Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Nrjax4dvnYEEQD6cbtyGH2pdzRo.roa
File: Nrjax4dvnYEEQD6cbtyGH2pdzRo.roa (raw, json)
Hash identifier: 4NhDTalp3igmkdL3ece2w4sJBDf8ko32KZ9qSRF2z20=
Subject key identifier: 36:B8:DA:C7:87:6F:9D:81:04:40:3E:9C:6E:DC:86:1F:6A:5D:CD:1A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ACF0441BDFB29E672F56FE03D47C5BDF7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Nrjax4dvnYEEQD6cbtyGH2pdzRo.roa
Signing time: Tue 26 Sep 2023 01:04:37 +0000
ROA not before: Tue 26 Sep 2023 01:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:cf04:5a7/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cf:04:41:bd:fb:29:e6:72:f5:6f:e0:3d:47:c5:bd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 01:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36b8dac7876f9d8104403e9c6edc861f6a5dcd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f7:bc:46:e3:f3:43:e2:e7:45:5f:16:49:c4:
13:3b:2a:6a:6d:98:63:88:98:11:34:56:b6:5f:80:
b6:b7:cd:f8:58:c9:de:6d:5a:70:1a:fd:14:fe:87:
86:f2:5f:5e:09:67:2f:0d:bc:1e:c1:72:3a:6e:9d:
ea:f2:85:a2:a7:61:e9:66:40:14:2d:30:2e:fe:c1:
05:d4:37:78:91:86:2c:e6:d3:c8:9c:56:85:84:cb:
1f:c3:07:5f:4a:84:37:6c:66:2d:d4:49:ab:0c:d8:
d8:f2:d4:62:f5:e9:1a:a9:4f:75:97:80:9c:6c:20:
df:2c:22:d3:a4:d3:11:e3:c4:50:a8:c2:a9:97:30:
58:f4:a1:c6:2d:00:c2:9c:71:a2:8d:1c:6d:dc:b8:
3b:a1:13:66:dc:ac:bd:35:09:33:b7:d3:3b:83:fe:
a2:dd:63:7c:9d:e2:86:43:b2:90:8d:2e:70:4d:0f:
b7:16:d8:8f:61:87:07:1e:70:e8:2f:45:b8:62:ac:
0e:c0:61:84:35:d1:57:3f:0d:18:f3:49:13:35:e6:
05:dc:7f:9a:1c:5e:8d:56:3c:c4:cb:48:ad:45:03:
3e:93:16:20:61:5f:45:fe:a2:f3:d6:51:0e:1c:4b:
75:ed:8a:99:24:ff:e8:55:42:38:bd:cb:3e:8b:bb:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B8:DA:C7:87:6F:9D:81:04:40:3E:9C:6E:DC:86:1F:6A:5D:CD:1A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Nrjax4dvnYEEQD6cbtyGH2pdzRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:42:8a:da:22:78:83:c0:d9:a9:29:bf:97:88:48:78:c8:35:
6a:46:74:ec:69:30:34:6d:af:9b:07:ef:e4:85:f2:7f:4a:82:
c5:1a:31:82:71:44:d0:11:d7:74:a9:94:ad:22:9d:3d:7b:35:
dc:bb:90:60:c0:a1:18:48:b0:64:da:2c:0c:20:f1:28:18:9d:
06:e4:83:b3:ef:33:e7:7f:92:ad:56:4b:9b:13:29:91:03:8d:
ec:f1:a6:21:e3:97:58:00:5d:8e:62:f4:29:d3:87:4b:16:86:
54:84:a0:41:d9:71:b6:aa:05:42:b0:12:e3:71:bd:bf:af:51:
89:21:16:37:55:79:6b:62:99:98:52:7f:11:73:03:cf:fc:05:
21:70:3d:46:7f:42:7c:50:58:c8:88:74:02:e4:10:dd:4f:d0:
0a:45:8f:63:4a:89:48:43:10:17:c9:f8:7c:42:88:98:3c:a0:
a3:35:ed:da:dd:ee:d2:5b:23:42:2f:9e:d9:10:e2:09:85:80:
35:7a:51:09:ef:98:2e:e8:b3:20:02:e7:58:2a:7a:dc:8f:4a:
bd:01:e4:1a:31:4d:fa:14:1d:8a:4d:a2:3a:bb:a7:ec:79:09:
4d:78:98:da:89:60:e4:d5:c2:54:d8:84:a2:be:47:cb:8a:f3:
f8:28:88:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:48:24 2025 by rpki-client