Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N5F1OOfP_1s4bkERxqLDVVjfWkI.roa
File: N5F1OOfP_1s4bkERxqLDVVjfWkI.roa (raw, json)
Hash identifier: O7bV7NtKsq8/pF8nDmxyoPppglsH+cDsmfh3mq837D0=
Subject key identifier: 37:91:75:38:E7:CF:FF:5B:38:6E:41:11:C6:A2:C3:55:58:DF:5A:42
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4733DBAFC12FA704EDAA576142365BF4
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N5F1OOfP_1s4bkERxqLDVVjfWkI.roa
Signing time: Fri 08 Dec 2023 02:13:50 +0000
ROA not before: Fri 08 Dec 2023 02:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:47:33:db:af:c1:2f:a7:04:ed:aa:57:61:42:36:5b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 02:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37917538e7cfff5b386e4111c6a2c35558df5a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:9e:b1:a5:64:5a:8c:40:87:3d:05:83:74:
db:f0:63:12:a9:6a:46:67:98:75:e2:42:36:88:2b:
2c:4e:f4:e5:d5:88:7d:a2:48:f8:54:54:5a:80:ea:
fa:de:be:a4:71:ea:f2:10:9f:4f:3d:4b:8c:c9:f6:
98:f7:f8:43:b8:3c:e3:c2:22:07:d9:d5:8d:15:0c:
8c:60:eb:51:10:11:16:8f:fa:19:2c:6c:09:fe:6b:
46:34:ca:17:52:4d:ed:6c:d6:0e:e1:8f:e3:66:b6:
4e:f1:38:96:54:7e:bf:8b:77:da:fa:5b:39:bd:d2:
b4:10:e6:bc:29:49:3b:de:5f:ac:97:16:ba:3e:34:
b4:33:d7:d7:28:d3:88:22:be:66:c8:eb:81:ba:75:
7e:a8:a9:f2:d6:2a:b3:37:79:3f:3e:a3:b4:76:df:
a9:b8:c6:0e:92:b7:2e:9c:fd:3f:20:0c:55:e8:96:
4e:2b:ea:5d:20:1b:f8:c5:32:8d:dd:c1:11:57:eb:
a1:de:ef:d5:63:dd:f6:f3:d8:52:13:e3:e3:ef:b6:
e4:e6:f0:09:74:6c:d7:c3:93:f1:f4:89:a5:45:a5:
17:11:56:84:1d:30:0a:94:55:0a:0f:17:45:dc:79:
5d:c0:44:d0:25:e2:12:9e:8a:20:5f:78:d7:08:36:
ea:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:91:75:38:E7:CF:FF:5B:38:6E:41:11:C6:A2:C3:55:58:DF:5A:42
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N5F1OOfP_1s4bkERxqLDVVjfWkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:f8:b3:23:73:07:3c:f5:71:12:cf:53:ba:e9:5f:08:87:7c:
1a:49:5f:83:55:b0:16:5b:8a:d7:9c:38:92:13:e6:7c:d4:b4:
55:31:94:5b:78:54:e0:d6:dd:96:e6:25:12:18:fc:4e:02:21:
41:c1:5c:cb:3d:a0:ee:9a:9a:b4:e5:0b:93:98:42:1a:10:81:
f2:66:12:ac:2c:66:46:51:a0:38:a6:c7:b9:7d:a7:19:0d:1c:
39:12:c3:c8:83:08:9d:ce:fe:1a:f5:b5:f5:19:6a:26:a9:20:
29:0b:90:c5:31:07:77:b1:4d:58:49:b3:35:ad:d6:a0:6e:18:
11:24:8f:62:35:af:c4:a3:62:b0:88:8e:99:05:0e:7e:29:47:
d5:cd:a1:95:c9:c7:22:29:14:b6:d0:f0:23:be:c1:b6:51:0a:
b6:d0:cb:dc:43:a3:32:1a:88:ba:2e:66:0b:a1:ea:c5:34:ac:
c3:47:92:cf:31:a2:0c:e3:4a:ba:00:75:ca:4f:64:0e:b4:e3:
a9:9d:ac:4c:56:bb:57:57:61:fc:d0:e7:7e:45:7a:0e:7a:09:
cb:9b:57:bb:7a:2e:3f:27:08:14:ef:45:78:8a:80:df:1f:8f:
d6:83:9d:06:d4:f7:db:6b:a2:d2:70:52:34:ee:5c:50:36:50:
43:35:31:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:04:51 2025 by rpki-client