Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Jog-LRZdWC-QW4IZoXXzRtYjs68.roa
File: Jog-LRZdWC-QW4IZoXXzRtYjs68.roa (raw, json)
Hash identifier: KDQy4nnmKQ5agAIYMA+JEOvrCMnElDNfaogvuK+valg=
Subject key identifier: 26:88:3E:2D:16:5D:58:2F:90:5B:82:19:A1:75:F3:46:D6:23:B3:AF
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAC45D0FEB19112F379534B92CDF27FAF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Jog-LRZdWC-QW4IZoXXzRtYjs68.roa
Signing time: Wed 08 Nov 2023 00:12:18 +0000
ROA not before: Wed 08 Nov 2023 00:12:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ac:45:d0:fe:b1:91:12:f3:79:53:4b:92:cd:f2:7f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 00:12:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26883e2d165d582f905b8219a175f346d623b3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b4:df:ba:73:09:d1:87:e5:57:90:f8:59:76:
44:35:12:78:b9:fa:33:5c:97:7b:76:f1:a0:de:b4:
06:8f:96:12:31:a5:df:d8:12:d0:7c:b2:9f:5b:03:
06:17:06:43:5a:02:76:05:79:dd:c5:3f:0d:f7:3a:
35:bc:f7:76:1b:8b:07:74:bc:e2:3d:ff:f0:40:c4:
9d:85:20:c3:d5:a2:b0:a5:15:2f:e6:d5:e9:aa:59:
87:7e:6b:71:40:a9:77:6a:29:da:de:e1:17:81:dc:
06:93:27:e9:b6:39:bf:d6:ee:a9:b5:66:9e:d3:6c:
0b:62:db:f2:7f:36:75:03:6c:75:5d:bb:ad:a0:e2:
2e:d9:50:a8:7b:1d:9f:14:b0:c0:9e:cf:e0:f5:4e:
55:09:9f:63:13:92:df:8d:e9:7a:ec:8a:aa:54:91:
77:96:d7:f9:8f:18:52:81:d2:f8:b9:77:26:97:c2:
c2:78:0c:81:b9:e6:aa:91:6e:5a:92:8a:98:eb:9c:
78:62:5b:2c:fb:a5:a3:c5:ca:be:81:90:d1:2b:d4:
da:03:bd:5f:2f:9d:3a:6e:bf:9d:e4:b4:9b:17:3f:
49:c1:2d:61:a6:55:e7:05:c9:76:aa:e0:b8:27:66:
df:33:de:76:8a:c8:a2:87:c9:a8:30:c3:b6:42:67:
d8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:88:3E:2D:16:5D:58:2F:90:5B:82:19:A1:75:F3:46:D6:23:B3:AF
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Jog-LRZdWC-QW4IZoXXzRtYjs68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:44:2f:b5:2f:b0:f6:eb:60:41:91:51:96:91:e7:0f:1e:3b:
92:e6:14:47:a2:b3:e9:20:ee:58:c1:92:6a:ad:fe:15:19:45:
f3:ce:7e:94:cd:68:4d:77:99:c3:0d:cb:35:fa:e8:95:5f:9a:
34:c0:46:ec:be:cd:7d:69:23:db:ff:8f:ba:80:96:ae:f1:96:
c3:b6:ca:17:fe:36:dd:10:24:c3:94:88:ad:84:e4:1b:e3:8d:
66:09:98:3c:9d:37:0b:8f:7e:1e:aa:19:8b:36:2a:19:d0:c1:
d3:b2:40:10:bd:7e:66:c7:a8:a7:35:28:53:e9:8f:90:88:ce:
eb:9a:0f:62:47:b7:b2:64:68:38:b5:2c:56:6c:70:5e:88:29:
00:32:bc:4c:b0:73:ed:60:93:85:d8:da:27:9a:aa:a2:28:12:
9c:76:af:73:ef:65:61:9b:81:45:4f:44:4f:f6:eb:fa:91:6d:
9a:9d:0f:1b:61:67:0d:8c:80:db:70:db:9b:24:99:05:00:5b:
2c:a3:0c:3b:c3:7c:20:93:7b:2a:70:0f:39:ee:50:70:b0:b4:
ee:7a:62:e0:c7:72:6f:5d:a5:86:a1:2e:95:3b:ba:3d:59:24:
80:f4:aa:b9:4a:33:5e:51:46:7b:b2:aa:68:ed:37:d4:4f:65:
b6:51:bf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:27:30 2025 by rpki-client