Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NGm7VgaB6JBkgKrQ_llKxoy0Jk8.roa
File: NGm7VgaB6JBkgKrQ_llKxoy0Jk8.roa (raw, json)
Hash identifier: RkAs2GRisuirwGaD/J0dDfh+OAA08mFLABHuDV00FXs=
Subject key identifier: 34:69:BB:56:06:81:E8:90:64:80:AA:D0:FE:59:4A:C6:8C:B4:26:4F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB6C74FE76EEA14C88E76C3CFF9F795E0
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NGm7VgaB6JBkgKrQ_llKxoy0Jk8.roa
Signing time: Fri 10 Nov 2023 01:09:57 +0000
ROA not before: Fri 10 Nov 2023 01:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b6:c7:4f:e7:6e:ea:14:c8:8e:76:c3:cf:f9:f7:95:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 01:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3469bb560681e8906480aad0fe594ac68cb4264f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:24:61:2c:13:3a:14:9e:d9:8f:7f:32:f3:
94:83:f6:4b:4d:2f:62:85:71:71:9b:3b:c0:1a:c6:
d6:5c:1c:de:9f:ce:11:1a:91:e7:a2:8d:11:da:83:
e2:45:70:6a:23:3b:b1:5f:6f:c4:12:1b:f7:86:0f:
5c:99:69:1f:54:ed:5b:9f:b6:c8:04:60:d0:56:0f:
09:45:f5:bb:63:c0:c7:16:0a:8c:7a:7e:62:c5:35:
1a:25:09:bc:3b:98:5e:75:0a:c1:87:15:c8:d9:3b:
74:83:3d:62:83:3f:c1:1d:95:83:e1:b4:e4:37:8f:
ef:15:bb:fa:67:f8:6f:86:4a:db:a6:6c:73:a5:93:
02:ee:fe:30:c7:be:8f:85:e4:39:76:8f:cb:51:b7:
b6:7b:31:69:71:0c:5a:e1:f0:f4:f3:14:b3:a4:b9:
80:70:ab:b2:e2:8f:64:8d:c1:78:84:1e:3d:dd:b1:
e6:14:b8:21:52:96:05:72:a6:77:2f:0b:a3:29:ea:
99:15:a9:c8:16:fe:b0:bf:7a:7d:31:57:ad:ae:55:
0d:97:be:90:d1:13:fb:25:2f:8b:48:b9:b1:25:b8:
26:f6:3c:bc:15:22:9d:b1:1f:8c:72:01:41:a8:2b:
a2:b7:7a:ce:18:f2:25:1a:6a:5d:50:d5:07:84:1d:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:69:BB:56:06:81:E8:90:64:80:AA:D0:FE:59:4A:C6:8C:B4:26:4F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NGm7VgaB6JBkgKrQ_llKxoy0Jk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:b8:ee:58:83:9f:02:a8:da:a3:40:12:80:4f:83:13:77:15:
96:36:b1:a3:1f:56:15:14:d3:46:e4:ac:64:c7:89:8a:dc:a7:
4d:02:27:aa:d1:1b:dc:17:8a:60:d8:2a:f1:0b:b5:77:51:f7:
10:b2:2e:71:1e:67:35:4e:e3:8a:c1:da:e7:e7:d5:e3:f0:5a:
2b:a0:e5:e2:80:5d:8f:97:ee:6c:24:27:dd:59:ff:28:06:d6:
0d:01:ff:ec:66:75:94:f2:00:f1:cc:f2:05:51:c4:7c:66:26:
84:53:17:e4:2d:f2:b2:51:a8:3a:3b:9f:ff:c4:de:a3:a8:cc:
2c:18:0c:f3:ed:60:43:70:22:9a:98:a7:d6:fa:e0:ae:fa:05:
ca:c9:e1:de:12:a7:17:2b:7a:fc:58:bf:d8:4d:40:0c:34:55:
ca:a5:32:a8:22:d8:70:30:6e:5b:f8:f8:97:a3:d1:94:17:dc:
65:de:f6:d1:55:76:08:ae:d5:6c:fc:d3:37:66:f2:01:fc:a3:
cf:3f:18:67:bb:4c:d2:63:79:22:33:af:ff:0c:b4:5a:4e:5f:
c7:e0:24:1f:bd:23:0e:bf:6d:67:b1:aa:39:ad:89:45:8f:f0:
8a:06:d9:3c:94:5b:00:cf:43:b4:62:ff:c7:48:16:9b:bc:a3:
e4:80:92:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:34:24 2025 by rpki-client