Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jq__Kp04n2PCOc4pSE7md3Ffqno.roa
File: jq__Kp04n2PCOc4pSE7md3Ffqno.roa (raw, json)
Hash identifier: Eu+Mbdfe61Ubjo85YsIcsXBjR7kwioihQTGMuWqxtWU=
Subject key identifier: 8E:AF:FF:2A:9D:38:9F:63:C2:39:CE:29:48:4E:E6:77:71:5F:AA:7A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B57F05B534144F0ED33D0FBAD40B6DAD0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jq__Kp04n2PCOc4pSE7md3Ffqno.roa
Signing time: Sun 22 Oct 2023 15:10:51 +0000
ROA not before: Sun 22 Oct 2023 15:10:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:57ec:11d4/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:57:f0:5b:53:41:44:f0:ed:33:d0:fb:ad:40:b6:da:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 22 15:10:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8eafff2a9d389f63c239ce29484ee677715faa7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:4f:68:c6:5b:13:a1:ed:9a:8a:9b:3a:1b:
5e:df:45:36:8d:b0:dc:66:ea:9c:8d:1c:23:4e:ec:
18:55:c7:e8:a6:41:aa:24:cd:23:9b:9a:32:fc:02:
80:34:34:96:ae:79:ae:fe:6b:00:ea:48:64:f4:86:
8f:99:9c:9e:8e:45:90:c6:86:8b:fe:64:79:f4:96:
35:42:ea:e4:4e:ce:0b:f3:ce:7e:03:7e:27:36:9c:
4f:b8:9f:6d:01:6f:95:7f:0d:d4:8b:cf:ee:55:e7:
67:9b:bb:66:83:33:b9:23:9c:6c:5b:59:ef:a5:c1:
31:cd:e1:a4:c5:f3:af:8d:b7:8f:59:e6:72:04:d6:
df:6c:c1:ac:cc:1c:02:16:81:da:3f:ee:3b:cc:b3:
e0:a1:71:a3:81:b9:d4:35:e9:43:f0:53:6e:b4:dd:
af:30:ae:f3:94:86:a2:7c:ad:19:f3:b6:77:aa:03:
4f:09:d4:ac:ad:d9:38:dd:58:09:85:98:47:68:de:
cc:ae:ef:af:0d:55:03:1f:7f:71:7a:b4:db:b1:70:
59:fb:5b:a9:d1:08:36:6a:b3:ec:49:c3:dd:f7:cb:
5e:a3:21:d2:ca:81:67:99:0f:4d:16:30:0c:64:75:
13:31:d7:63:be:ef:37:ce:72:93:27:eb:ed:c0:7a:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AF:FF:2A:9D:38:9F:63:C2:39:CE:29:48:4E:E6:77:71:5F:AA:7A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jq__Kp04n2PCOc4pSE7md3Ffqno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d0:69:9c:ea:7b:95:a1:eb:72:77:bb:2d:ff:7d:f1:56:a5:fc:
f9:61:88:5f:2d:1e:e8:c3:01:e0:fe:16:15:72:87:59:01:a1:
cc:90:12:41:e4:e6:36:be:93:e0:fe:e5:73:e4:19:45:e1:d0:
27:0a:ab:34:df:1f:3c:6d:98:d8:22:50:4c:95:90:13:72:34:
d5:0a:8b:0a:87:37:76:ed:75:49:48:bd:44:50:bd:62:84:2d:
b2:05:73:a6:45:b3:8e:e5:b2:98:09:6c:3c:ec:47:ea:26:92:
61:f0:c7:64:5c:89:20:e9:46:4e:32:df:74:7f:7c:f6:a7:97:
a3:2a:d9:ca:d7:58:66:8a:a1:7c:6a:0b:3e:5f:d2:15:ff:a7:
ce:f4:61:a1:b3:12:19:62:91:bd:49:90:3d:7b:d3:eb:d6:1f:
6a:00:a7:30:45:c0:f5:fe:57:08:d1:6b:96:05:56:9f:16:7c:
64:9c:b1:09:55:30:4f:d3:72:c8:d9:79:cd:10:ad:92:69:60:
c4:51:63:30:cf:0c:48:4f:f5:2d:22:de:bc:d3:78:50:55:a0:
eb:83:43:5c:16:3f:b6:0a:5c:21:2e:67:05:da:d7:08:ec:17:
53:91:02:84:44:9c:7a:8a:52:ac:b4:81:9a:38:de:78:c0:78:
9d:b1:d0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:55:51 2025 by rpki-client