Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jIxiltklvu7GXu3wyWMyI4QTeZw.roa
File: jIxiltklvu7GXu3wyWMyI4QTeZw.roa (raw, json)
Hash identifier: yAdXtJseoK7nn8XDgHKtMtGCp8pPciWjX3O7PxvzwFo=
Subject key identifier: 8C:8C:62:96:D9:25:BE:EE:C6:5E:ED:F0:C9:63:32:23:84:13:79:9C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B22F137FCDC793DC385956EA257135D72
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jIxiltklvu7GXu3wyWMyI4QTeZw.roa
Signing time: Thu 12 Oct 2023 08:11:55 +0000
ROA not before: Thu 12 Oct 2023 08:11:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:22:f1:37:fc:dc:79:3d:c3:85:95:6e:a2:57:13:5d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 12 08:11:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c8c6296d925beeec65eedf0c96332238413799c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:70:a6:e7:68:92:b9:df:02:6a:1f:fa:73:ac:
4a:4d:ba:85:54:a7:bb:ec:d4:1a:98:d8:3a:10:3c:
38:0c:22:45:a7:81:05:ed:92:98:d1:09:a1:6f:4e:
f0:0a:1b:34:1f:bb:36:ab:bf:bc:5c:6f:f3:0a:e1:
0b:a4:bf:cc:27:8e:ee:10:96:44:3a:c1:75:58:40:
87:70:ef:d6:c7:48:40:6a:29:d6:d5:72:e1:7f:00:
35:fe:5b:3d:23:ea:25:bb:e6:90:f8:ed:f5:dd:2c:
14:98:f0:bb:76:0e:56:25:ba:15:b0:27:a4:be:df:
ec:9f:87:9f:38:f2:25:86:56:b8:bf:8d:1a:60:33:
19:dd:1a:61:e0:77:00:ce:37:eb:2d:7b:27:6b:ff:
a8:61:3c:9e:d1:82:9e:54:58:08:db:72:63:4f:05:
cf:a0:21:d8:2c:c0:60:31:d1:ea:59:97:b0:1c:41:
48:92:22:f5:24:79:2f:77:09:b4:2d:d3:ad:d5:d4:
ee:56:09:67:12:68:a2:04:c1:61:63:75:d2:c9:31:
d0:92:66:63:d1:6c:5b:43:8e:72:22:e9:be:14:fe:
71:ef:04:bb:47:9f:2a:27:5e:5d:95:4e:12:a5:0f:
28:8d:ee:86:97:c4:5f:44:86:e2:73:92:23:79:ce:
f5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8C:62:96:D9:25:BE:EE:C6:5E:ED:F0:C9:63:32:23:84:13:79:9C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/jIxiltklvu7GXu3wyWMyI4QTeZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:92:32:2e:81:8e:f0:da:67:35:71:9f:0f:b0:28:1f:bd:7f:
b6:ae:25:40:11:f3:b4:62:f6:9d:da:92:f3:1f:db:aa:17:28:
7b:d4:1f:dd:64:df:15:e5:84:07:32:91:5c:c5:93:9a:33:ee:
1c:b0:49:c6:b8:23:56:a9:8b:e0:ec:f1:ed:39:cd:62:ba:27:
f2:2f:40:8b:19:fc:b1:7d:40:5f:fd:69:5e:bb:b7:ab:7e:49:
2a:a1:13:38:2c:54:4e:e0:75:cf:e8:34:0b:51:d2:64:b0:87:
10:38:0a:b2:6a:54:77:38:b2:7b:84:17:a1:09:b9:12:c9:00:
a7:48:4d:21:9a:1e:6a:d5:59:cc:6a:3d:cc:31:c6:fa:39:75:
9e:ea:d1:6b:98:a9:b1:b5:0a:5c:f5:c5:50:b1:a4:b1:49:05:
f4:29:a0:83:e9:f9:23:7e:74:6d:48:5e:24:b7:6c:29:19:66:
49:05:e9:11:18:ba:93:6a:b8:68:a6:d8:20:bf:12:f9:6b:9b:
b8:0a:e4:73:71:b3:19:18:ea:b5:2b:65:ee:ca:79:30:a8:fb:
b4:80:b2:16:4e:53:87:4d:ec:32:64:b8:2b:29:20:2c:16:5e:
5c:9a:c5:b2:4c:d2:09:95:ec:7e:91:70:98:36:af:d1:16:17:
f2:cc:48:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:20:52 2025 by rpki-client