Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N_DO4Yiv909m5Ks_dVOMDZgU3Go.roa
File: N_DO4Yiv909m5Ks_dVOMDZgU3Go.roa (raw, json)
Hash identifier: RmBYE+Jil98GgUS/obeCRYj/PE4SqVG6Tl4GrYF5Qn4=
Subject key identifier: 37:F0:CE:E1:88:AF:F7:4F:66:E4:AB:3F:75:53:8C:0D:98:14:DC:6A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AE51E8FF64CB16DA3909FA438F0480FF3
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N_DO4Yiv909m5Ks_dVOMDZgU3Go.roa
Signing time: Sat 30 Sep 2023 08:04:59 +0000
ROA not before: Sat 30 Sep 2023 08:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:e51d:ef1d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e5:1e:8f:f6:4c:b1:6d:a3:90:9f:a4:38:f0:48:0f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 30 08:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37f0cee188aff74f66e4ab3f75538c0d9814dc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:61:29:aa:c8:e5:53:8f:2c:3a:ac:53:65:
2a:a6:3c:87:83:e0:33:87:b0:c5:64:43:b3:47:79:
55:30:40:4f:bf:ed:dc:14:a1:db:e5:7c:3c:0c:68:
50:88:c3:9e:ae:25:c4:7a:7b:3a:9d:a9:2c:da:88:
81:84:57:a6:a5:fc:de:a2:cc:31:1a:13:d5:a3:3a:
fd:82:35:74:76:e1:66:a3:f6:db:b5:fc:ad:d4:0b:
d4:d3:99:2e:fa:53:21:97:48:29:14:0e:99:78:1a:
4d:f1:01:05:51:1f:b2:d9:e7:c6:2e:7a:af:1a:98:
aa:f0:2c:92:96:21:d7:a9:fc:ee:3a:df:0f:97:69:
8f:3f:fb:bf:4c:33:26:98:f1:a3:3d:05:f0:f9:ce:
b3:c6:56:8b:45:02:09:98:d2:4a:b4:97:f5:4e:36:
50:c2:c3:f8:ab:d9:c1:88:35:69:ea:6b:6a:c2:7a:
53:99:f2:d9:f3:7c:8b:7b:78:41:0d:3e:0e:5b:e4:
30:a7:ca:e2:71:da:97:89:3a:b4:f5:31:c8:ff:a7:
eb:14:b9:b9:4a:3d:7f:5b:78:4d:50:5b:b3:ef:d6:
3c:75:bd:59:55:ea:82:3a:73:d4:9f:18:d7:7a:e2:
b7:e1:d4:9e:d8:57:8a:84:2d:e8:7f:37:25:be:a9:
d5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F0:CE:E1:88:AF:F7:4F:66:E4:AB:3F:75:53:8C:0D:98:14:DC:6A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/N_DO4Yiv909m5Ks_dVOMDZgU3Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
be:bc:22:fe:63:f8:f0:f2:a3:8e:6d:66:02:f9:ae:e0:90:fb:
90:1b:ce:0c:1d:ce:61:33:2a:ed:28:5a:cf:d2:90:05:a8:02:
bf:51:9c:ea:1a:2f:02:91:2d:0f:4b:41:3d:bd:81:5f:b9:01:
54:74:94:4e:f3:df:9e:d0:76:c7:a2:c5:54:5f:1c:42:24:22:
ab:92:7d:b5:3a:3f:c0:b8:e9:19:c0:e3:e3:e7:3e:3e:b3:4e:
98:4b:63:74:0c:a6:33:b5:dd:91:c6:13:d4:8d:5e:d3:1b:99:
a8:33:98:43:3a:9e:56:a4:0d:6e:27:fd:f2:4c:c5:b9:42:64:
0f:c5:8e:81:1a:eb:af:3b:c0:1f:d6:25:d3:ae:de:97:7b:f3:
b7:d7:26:5c:82:2a:d1:ab:50:d1:15:7e:17:a2:ba:2a:d9:80:
fd:24:40:5d:0b:6f:9e:f0:b6:19:08:de:81:b3:07:b4:5c:03:
34:8b:8a:a8:02:3a:a8:0b:b3:73:d4:3e:c0:f1:cd:2f:c8:c1:
67:81:aa:3d:d2:9f:2a:af:d2:a9:45:b4:f1:6f:45:c1:70:3b:
39:a5:e0:86:b3:34:4a:96:81:78:5a:25:8a:63:ce:42:4b:03:
ff:e0:eb:ca:06:4d:c0:c4:9d:7f:97:1d:57:97:df:07:41:36:
7d:d6:9c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:01:12 2025 by rpki-client