Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N0gjskpHyCCWgTeLRpWtxjq2UdE.roa
File: N0gjskpHyCCWgTeLRpWtxjq2UdE.roa (raw, json)
Hash identifier: R/UGH67G9He/CvSuOM7brpcsRMFBD/m0TyyW32kfUv8=
Subject key identifier: 37:48:23:B2:4A:47:C8:20:96:81:37:8B:46:95:AD:C6:3A:B6:51:D1
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C220CED192CC5DD49A6856A4629852450
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N0gjskpHyCCWgTeLRpWtxjq2UdE.roa
Signing time: Thu 30 Nov 2023 21:05:21 +0000
ROA not before: Thu 30 Nov 2023 21:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18c:220c:469/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:22:0c:ed:19:2c:c5:dd:49:a6:85:6a:46:29:85:24:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 21:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=374823b24a47c8209681378b4695adc63ab651d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:a3:ea:63:d2:87:ed:f4:f5:e3:2e:e9:b0:
ed:51:90:b0:3f:c7:39:81:5f:db:74:af:d8:a2:4e:
0b:41:56:ff:6e:f1:62:e8:12:20:ee:20:96:1c:ed:
e2:b8:33:3a:d9:85:29:36:4f:ba:8b:16:57:80:5b:
d0:43:23:72:8a:b2:35:af:50:6d:2b:e3:a8:d8:18:
a3:ea:b8:01:29:f8:1c:c9:ee:60:6c:6d:28:ba:29:
b9:5d:85:eb:91:14:54:02:b7:f6:46:02:2a:24:23:
07:cc:0b:a0:07:54:72:9b:dc:58:5b:fe:14:1b:91:
9f:a2:64:ba:e3:f8:8e:86:44:98:b3:b5:08:94:35:
85:64:24:8c:3e:8d:d6:2a:f1:10:64:da:b8:ce:60:
31:db:2d:40:32:07:e8:46:2f:5c:c0:0b:d8:7c:fc:
a0:4f:45:ce:c1:4a:a2:24:51:5d:d0:22:26:57:bc:
21:52:1d:e6:ca:b8:f1:92:f9:3d:91:82:c8:be:ae:
11:2b:31:77:f7:a8:d9:03:d5:1c:58:a9:c8:19:ce:
44:25:2f:88:1d:06:75:6f:ed:6a:3f:d0:9f:cf:34:
4b:1b:ff:b4:c3:5f:21:2e:60:e1:97:08:00:2b:cb:
96:9b:4e:4a:0a:3b:b9:84:f2:69:1c:c7:7b:06:a6:
cf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:48:23:B2:4A:47:C8:20:96:81:37:8B:46:95:AD:C6:3A:B6:51:D1
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N0gjskpHyCCWgTeLRpWtxjq2UdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:d2:8b:d3:a7:8d:04:e7:85:73:18:12:af:ff:a6:2f:da:2c:
c9:f2:3f:89:fd:db:df:73:af:9e:d2:97:f3:67:27:ab:6f:9e:
4d:c2:61:6d:24:e2:85:78:d2:5b:1e:2b:9d:37:49:ea:75:ba:
40:e0:2a:c8:0b:4c:32:42:97:e3:95:57:b1:64:f6:7c:d2:c0:
f4:d2:71:0d:7a:bc:db:d2:ea:12:03:b4:38:d0:71:82:6a:ed:
18:89:c7:b2:2e:10:03:ce:bd:10:b9:f7:94:c8:ad:23:a9:9a:
68:13:b5:e4:13:70:80:dd:67:a3:0a:5d:d7:b0:b7:2b:12:30:
ba:f0:7a:96:eb:f0:46:b0:c2:56:fe:b3:66:6b:0e:09:7f:75:
09:92:65:bd:69:7c:90:84:e9:89:f1:1c:0a:16:b0:83:c9:ca:
5e:e7:73:ad:5e:ab:c6:15:c2:6a:de:32:42:e6:85:76:a5:32:
e1:40:b8:28:2d:f6:bc:b7:d8:16:76:7b:cd:c6:fc:74:99:41:
6a:68:0c:85:fd:f7:27:60:4d:d6:22:48:e7:41:bf:17:9d:7c:
7e:3a:f9:8e:e5:d1:8e:b2:28:ad:fd:47:a8:9a:7e:b3:8a:0b:
6f:29:a4:df:69:4d:07:23:25:b8:ad:1b:af:8f:7a:63:d2:a6:
64:21:86:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:00:16 2025 by rpki-client