Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NavWpjWSznMj73tZL6mu30wjCXo.roa
File: NavWpjWSznMj73tZL6mu30wjCXo.roa (raw, json)
Hash identifier: xYZQkb2OlZoGVk7QYHF5KqtY5TUxi6e59PIwJiIm8i0=
Subject key identifier: 35:AB:D6:A6:35:92:CE:73:23:EF:7B:59:2F:A9:AE:DF:4C:23:09:7A
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BC0DD194A367BDD0633CAC2E5C835A882
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NavWpjWSznMj73tZL6mu30wjCXo.roa
Signing time: Sun 12 Nov 2023 00:09:57 +0000
ROA not before: Sun 12 Nov 2023 00:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c0:dd:19:4a:36:7b:dd:06:33:ca:c2:e5:c8:35:a8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 12 00:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35abd6a63592ce7323ef7b592fa9aedf4c23097a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:50:29:16:9d:29:ee:09:e0:08:67:6c:83:
0d:e3:b6:2c:36:9e:15:17:b1:63:c9:bf:26:6f:67:
e2:4b:07:30:ff:e4:ae:b8:15:10:02:48:ad:e7:da:
6a:c0:bf:18:0c:7b:8e:55:86:4c:43:30:76:b7:f2:
68:e9:df:f0:59:19:55:ad:43:b3:94:e1:4c:c1:e8:
dc:fe:70:d5:57:20:92:fa:61:3d:f3:61:6e:24:99:
c1:90:28:71:c1:30:34:59:5c:ad:44:17:1a:5f:6f:
53:2f:f6:2a:6c:0b:fd:27:49:68:95:bc:cf:53:5e:
0b:8b:8d:71:35:d0:bb:cf:ec:75:3b:94:30:68:00:
54:be:6d:91:49:11:f5:0a:1d:12:2e:3c:6d:96:bb:
12:b3:53:f1:7d:6f:bd:4f:f2:6d:01:2e:0b:88:80:
c5:f4:41:03:bd:b0:de:94:b3:a0:58:eb:e6:f5:43:
94:6c:aa:d0:fa:9b:f4:e3:da:99:87:5e:cd:2a:e3:
1a:0d:5e:77:21:5e:64:7a:78:41:63:89:47:d6:a0:
96:63:2a:78:35:b2:ff:3f:7d:02:23:a4:5b:17:61:
c8:39:2f:be:ba:28:09:cc:7e:0f:cf:a0:d3:d1:00:
96:c4:62:32:2f:75:ec:34:18:56:d4:25:fc:d4:72:
f4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AB:D6:A6:35:92:CE:73:23:EF:7B:59:2F:A9:AE:DF:4C:23:09:7A
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NavWpjWSznMj73tZL6mu30wjCXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:b0:bc:07:51:98:e0:15:64:21:e4:2a:19:50:24:b7:db:7f:
82:5d:b5:7d:e5:95:0f:bf:a5:6b:a8:ca:4d:e9:62:c2:08:31:
54:28:7e:fc:46:a9:e9:95:ab:37:ce:5f:a4:ac:aa:8c:30:09:
b4:ed:bb:ab:05:be:47:f8:13:fd:94:01:da:22:f5:c1:6f:25:
e5:83:1c:a5:2e:39:ee:0f:3e:42:f2:10:28:18:cb:77:d4:47:
b8:2e:bd:b7:3d:43:e3:ea:15:e2:64:f3:f5:29:37:a6:c4:32:
c4:e3:5a:89:c4:ea:ae:af:63:49:21:0b:99:77:22:4a:04:99:
fb:da:75:ac:fc:ca:d2:6c:26:ff:a6:45:ed:22:2d:83:6e:5c:
df:e2:dd:1c:31:a7:d2:0e:f3:63:da:db:91:a1:23:07:7e:19:
ce:0b:3a:29:26:6e:a6:dc:c0:31:84:6c:05:99:75:19:c4:66:
9e:f8:4b:a1:45:53:d8:c5:6f:ce:f1:75:6c:45:7d:94:3f:7e:
97:f2:0d:59:07:b0:50:c8:ee:32:92:98:65:c6:0b:ba:94:80:
03:55:b5:91:70:8b:65:67:93:a6:91:e9:a5:83:be:7d:b8:37:
11:88:06:bc:11:41:dd:4b:b7:9f:69:ed:a2:92:c8:ac:cd:b7:
87:df:15:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:10:34 2025 by rpki-client