Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nVejLyXpC9a5wshTTA0aNmN1D1k.roa
File: nVejLyXpC9a5wshTTA0aNmN1D1k.roa (raw, json)
Hash identifier: 2/HlJy0z8bZagXHBBF2CsrA71AB0bDS+a5CMPITTs3s=
Subject key identifier: 9D:57:A3:2F:25:E9:0B:D6:B9:C2:C8:53:4C:0D:1A:36:63:75:0F:59
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5FDBB49D8511ED9D6F58B7FF1B3660D8
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nVejLyXpC9a5wshTTA0aNmN1D1k.roa
Signing time: Tue 24 Oct 2023 04:05:15 +0000
ROA not before: Tue 24 Oct 2023 04:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18b:5fdb:193c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5f:db:b4:9d:85:11:ed:9d:6f:58:b7:ff:1b:36:60:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 24 04:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d57a32f25e90bd6b9c2c8534c0d1a3663750f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:99:84:71:ae:37:a2:2d:a9:62:7c:a5:5f:
4c:34:57:2b:a8:7b:05:49:b3:23:72:e8:f0:b5:f8:
74:38:8f:da:4c:36:ff:cc:ea:40:04:70:38:94:43:
a3:d2:9e:f9:fb:06:80:9c:22:eb:8d:38:91:17:98:
e2:74:53:33:1a:bf:2f:69:9c:2e:22:d7:de:f6:4a:
82:ec:69:81:c5:75:ca:ac:e3:af:83:4c:5d:aa:b2:
2c:37:59:5a:ce:83:cc:93:1f:16:dc:be:90:ff:18:
81:0b:d0:7e:6f:13:47:c5:e3:38:07:c0:b5:6b:31:
8d:3f:70:46:50:97:79:aa:65:7e:af:40:88:6d:e1:
b5:18:28:14:33:1a:b1:ab:52:98:df:55:b7:77:85:
32:ac:21:df:61:7a:fc:16:ae:f6:7c:9e:1a:6f:6b:
3d:1a:af:ef:d9:94:97:56:55:12:f8:8d:e5:98:97:
a9:d5:77:48:30:be:ca:47:df:cd:23:e5:1a:7c:c4:
ac:8a:a8:1c:a9:97:9e:30:93:5e:d7:0e:f4:6a:0b:
cc:f0:83:80:32:bf:9b:68:eb:3b:c1:c3:63:5a:58:
ba:d6:2c:f4:02:04:80:8b:9b:6f:7c:09:ed:2c:0e:
14:64:ad:9a:e4:c0:28:68:c1:80:65:83:54:6b:f2:
c3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:57:A3:2F:25:E9:0B:D6:B9:C2:C8:53:4C:0D:1A:36:63:75:0F:59
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nVejLyXpC9a5wshTTA0aNmN1D1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:35:9a:53:b4:a9:bd:b0:63:8f:2f:df:ca:22:5c:8f:f6:19:
01:7f:62:3e:40:19:d1:9e:32:64:fe:3b:c6:44:8a:32:be:52:
4a:e3:cc:41:e6:7f:13:a4:f3:ce:d4:fc:a2:2a:fd:84:83:d0:
90:7e:eb:f0:db:34:fc:af:42:f9:29:72:21:ab:74:df:11:ce:
45:4f:7d:b8:2c:05:7b:ce:43:26:7f:ed:41:10:ef:79:49:4c:
7b:5a:db:94:c4:e4:dd:42:c0:ac:83:28:13:4b:14:0d:e4:83:
98:6c:9e:5d:b6:5f:49:b1:02:b1:6e:14:ad:2c:5e:49:4f:04:
72:c6:a2:93:2d:6a:f2:f8:a3:1f:12:f7:4a:34:f7:3a:58:1d:
cc:9b:a0:79:3c:79:c3:18:bc:21:1d:0d:ee:92:30:06:90:ac:
6b:87:6e:58:8d:d0:33:12:15:96:6d:4e:43:3e:b8:5e:ed:04:
b9:75:f9:06:10:21:9b:d6:92:b6:72:dd:e6:b2:34:96:96:a9:
b6:8b:ca:36:67:43:1d:cc:4a:36:1c:e8:91:81:a0:8c:28:5a:
c1:5d:9c:43:af:9d:64:7b:ae:03:37:ea:0a:ad:14:6d:d3:5d:
23:cd:b3:00:cb:24:e1:38:60:40:40:08:78:dd:45:32:11:27:
c9:3f:b7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:04:31 2025 by rpki-client