Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jCY3HnpjFKoGwfL7DMwx75hwi_Q.roa
File: jCY3HnpjFKoGwfL7DMwx75hwi_Q.roa (raw, json)
Hash identifier: AEUCyZt/l70w5Df0XR9tsrdidNKzLzVh9w1cmXogffU=
Subject key identifier: 8C:26:37:1E:7A:63:14:AA:06:C1:F2:FB:0C:CC:31:EF:98:70:8B:F4
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD91ACDF6E5B86E374E9F06963B24B098
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jCY3HnpjFKoGwfL7DMwx75hwi_Q.roa
Signing time: Thu 28 Sep 2023 00:05:27 +0000
ROA not before: Thu 28 Sep 2023 00:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:d91a:2930/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d9:1a:cd:f6:e5:b8:6e:37:4e:9f:06:96:3b:24:b0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 00:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c26371e7a6314aa06c1f2fb0ccc31ef98708bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b3:3a:ef:c3:12:5f:f5:cc:43:ff:e8:40:d8:
aa:ff:95:db:e1:d6:37:df:23:1d:26:b2:12:f4:94:
dd:54:82:57:02:b3:33:e6:7d:97:1a:e7:36:d3:fa:
89:b5:50:fc:01:fc:33:09:3b:7e:32:06:c3:ce:0f:
0e:b2:ee:06:24:06:5b:a9:14:79:92:e0:43:d2:fc:
1b:0a:a8:73:6d:af:48:24:28:46:a9:20:26:54:df:
c9:3f:81:b4:b6:aa:9d:a6:71:8b:00:cd:4a:76:50:
1e:e1:ed:96:f0:2a:38:ab:57:ca:1e:fb:20:55:2b:
3c:83:bd:8b:fc:36:f6:59:44:e2:1f:15:49:fa:eb:
a0:75:5d:6c:78:72:0c:e0:33:eb:68:8d:af:c3:e2:
84:2c:cc:05:ec:22:68:22:8a:cb:10:c1:79:61:fb:
9e:e5:18:d6:07:9f:73:b2:d5:02:b9:f8:1d:8a:6b:
a4:d9:ab:63:9b:b4:ec:d9:90:f0:bc:01:6e:c3:bc:
85:1d:25:62:20:5a:82:f4:2c:13:5a:7c:ab:01:d7:
74:1c:27:81:67:21:89:92:fd:a1:25:99:ec:89:a3:
5f:da:80:d0:ee:fc:30:b5:75:f9:1a:2a:61:73:6e:
c2:ba:98:81:09:c2:03:04:55:21:12:28:6d:cb:39:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:26:37:1E:7A:63:14:AA:06:C1:F2:FB:0C:CC:31:EF:98:70:8B:F4
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jCY3HnpjFKoGwfL7DMwx75hwi_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:e5:3f:aa:48:9d:cc:7a:71:98:23:5c:74:32:57:37:76:f2:
79:e3:1d:8f:48:ce:e6:5d:d6:d6:53:55:71:8a:4e:08:ed:76:
aa:d0:21:af:d1:29:43:2f:7d:9b:13:e3:ea:11:ea:34:59:ef:
23:26:64:b4:96:b1:9d:ef:7f:13:36:20:24:32:82:57:2a:8b:
d3:47:ca:c8:f3:c5:7e:b4:46:ca:ab:fc:77:88:db:0a:0b:3a:
de:af:b7:75:d0:60:0a:d7:a6:39:44:3e:af:d9:ce:07:48:41:
40:ee:6b:1a:a8:92:92:fd:1b:b7:89:21:b2:70:e6:13:e6:24:
09:60:5d:07:6a:08:28:91:24:c0:89:b5:b5:28:61:da:f0:56:
49:60:7b:bc:1c:81:8d:85:65:ad:d9:af:23:c3:41:d2:7c:2e:
f8:44:84:dc:18:65:14:25:89:3b:c9:88:b9:54:60:c3:70:46:
e7:c6:34:e3:a4:5c:26:da:ee:3b:71:92:c9:74:63:48:25:10:
1c:13:10:d1:62:e9:f3:11:0a:a1:bb:d6:92:60:55:e9:94:9e:
de:27:88:de:ba:b5:96:50:1d:d8:b5:13:bd:0f:65:53:6c:3c:
f2:2d:62:fb:8d:9b:16:d3:94:b0:65:cc:4a:0f:93:87:1f:d0:
33:eb:3b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:08:15 2025 by rpki-client