Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N7QXb0VOpeLk-ay9DwomAfKRd6U.roa
File: N7QXb0VOpeLk-ay9DwomAfKRd6U.roa (raw, json)
Hash identifier: gR0h3kNroDelK3bURiwcfXaZ+EDl+8o6NCBiHtevBCI=
Subject key identifier: 37:B4:17:6F:45:4E:A5:E2:E4:F9:AC:BD:0F:0A:26:01:F2:91:77:A5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB3C3F0DEF19A3880E4E8A20BC93E34BB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N7QXb0VOpeLk-ay9DwomAfKRd6U.roa
Signing time: Wed 20 Sep 2023 18:04:37 +0000
ROA not before: Wed 20 Sep 2023 18:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:b3c3:dcb7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b3:c3:f0:de:f1:9a:38:80:e4:e8:a2:0b:c9:3e:34:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 20 18:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37b4176f454ea5e2e4f9acbd0f0a2601f29177a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:15:71:ef:be:5b:fc:d7:26:e6:e3:8b:15:5f:
a2:c1:dd:9e:db:c9:15:cf:0d:5e:f9:2b:4f:21:a6:
fd:5b:77:15:ad:cf:b2:74:b7:59:c2:da:f9:a1:29:
6d:13:bc:05:f1:04:58:e6:4d:d1:8a:a4:a4:1d:2e:
82:60:9a:f9:bb:a6:89:b9:6e:a4:1b:64:3e:f9:a0:
e3:15:13:bb:3a:a5:8a:0f:4b:f1:24:74:88:29:f8:
ed:89:f4:94:be:84:39:b2:7f:0f:ab:d8:21:35:ef:
f9:bb:5b:8d:d9:05:5a:54:8a:e1:c0:64:5a:3d:24:
b9:dc:ea:a3:91:3a:c0:f0:ae:89:82:28:b5:7c:3d:
0c:a1:90:e9:5a:73:4e:5c:ff:81:6c:f4:42:86:65:
a8:2d:76:91:f4:43:fe:c5:b9:17:47:fc:7e:64:ce:
db:b2:6c:6c:5d:ac:7b:fb:90:6d:6a:e9:a0:1d:ca:
30:1f:64:80:bd:cf:7d:13:6b:0b:e3:ef:4c:30:2e:
3c:41:24:55:2c:2c:80:e0:e3:6d:88:2d:3e:1e:1b:
8f:86:c9:67:15:ab:37:3f:3b:37:a1:16:3d:69:56:
13:35:bb:12:04:c3:88:76:53:69:d2:5e:30:bf:f0:
aa:0c:f6:8f:27:b8:a8:86:7c:83:aa:a2:16:60:f2:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B4:17:6F:45:4E:A5:E2:E4:F9:AC:BD:0F:0A:26:01:F2:91:77:A5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N7QXb0VOpeLk-ay9DwomAfKRd6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:3e:89:f2:1c:dc:cb:5c:3a:09:1b:a5:50:55:ea:85:22:42:
8a:12:fb:80:30:26:f5:9c:65:fe:6c:a7:d9:06:96:29:9c:53:
91:b8:d3:9c:b4:99:ff:36:2c:7a:01:92:eb:0e:ce:80:91:a6:
26:6d:c3:49:ec:86:d5:75:d0:11:b7:00:e9:bd:a8:f2:31:28:
e8:e5:fe:f6:5a:0c:26:0b:e7:2a:c8:64:68:d4:71:5a:c7:ec:
4a:59:57:9d:96:e4:5e:b2:65:fb:e5:c7:fb:6b:66:7b:c0:8b:
57:f9:4a:27:c5:b2:86:2d:73:56:96:2e:2d:53:01:f3:72:1a:
af:df:e8:8e:92:0e:38:30:48:c4:38:84:95:f6:12:10:83:9f:
6e:df:c4:ad:af:fe:b8:0b:80:a9:6f:47:e5:47:cd:0b:bf:91:
f5:4a:82:4f:b3:5a:8a:6b:fb:73:4a:3b:fe:22:27:27:7e:88:
e0:02:7b:8e:46:74:2e:5d:c2:53:c0:5a:a3:c5:5a:83:7b:64:
5b:c4:39:e7:cf:9d:52:25:22:5f:a1:83:8e:a4:f1:3c:e9:69:
31:f2:2a:8a:24:b6:dd:1c:25:a7:3e:69:89:fd:93:21:fd:11:
a2:76:8a:c2:4e:a9:30:68:8b:72:d4:95:c3:73:c9:77:ca:b9:
8c:ab:56:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:48:25 2025 by rpki-client