Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lTW-9_sFJyQshrQ6I2IthFF_njc.roa
File: lTW-9_sFJyQshrQ6I2IthFF_njc.roa (raw, json)
Hash identifier: Ht3lREtJ9dL3x37nRGholnkh1nCLSStV5iIXAghfG7E=
Subject key identifier: 95:35:BE:F7:FB:05:27:24:2C:86:B4:3A:23:62:2D:84:51:7F:9E:37
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C09CDA5E72D5571377209FE698D983806
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lTW-9_sFJyQshrQ6I2IthFF_njc.roa
Signing time: Sun 26 Nov 2023 04:05:21 +0000
ROA not before: Sun 26 Nov 2023 04:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:9cc:d39b/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:09:cd:a5:e7:2d:55:71:37:72:09:fe:69:8d:98:38:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 04:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9535bef7fb0527242c86b43a23622d84517f9e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:74:c1:81:86:50:77:d0:e5:2f:98:cb:50:f4:
5e:d7:1d:69:59:15:55:2d:1f:8e:ee:dd:bf:19:9d:
8a:b0:75:d4:ad:d9:14:4b:fb:79:69:47:57:12:d9:
e8:76:45:4e:9d:ab:a3:d8:54:2d:41:07:51:b7:58:
fa:63:3c:aa:c7:e5:3c:1e:34:07:22:45:8a:f5:2d:
3b:d5:54:85:f8:5d:92:7a:13:5c:66:91:59:83:76:
f8:99:e3:86:34:f4:7f:b5:e8:3c:5e:40:27:aa:59:
af:4b:1c:b0:75:14:d6:24:b9:ef:1e:26:6e:d6:b2:
e5:6b:db:ca:5f:75:ee:57:cd:09:31:08:60:9b:4b:
f2:52:3b:1a:50:3a:50:6b:51:34:7d:c7:39:9e:54:
5d:e6:ff:6a:32:1c:63:13:89:27:72:82:a8:2c:64:
0e:0c:2c:40:9c:59:5b:b1:ce:29:9f:f3:f9:a9:83:
38:22:63:a5:2d:6e:9e:03:47:1c:68:d8:dd:3e:0e:
7c:8c:26:cf:4e:ad:8d:47:c6:58:9c:9a:1f:5e:3f:
be:9f:eb:fe:c6:14:3b:8d:4a:7b:59:8f:1a:aa:b8:
4c:76:15:3e:bd:9d:54:92:67:18:49:2c:8d:d9:2c:
63:0b:dc:5a:44:58:98:b4:2d:6e:3d:1b:c3:38:85:
03:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:35:BE:F7:FB:05:27:24:2C:86:B4:3A:23:62:2D:84:51:7F:9E:37
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/lTW-9_sFJyQshrQ6I2IthFF_njc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
d3:bd:a1:17:f8:af:2b:54:cd:bd:25:e2:78:b2:45:0a:3d:41:
81:52:30:91:c7:fb:76:a7:37:04:7d:17:c2:48:03:fb:02:5c:
f6:0f:48:6e:14:22:5e:16:3a:7a:35:82:78:42:ef:c5:6c:ac:
ef:45:6e:40:6b:27:d1:81:55:a7:e6:53:ac:0d:05:97:68:13:
e9:dd:6e:a5:58:55:94:ef:6f:ce:ab:1c:a6:0a:1b:06:5a:6b:
2c:90:88:3f:08:21:d0:74:7c:21:56:0d:1c:26:64:a6:04:e0:
f4:4c:8c:af:51:3e:75:95:ca:19:8d:01:a5:be:3d:f0:5b:2c:
d6:d3:bd:39:f1:1a:6c:a6:0c:81:2a:9d:cc:24:3a:44:57:55:
d3:a0:09:df:68:4b:34:d5:bb:73:92:64:b1:ed:b4:f3:58:c0:
22:a6:76:ff:3e:a6:74:23:79:57:e2:15:6f:54:1a:d7:7d:87:
d2:17:88:52:e2:d3:ee:22:0c:b1:8c:e2:39:25:1c:9f:5d:2c:
a9:4c:ae:cb:7c:4a:36:06:e6:0c:a4:c8:ea:f9:98:ac:88:01:
d1:db:36:79:d8:98:3f:3c:e5:a2:81:3b:2b:d9:6e:26:bd:c4:
18:dd:f8:8b:4c:5a:38:8a:2b:c3:05:de:e7:a4:96:e7:27:dd:
92:92:ea:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:10:32 2025 by rpki-client