Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/najXf9K8GwK5X5TWnjYhrgOggf8.roa
File: najXf9K8GwK5X5TWnjYhrgOggf8.roa (raw, json)
Hash identifier: mRUvgmmbN/f+xV/dBIcUwK6fzIJYwr2vY1Lr0tbn9HM=
Subject key identifier: 9D:A8:D7:7F:D2:BC:1B:02:B9:5F:94:D6:9E:36:21:AE:03:A0:81:FF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C735FC8C1241A95C02FFEC267E2B7C930
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/najXf9K8GwK5X5TWnjYhrgOggf8.roa
Signing time: Sat 16 Dec 2023 16:05:06 +0000
ROA not before: Sat 16 Dec 2023 16:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64:ffff:0:18c:735f:2c6a/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:73:5f:c8:c1:24:1a:95:c0:2f:fe:c2:67:e2:b7:c9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 16 16:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9da8d77fd2bc1b02b95f94d69e3621ae03a081ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c2:49:43:c9:a7:83:27:1c:77:fb:d9:af:30:
5e:72:34:fb:17:71:30:79:e8:e3:d1:45:8b:a2:24:
d1:55:b1:61:3c:a3:67:9b:18:e2:53:98:16:d4:0f:
45:46:7d:b4:50:d2:af:22:f6:2d:39:54:b9:ff:ef:
0e:be:59:7f:13:09:d5:28:a7:0a:06:b9:f0:cf:37:
12:e2:4c:1b:34:d4:5c:3f:37:3a:dc:8c:39:e6:b9:
5a:71:f2:ee:0f:df:78:c2:a6:73:ad:74:82:ec:59:
37:71:ea:3e:e0:a4:43:7b:00:02:2f:96:05:d7:c5:
9a:46:6e:23:30:fc:fd:82:1b:6c:b8:b5:96:ac:c0:
fa:ae:10:ec:b4:55:38:3b:0a:66:9a:a3:d2:e2:a4:
a4:8b:b7:84:08:c6:5d:61:4d:5a:d8:97:65:dc:e1:
77:af:56:3a:68:e0:e6:08:cf:30:4b:96:39:89:2a:
64:c7:df:9b:7c:c6:15:b3:98:51:bb:c9:d5:16:53:
1d:31:8a:9a:3a:d3:19:a6:ea:a4:08:7f:60:a5:77:
5f:07:ea:db:e7:a7:57:bc:e1:50:a7:de:d8:35:00:
94:9e:9c:9b:60:aa:11:a2:a0:f5:c9:81:a5:c7:f3:
3e:84:5b:41:69:74:e8:57:20:8b:04:f6:33:b3:05:
98:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A8:D7:7F:D2:BC:1B:02:B9:5F:94:D6:9E:36:21:AE:03:A0:81:FF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/najXf9K8GwK5X5TWnjYhrgOggf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
be:8c:7c:9d:99:09:69:3f:54:3e:c9:ee:2a:28:c7:58:db:30:
a1:24:f0:d8:fb:b0:a0:2b:83:22:0a:68:d2:44:35:5d:9b:87:
79:08:3e:0b:10:7d:bd:9e:48:3c:3c:04:93:c5:ec:4b:88:96:
f1:56:9f:01:b9:45:9a:ca:4b:2a:ad:5b:c1:51:6a:ef:0c:91:
f7:84:02:8f:a1:89:09:1b:f2:d6:e5:96:90:3e:47:02:18:5f:
c0:51:21:29:15:3a:b8:b4:2f:0f:8c:bd:f9:d2:4d:3c:d1:69:
47:40:32:7c:c2:87:0f:44:72:1b:7c:79:78:16:f8:7e:5d:00:
2c:5b:64:4a:a5:fd:10:2d:70:ed:43:79:d0:b8:ca:35:82:3d:
d5:80:f4:fe:55:e3:9e:64:0e:5b:bd:4c:a0:98:04:bf:18:18:
d6:91:3b:9e:9d:62:b9:0d:d1:96:e7:20:81:60:29:fa:fa:de:
5f:cf:cb:8d:54:1e:0e:cb:ae:94:93:98:1f:38:09:20:e5:df:
78:54:02:3e:ff:33:68:10:87:c7:ce:18:fb:b2:a6:b1:40:c1:
22:c6:a6:41:4d:87:ea:53:38:51:56:96:6c:c4:17:d1:89:d5:
d2:10:8b:74:0a:da:21:16:ca:a2:59:09:c3:23:31:40:68:54:
01:21:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:07:59 2025 by rpki-client