Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NFrTUG9o2LemrzWHZtIfYdXX1g0.roa
File: NFrTUG9o2LemrzWHZtIfYdXX1g0.roa (raw, json)
Hash identifier: KODEBVyoMDdbFYrA82neQDifQK58h/bZDAW8EQkIWZc=
Subject key identifier: 34:5A:D3:50:6F:68:D8:B7:A6:AF:35:87:66:D2:1F:61:D5:D7:D6:0D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAD5B361CD5528B8DF7061D164B6D78C9
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NFrTUG9o2LemrzWHZtIfYdXX1g0.roa
Signing time: Wed 08 Nov 2023 05:15:17 +0000
ROA not before: Wed 08 Nov 2023 05:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ad:5b:36:1c:d5:52:8b:8d:f7:06:1d:16:4b:6d:78:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 05:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=345ad3506f68d8b7a6af358766d21f61d5d7d60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:71:6d:9d:0e:14:5b:d0:71:e9:6f:10:6c:
ec:88:71:fe:de:29:32:e8:99:2d:45:90:6b:42:38:
b8:6c:4a:ed:d6:17:f5:ac:3c:5d:2d:46:13:80:9a:
49:37:55:21:80:0d:cf:09:38:ab:ea:0d:c3:92:4d:
2c:78:05:53:af:c6:a2:4b:4a:b5:c0:23:6e:dd:7c:
63:f9:97:15:b8:6f:cf:a0:d4:93:48:69:76:52:aa:
95:32:42:80:33:4d:60:2a:e5:aa:72:73:b1:10:62:
51:45:e0:17:4f:9d:7a:b8:31:b1:3f:ac:c4:c2:2a:
68:fa:d4:d3:75:45:a9:34:b3:c1:56:de:b6:8a:37:
50:20:7c:84:e3:c6:ad:31:fd:28:af:91:55:c4:53:
65:3d:09:44:da:82:c6:4a:b0:1e:26:5a:dd:ef:df:
7e:e1:2e:70:5d:bf:71:c5:36:7a:0e:d6:38:5e:b1:
f8:ae:1e:b3:57:b6:8d:0c:65:de:4f:9a:4d:99:6e:
71:8d:1e:fa:ea:0f:aa:1d:e0:91:a2:75:2d:79:f8:
4a:6a:59:74:ce:7d:4a:92:7d:e1:00:c6:02:ae:bb:
f7:6e:fa:74:4b:10:7b:e2:c4:f1:9a:eb:4e:d7:38:
70:a8:f5:ec:fb:84:d5:c6:69:51:21:aa:83:3c:9b:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5A:D3:50:6F:68:D8:B7:A6:AF:35:87:66:D2:1F:61:D5:D7:D6:0D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NFrTUG9o2LemrzWHZtIfYdXX1g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ca:45:60:c5:d8:33:f3:51:ad:38:28:b9:ff:29:dc:b9:68:
0a:7b:00:0f:af:ad:da:d2:e9:2a:4f:34:16:76:1c:c5:13:18:
b7:03:fb:d8:75:a7:8f:95:b2:38:6c:7e:82:dc:05:df:f5:e3:
79:bb:38:70:53:1f:f3:db:30:2c:11:39:bb:58:2d:34:4a:ea:
f1:06:53:74:df:9e:4b:4d:53:9c:cc:ab:0f:24:fe:80:37:0d:
eb:f2:0b:b0:74:ff:4f:99:75:8d:46:a6:b3:fd:f6:d7:d7:c2:
ba:d0:8d:32:ee:28:56:bd:ce:d4:25:54:ce:9a:92:d9:18:0a:
f2:c3:e3:c2:82:72:26:60:4e:b8:90:a8:9a:8d:fd:88:59:12:
11:44:b6:4e:61:20:3b:01:61:79:00:d3:a4:8e:d4:ee:87:cf:
0e:f7:88:ed:c0:e6:8c:7d:27:3d:69:63:45:be:60:cd:95:4e:
ba:9a:1d:5b:1d:c6:d2:3d:cf:53:58:6e:1c:f6:12:3d:b4:aa:
ae:ab:89:cd:56:7f:12:c0:7c:74:91:4f:c9:fc:12:5b:6f:10:
21:1d:92:08:72:42:2e:ed:1a:5d:b0:1e:b2:b3:b9:71:6f:41:
03:88:d0:cb:29:27:7a:7a:0f:fd:c4:0b:5f:02:e0:e0:a2:1c:
22:d4:4b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:17:18 2025 by rpki-client