Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R_Y3jaMCjq2hrXOeChAXSmGz_ng.roa
File: R_Y3jaMCjq2hrXOeChAXSmGz_ng.roa (raw, json)
Hash identifier: KYhO79Lm/ThK+4TJUQZ4NqGi2fbvKgsNpdy7sTauapY=
Subject key identifier: 47:F6:37:8D:A3:02:8E:AD:A1:AD:73:9E:0A:10:17:4A:61:B3:FE:78
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C20C26B004FBF2AD40E6D9AB280269891
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R_Y3jaMCjq2hrXOeChAXSmGz_ng.roa
Signing time: Thu 30 Nov 2023 15:04:21 +0000
ROA not before: Thu 30 Nov 2023 15:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:20c2:3060/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:c2:6b:00:4f:bf:2a:d4:0e:6d:9a:b2:80:26:98:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 15:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47f6378da3028eada1ad739e0a10174a61b3fe78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:81:11:83:1b:b3:1d:e1:0a:ee:66:4b:7a:d2:
0a:68:20:4f:6a:30:37:d7:94:46:4a:a2:9e:ae:55:
3b:77:f3:ed:3b:c4:e4:96:6b:25:01:fc:59:ac:d3:
06:31:0d:b9:07:76:c6:18:0f:59:eb:00:b3:25:d4:
37:fb:e5:b6:2e:6c:6f:1c:b6:eb:66:4c:39:78:a1:
b6:a2:3f:54:c1:12:b1:95:3c:cf:0c:52:16:79:92:
34:bd:d2:f6:d8:af:d2:0e:a2:f3:4f:7d:52:ca:91:
40:88:fa:3a:d5:a1:7f:df:8d:78:b3:60:5f:ed:c3:
0a:5e:aa:42:02:09:98:52:59:19:23:67:79:65:7f:
53:55:88:bd:ee:aa:0c:0d:96:35:1b:fb:d9:7a:0e:
2e:cb:5b:b7:25:6f:d4:e0:17:ca:2b:38:3a:4d:49:
ec:b0:ae:1d:70:7c:77:66:cc:85:e9:f8:3b:04:a5:
7a:74:ee:76:15:32:b9:be:53:fa:2b:14:72:32:05:
a7:d1:96:e7:cc:d9:d4:82:4e:39:51:d1:06:0e:9e:
c5:ad:5f:26:fd:d0:fe:ba:3d:48:b9:92:e2:ed:1e:
cd:25:19:aa:65:61:fa:de:9d:38:31:37:da:0d:00:
01:06:56:8f:34:47:9c:f2:fe:1f:1c:1b:f5:59:1d:
3b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F6:37:8D:A3:02:8E:AD:A1:AD:73:9E:0A:10:17:4A:61:B3:FE:78
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/R_Y3jaMCjq2hrXOeChAXSmGz_ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:ba:8b:f2:56:7f:4e:eb:0e:72:2d:31:34:00:81:7c:7c:d7:
ac:48:6f:fa:51:ab:b0:f1:f3:4c:c7:31:97:e5:a1:67:f4:54:
78:43:1f:05:89:3d:67:6a:dc:d7:13:5d:64:ea:ec:0a:27:f5:
24:fb:ae:f6:3a:2d:19:ef:d8:2f:ea:68:72:df:fe:2f:09:2f:
ad:e7:86:d8:f3:23:17:81:27:6b:34:f1:13:82:bf:15:aa:c5:
39:61:6f:14:ec:fc:8b:32:ff:d0:de:ea:33:f6:9b:d7:2f:45:
28:e2:e4:be:ca:98:b1:6f:e6:ca:79:71:da:7f:1a:57:34:dc:
4a:5d:42:f4:19:84:cd:d2:f7:58:d2:8c:be:e4:ac:b3:22:1c:
54:76:e7:08:93:15:26:1f:c4:0b:00:51:a5:a9:e4:54:16:f8:
c5:1b:c3:cd:af:06:0a:6a:91:30:63:15:33:8e:27:3c:80:95:
a0:1a:f3:8b:61:dd:1a:3f:a5:2b:6e:2f:d6:77:33:ec:a2:0a:
88:09:5a:78:f0:fb:3d:f4:a0:11:da:61:f3:7e:12:09:c4:54:
37:47:dc:1d:a4:57:e0:08:0c:62:a2:35:1d:9c:5f:39:a0:60:
82:6e:49:9b:77:e9:5a:9e:9f:17:41:8f:12:b0:d6:59:ac:0f:
fd:dd:d9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:17:38 2025 by rpki-client