Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NFaYyfVxXIluPAlRXZZvcEn1tx0.roa
File: NFaYyfVxXIluPAlRXZZvcEn1tx0.roa (raw, json)
Hash identifier: tyoGvAZzF5+Yr/ALf620oKKojvwhF2EKkYv/Q7OCMTY=
Subject key identifier: 34:56:98:C9:F5:71:5C:89:6E:3C:09:51:5D:96:6F:70:49:F5:B7:1D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B2C92BBD12CEA327962EB2B35BD2CFA70
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NFaYyfVxXIluPAlRXZZvcEn1tx0.roa
Signing time: Sat 14 Oct 2023 05:04:55 +0000
ROA not before: Sat 14 Oct 2023 05:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:2c92:3a7e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2c:92:bb:d1:2c:ea:32:79:62:eb:2b:35:bd:2c:fa:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 14 05:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=345698c9f5715c896e3c09515d966f7049f5b71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:b8:c2:82:83:c8:96:0a:f4:87:1a:59:cf:
f4:ba:d1:2e:48:d4:f3:de:31:22:9e:ab:a4:02:39:
4d:fe:b7:15:f3:4c:a9:de:af:a3:df:08:71:f0:38:
75:ce:89:de:cb:ee:68:00:8d:f0:7d:b1:42:19:35:
e7:6d:2c:19:65:cf:a7:b8:8a:6c:07:e3:15:5c:8f:
43:71:91:94:68:63:a3:eb:21:64:9a:db:aa:2a:0f:
20:2d:c8:e5:93:49:c4:d5:2f:b0:dc:ca:d6:b3:7b:
cc:98:88:39:88:6d:05:3b:d0:7d:3c:16:de:06:ab:
1d:7e:54:40:fe:89:73:4f:3c:a7:7b:5b:34:b7:43:
49:79:a3:76:62:1e:e3:b9:74:0d:94:79:4a:4c:25:
da:d3:23:66:7c:95:ea:7a:d6:ac:6b:f5:bc:32:ae:
a4:55:8c:17:ef:2a:7f:19:f5:67:79:1d:b5:6b:6e:
f6:73:91:85:4b:3c:81:59:7b:f1:11:85:a0:52:ae:
90:9c:43:b3:11:88:60:c1:e3:0c:12:c5:4c:56:30:
08:a5:07:c5:eb:8a:28:78:99:98:e0:45:55:90:6f:
51:29:0e:c7:50:09:ae:02:fa:60:28:d0:3d:6e:ba:
db:28:7c:25:b8:ca:7b:5c:e6:e6:58:93:f5:c6:39:
6c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:56:98:C9:F5:71:5C:89:6E:3C:09:51:5D:96:6F:70:49:F5:B7:1D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NFaYyfVxXIluPAlRXZZvcEn1tx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b7:3f:28:f1:c6:fe:13:fb:3e:54:bb:84:ec:b4:6b:f8:ca:ac:
6a:dc:c2:82:32:b6:3d:41:23:f8:38:ed:e9:c0:fe:c9:ac:7f:
4d:d9:c9:e7:cf:f4:d0:17:8a:b3:2a:75:c5:77:39:0b:bc:5e:
ee:d1:3e:72:ed:84:c7:1e:4f:58:5c:7a:6f:07:2b:a8:c9:fc:
f3:2b:95:3b:ae:29:df:cc:f5:0e:98:40:2d:f7:89:af:93:e6:
e6:0a:5a:6b:83:29:79:c8:1f:cd:db:02:b8:b4:1c:db:ad:61:
0f:8c:ae:1f:a4:7e:20:41:e9:22:2a:25:94:2d:db:06:23:5b:
35:d2:47:45:9d:06:5c:80:fa:51:39:01:53:c9:60:a7:2c:ca:
81:36:fb:ed:97:f9:62:29:55:a0:d9:9f:85:92:0a:e6:6d:ee:
b5:4c:35:37:d4:4f:6f:de:66:c7:18:65:f4:4c:af:c2:b0:5f:
42:26:28:e0:52:27:25:db:f8:50:59:ff:8b:d7:f0:59:af:b0:
90:12:58:5d:f8:ee:69:73:64:db:c9:9c:ef:f5:43:95:c6:16:
25:b3:9c:6f:3e:23:00:ce:7e:0f:d3:18:24:d4:c9:f3:27:4d:
d6:d6:05:19:8d:a1:08:d8:67:2e:30:73:4f:a3:ba:1f:a1:78:
9d:07:ce:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:38:00 2025 by rpki-client