Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N4Y4_aE4y8-yNOgveeifO3wUWXk.roa
File: N4Y4_aE4y8-yNOgveeifO3wUWXk.roa (raw, json)
Hash identifier: cD2dPpuf96B873zOMFRTTU1/VrkiaPeBK9+CI/ty47g=
Subject key identifier: 37:86:38:FD:A1:38:CB:CF:B2:34:E8:2F:79:E8:9F:3B:7C:14:59:79
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC035F8CE05D942A044D7A6E133FC29E6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N4Y4_aE4y8-yNOgveeifO3wUWXk.roa
Signing time: Sat 23 Sep 2023 04:04:37 +0000
ROA not before: Sat 23 Sep 2023 04:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:c035:db7f/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c0:35:f8:ce:05:d9:42:a0:44:d7:a6:e1:33:fc:29:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 23 04:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=378638fda138cbcfb234e82f79e89f3b7c145979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:e6:f4:7e:c9:b1:10:e0:5a:18:ea:64:ff:
b4:0b:af:e8:80:cb:3e:49:41:d9:d3:83:1d:5d:7f:
52:10:cc:27:e4:39:32:41:da:ca:8f:8f:dd:7d:2c:
52:ba:57:01:4a:91:18:8d:ff:8c:d9:28:e9:c8:03:
de:22:71:bd:7c:61:4d:74:d2:56:a8:9e:53:36:d3:
ed:a2:07:fd:59:f8:5d:8a:42:17:cb:04:51:8e:20:
5a:84:da:b4:8c:dc:8d:16:ed:6d:c9:f1:4e:fd:74:
30:3a:64:61:cb:1f:65:42:66:99:ea:8d:96:ad:33:
3d:10:77:31:28:c1:2c:dd:36:4b:2a:fb:20:e7:d9:
32:cf:94:f5:29:fa:d9:64:77:ba:52:44:cc:7d:b0:
bf:9d:aa:5c:5f:5d:26:4b:c5:f9:2d:e9:df:23:3d:
55:cb:06:81:f6:c4:95:82:7f:3c:63:44:07:20:be:
40:85:1c:2a:d2:41:de:a5:ed:2f:76:51:cc:fa:68:
53:31:cb:db:db:9b:4a:2d:4f:03:5f:99:25:3d:32:
0a:68:2f:ae:69:c7:36:05:8c:e9:ae:a8:52:76:ef:
3e:2b:5f:51:e4:dd:c8:d8:03:96:f9:7e:87:fb:ba:
d0:6c:3a:c7:b8:55:e7:f5:e4:25:ec:70:d0:7c:4a:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:86:38:FD:A1:38:CB:CF:B2:34:E8:2F:79:E8:9F:3B:7C:14:59:79
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N4Y4_aE4y8-yNOgveeifO3wUWXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:98:1e:a1:96:41:07:22:10:55:15:2a:bc:63:78:8e:99:cb:
d4:c0:a0:12:a2:23:a1:bb:ed:b5:ce:b2:7d:9c:47:58:77:5d:
23:e5:6a:d2:56:6a:0e:fa:42:86:7f:32:73:b1:4f:97:86:bd:
aa:41:0c:7d:61:31:87:70:b2:4e:4c:c1:ac:a6:72:3f:33:0f:
02:b7:32:ad:5a:88:b4:13:63:9c:85:d4:4c:7b:98:50:2f:4d:
81:a6:14:f2:f1:aa:b0:83:74:da:e5:6c:67:3c:e3:eb:41:fa:
4f:c6:1c:3c:bd:f2:5e:5b:8e:05:20:c4:e7:7c:f6:e9:4d:66:
f6:c3:0f:49:ad:0d:cc:ed:92:4b:6f:a2:c9:df:f5:3a:35:4a:
7d:39:36:92:6b:6e:38:22:a6:5b:77:9d:47:15:23:81:0b:b4:
6f:d6:e6:b4:ef:14:75:78:55:a4:f2:32:66:39:67:d5:93:5d:
5c:27:95:89:6f:30:0f:03:c7:78:7c:08:c5:14:5c:86:ed:7e:
b8:21:77:e5:91:b5:c8:de:87:13:7f:1d:58:9e:8e:8d:b0:3b:
1a:35:a4:66:fb:15:61:32:25:29:e7:50:29:cf:43:07:da:92:
67:b4:2e:73:a8:a5:ab:46:51:ea:15:53:57:a1:a2:78:bf:b8:
ea:6c:55:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:13 2025 by rpki-client