Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nBxA4bZCVidIrkh21CJuYtgJtGg.roa
File: nBxA4bZCVidIrkh21CJuYtgJtGg.roa (raw, json)
Hash identifier: wUx81L0Zj/BL7wyGwp1T/6kZkVov3EoM1D/f1QNaoKw=
Subject key identifier: 9C:1C:40:E1:B6:42:56:27:48:AE:48:76:D4:22:6E:62:D8:09:B4:68
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0E1B2CDA16B9F58F19DA55B405B5A2E8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nBxA4bZCVidIrkh21CJuYtgJtGg.roa
Signing time: Sun 08 Oct 2023 07:05:43 +0000
ROA not before: Sun 08 Oct 2023 07:05:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:e1a:5507/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0e:1b:2c:da:16:b9:f5:8f:19:da:55:b4:05:b5:a2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 07:05:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c1c40e1b642562748ae4876d4226e62d809b468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9d:38:fc:f5:5f:f3:26:fd:75:0e:47:1f:47:
2e:31:32:2a:a0:97:cd:c3:8e:a5:bc:a2:59:be:0b:
a0:96:87:bf:df:c4:0e:87:78:21:25:7b:17:7b:29:
a2:50:e0:a6:a1:23:12:e0:73:9d:22:a5:c7:72:be:
bd:6f:7e:1b:35:bd:6c:1e:dd:99:05:de:a7:6d:6f:
7e:a4:4d:a5:0e:bc:07:ae:69:1e:c8:6e:28:3b:51:
a8:6f:c4:3e:4c:5a:5b:6d:9a:33:d4:58:3e:9f:91:
eb:35:40:e5:6e:04:32:03:64:bd:ea:f0:6d:3f:40:
b2:5d:a4:fa:c3:3b:86:aa:5b:c3:cc:e2:96:77:99:
8e:97:fb:e7:ac:44:7d:18:88:fd:2b:aa:b1:f1:9f:
b7:52:44:14:0e:5f:60:ac:15:dd:06:55:ec:e2:b1:
c3:fe:c8:ee:f4:eb:4d:b5:3d:cc:a3:14:47:b9:26:
29:e8:82:e2:85:19:b0:f1:70:62:35:73:81:44:59:
65:d0:ee:f5:d3:ba:da:9e:14:1a:6f:97:d0:a6:d2:
4b:bc:e9:79:fa:d4:0b:ad:1f:c4:a7:92:b1:01:a6:
32:c9:0b:27:af:a8:10:ce:9b:05:d8:99:e4:65:40:
d0:05:dd:34:a1:03:05:58:c8:2b:2b:2d:33:d0:74:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1C:40:E1:B6:42:56:27:48:AE:48:76:D4:22:6E:62:D8:09:B4:68
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nBxA4bZCVidIrkh21CJuYtgJtGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:24:54:c7:31:c5:cf:e2:2f:4a:70:20:ef:e4:b8:e3:51:37:
ac:4b:cc:a6:d1:ab:4b:a3:1b:b2:3b:aa:62:78:e9:52:c4:8a:
26:5a:ec:fc:78:df:d6:f7:73:01:ea:b3:e1:0e:79:d4:be:c5:
a3:25:a0:9b:f3:94:ad:ac:77:05:2d:80:af:b7:f0:04:ac:d3:
df:20:06:58:5a:e9:77:db:a6:33:b1:13:93:19:52:57:09:e4:
3f:67:53:33:d4:03:c4:bc:38:39:45:fc:ed:0d:90:11:40:33:
0a:56:a9:02:97:4a:88:ad:06:2d:a2:d9:3d:b8:9b:f4:2b:fb:
43:37:82:55:3a:37:e2:2b:a9:a4:c9:1e:13:71:ae:59:cd:8e:
c5:c3:43:40:d8:2d:b3:74:ab:06:0f:bb:53:5e:1a:bc:e8:2b:
59:6b:81:44:d8:02:0e:f3:0d:8d:9b:ee:4c:bf:7d:ec:da:3d:
34:0e:18:44:15:e0:c7:a2:16:fe:ac:6c:74:13:30:fe:dc:ad:
5f:88:3f:8b:0b:0b:73:11:de:fb:28:fc:52:92:13:f5:09:9f:
fd:1e:ab:4e:c5:7e:40:10:d8:e8:1c:2f:1e:e7:2d:29:64:9c:
d5:44:38:90:c6:89:0b:f4:05:9c:ba:c0:18:58:e3:43:3a:50:
f1:82:43:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:42:47 2025 by rpki-client