c9:c1:1c:45:66:4b:8b:c2:f6:47:ce:52:7a:e5:73:
c6:ef:cc:c8:1d:0a:8b:15:92:f2:50:5d:47:71:eb:36:3b:a9:
ea:45:6c:6c:24:9a:38:12:8c:b8:61:10:b8:36:68:85:48:68:
59:09:13:15:79:61:5f:c6:2f:0f:9d:79:f7:fa:58:2e:8d:26:
2f:4a:7c:73:13:4c:ec:7c:48:88:f7:5e:ed:e0:2b:e6:6f:95:
a2:5f:40:c1:cb:84:8d:32:b7:c5:72:ed:b5:3e:8b:05:98:4b:
77:59:49:ce:85:dd:ef:62:94:cf:07:77:47:ce:1c:6f:3f:42:
a5:3f:11:b6:6d:e1:3f:c7:ae:dc:3f:e8:51:08:18:86:28:42:
9d:38:af:ff:75:e2:1a:9a:b1:92:9f:05:46:18:71:0b:38:05:
c0:c4:bb:6e:1a:ae:22:9a:75:6e:6b:16:3d:3a:6c:d2:6d:98:
69:2f:5b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:00:12 2025 by rpki-client