Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9NQnO2J8q7OuVN-8M6TpKdQy0AE.roa
File: 9NQnO2J8q7OuVN-8M6TpKdQy0AE.roa (raw, json)
Hash identifier: I/jII9voi12qiXS9IrtaE83S5ENfvIM2fpAN9sZKSO4=
Subject key identifier: F4:D4:27:3B:62:7C:AB:B3:AE:54:DF:BC:33:A4:E9:29:D4:32:D0:01
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BE7150482914DC5A9FDA514A9D2D5043B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9NQnO2J8q7OuVN-8M6TpKdQy0AE.roa
Signing time: Sun 19 Nov 2023 10:16:36 +0000
ROA not before: Sun 19 Nov 2023 10:16:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e7:15:04:82:91:4d:c5:a9:fd:a5:14:a9:d2:d5:04:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 19 10:16:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4d4273b627cabb3ae54dfbc33a4e929d432d001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:fa:d5:ab:8f:6d:15:63:60:35:f7:85:b6:
f7:e7:ef:da:f7:22:b9:d3:d3:95:ce:a8:4f:d2:19:
82:f4:7a:4b:22:46:49:1a:94:f2:9d:b9:03:7a:19:
cd:77:e8:29:a2:ae:4a:cf:96:1b:42:2f:a3:d7:b4:
b4:21:65:77:bc:59:61:cd:e9:d5:a3:e1:4b:45:56:
d5:ac:29:2d:46:59:07:b9:3c:31:02:99:7b:14:af:
a4:50:5a:bf:a8:94:eb:e6:13:72:1e:9d:8e:a2:dd:
7e:db:67:e4:6f:f2:56:b2:74:af:c4:e8:55:56:3f:
e9:29:b6:d1:90:06:c7:a7:77:5d:67:3b:1c:c3:79:
54:bb:08:40:89:92:09:84:a2:b6:a8:b2:60:93:45:
18:89:c0:b7:2a:09:f2:04:2a:a3:c5:c2:2c:8d:30:
b6:65:e1:89:38:7c:84:e3:cd:67:b4:73:c4:9c:b4:
4b:5e:66:da:e6:28:65:26:cc:0e:40:0a:c5:1d:c7:
7d:ec:09:66:52:e4:0f:73:71:6a:bb:8b:3a:1e:04:
93:a8:d7:bb:b4:b5:34:d7:13:6d:66:65:2a:64:d6:
49:99:b0:1d:e5:84:4a:08:b1:2b:87:7f:4a:4a:22:
cf:3c:60:cc:90:c9:eb:43:0d:8d:e7:6d:d1:49:b7:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D4:27:3B:62:7C:AB:B3:AE:54:DF:BC:33:A4:E9:29:D4:32:D0:01
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9NQnO2J8q7OuVN-8M6TpKdQy0AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:54:49:db:7d:57:d4:34:1a:e2:90:d0:c5:b5:80:fb:b4:0b:
ba:ea:57:fd:73:a6:8b:0b:05:12:2b:5b:d7:e4:35:c8:b7:a5:
37:1a:c3:d4:f2:80:59:f8:b7:2b:d9:2b:9a:60:4c:54:e2:5e:
0d:d1:0b:f6:83:30:05:fb:3a:a8:cc:0d:91:30:16:20:d2:fa:
7f:35:6d:f2:a1:f9:ed:20:c9:84:5e:40:73:10:26:62:71:5b:
0e:51:49:d3:53:79:5a:55:7c:3a:56:18:13:71:a4:60:d5:7d:
ed:35:b5:8b:b7:b7:3e:17:9a:a3:3c:07:9a:8e:3a:bb:ad:47:
51:4f:28:59:41:0f:72:2e:d5:86:3c:41:3f:96:d5:df:a2:36:
88:af:11:a8:4d:34:d7:f8:75:90:91:54:e2:7c:17:a5:61:f0:
83:39:77:6e:98:f1:6e:08:39:07:65:28:1e:5f:2d:c2:db:fb:
42:85:2b:35:ba:4e:71:31:c3:22:51:f7:77:da:87:c3:28:92:
61:b6:99:a9:6a:dd:78:63:15:71:13:65:ee:ee:63:4d:4a:57:
e1:35:e3:4c:3f:dc:0a:b2:9d:e8:a1:d9:a5:89:27:7c:66:6a:
b1:81:b1:dc:a5:04:d6:68:9d:6a:88:f5:cc:f5:ea:46:55:68:
19:f5:46:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:08:37 2025 by rpki-client