Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jyglgbnSAsCgQmQnwWoefcMfCrE.roa
File: jyglgbnSAsCgQmQnwWoefcMfCrE.roa (raw, json)
Hash identifier: 3PrfV6RtIj9OJuC0L2t6SGrysOcCux5RyHMxB9ZUs4A=
Subject key identifier: 8F:28:25:81:B9:D2:02:C0:A0:42:64:27:C1:6A:1E:7D:C3:1F:0A:B1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BD2030D1FDDF70C2B6790A9F6097C680C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jyglgbnSAsCgQmQnwWoefcMfCrE.roa
Signing time: Wed 15 Nov 2023 08:04:57 +0000
ROA not before: Wed 15 Nov 2023 08:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:d202:9406/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:03:0d:1f:dd:f7:0c:2b:67:90:a9:f6:09:7c:68:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 15 08:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f282581b9d202c0a0426427c16a1e7dc31f0ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:14:83:4f:df:25:1c:95:86:11:11:15:8e:
32:bf:63:ca:e2:9e:9f:27:35:28:4b:9e:53:9e:4a:
e8:93:13:a3:12:0a:82:f5:50:92:bb:7c:e1:db:7c:
b5:fc:01:b1:c5:c5:bd:2f:9b:31:71:1f:27:8d:27:
ad:2e:a2:93:4e:23:39:d1:75:af:2d:e2:e8:7b:e1:
ba:cb:d2:e2:38:4e:bf:63:c5:ca:81:4f:5f:fb:ee:
5d:e3:85:05:79:b2:92:07:57:d1:b8:ad:0e:98:6b:
cb:bb:7f:9a:53:db:28:b4:19:a5:5e:e1:3d:e2:6d:
a3:bf:a7:f4:d8:35:06:60:53:88:04:5f:fd:12:9f:
29:da:6b:c9:5a:1b:ed:30:17:fe:4c:f8:eb:b5:12:
b3:b6:b8:97:77:00:64:e6:46:35:d4:9f:97:84:68:
f2:00:c0:a7:ef:b6:3b:ff:85:89:f4:1b:70:02:5d:
1b:f4:83:89:36:05:17:25:dc:e1:64:dd:4f:45:91:
31:53:9a:a1:a8:29:2e:df:88:93:41:6d:6e:83:6d:
17:e9:5a:50:df:cf:74:67:9f:5b:ba:73:8f:b2:e8:
40:bb:05:8b:35:d2:57:9d:76:5c:5a:a0:15:3d:82:
0b:19:3e:8b:98:19:1d:82:80:55:5b:83:bb:a4:a6:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:28:25:81:B9:D2:02:C0:A0:42:64:27:C1:6A:1E:7D:C3:1F:0A:B1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jyglgbnSAsCgQmQnwWoefcMfCrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
bf:22:50:ca:77:85:5d:7e:f4:fe:53:32:8d:dc:a7:75:65:7a:
12:af:dd:e4:d8:82:87:ba:c2:0a:09:3f:ca:64:08:56:73:be:
e1:2c:65:64:6a:e1:bd:44:93:98:e8:b5:81:c8:ae:86:f6:a9:
5a:79:32:63:e2:22:24:8c:ad:5d:b2:49:ce:49:03:dd:8d:fe:
d5:3c:50:b1:01:13:56:81:e5:22:86:39:fb:fb:0c:46:13:07:
e0:58:11:2d:79:1f:ad:d7:fc:0a:d9:ac:fe:ac:eb:d6:93:af:
36:65:fd:a6:67:a4:81:0b:b0:7d:49:06:c2:07:ef:c0:db:15:
a9:1a:e6:60:c5:03:f0:d1:25:1f:56:e3:11:03:a5:ef:39:0b:
60:d7:5d:c7:24:dc:12:2f:7f:5f:94:d9:69:ac:7f:23:3d:f3:
5c:6d:f1:2f:cc:f9:c1:af:0b:dd:54:3b:d2:2c:0e:9a:91:70:
20:29:69:09:6d:d8:5d:02:47:fa:88:9c:b6:74:01:5a:50:e0:
6c:db:0c:7b:b7:65:fa:e1:9d:cb:31:8e:83:04:b5:c3:23:cf:
c2:b5:e7:28:aa:bc:0e:8f:84:8a:63:31:c0:73:a5:42:85:74:
2a:e4:d7:e8:4a:f2:8f:33:9a:54:00:5d:24:fc:4f:cc:03:f6:
e7:d2:9b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 22:09:33 2025 by rpki-client