Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NghAy8aUgxkKCwQvUUD8qWqfkhI.roa
File: NghAy8aUgxkKCwQvUUD8qWqfkhI.roa (raw, json)
Hash identifier: GB2nnx4oMD+poYAvQpAZQF28qLT5srUpLoucebA+yPM=
Subject key identifier: 36:08:40:CB:C6:94:83:19:0A:0B:04:2F:51:40:FC:A9:6A:9F:92:12
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC89C8BD03CE666285996983F2BA1BF8C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NghAy8aUgxkKCwQvUUD8qWqfkhI.roa
Signing time: Sun 24 Sep 2023 19:13:37 +0000
ROA not before: Sun 24 Sep 2023 19:13:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c8:9c:8b:d0:3c:e6:66:28:59:96:98:3f:2b:a1:bf:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 19:13:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=360840cbc69483190a0b042f5140fca96a9f9212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:7e:bd:7a:f2:65:9c:84:8e:fe:54:8d:eb:
ef:46:91:c5:bc:32:a5:50:46:2b:11:90:66:9f:6f:
d9:fe:9d:7e:0b:73:50:f3:75:4d:6e:30:5a:4f:a5:
36:a5:a2:00:d4:52:b3:aa:6f:bb:30:21:7a:4e:b0:
9f:f6:3c:e2:6b:3d:0c:8c:83:e3:11:c4:69:0b:5f:
ff:a8:fd:47:aa:19:e2:63:c9:12:6b:52:0c:32:f4:
08:56:46:04:84:65:11:c8:87:8e:7e:bb:d0:83:4c:
5f:39:04:aa:2c:99:f3:53:57:53:16:7b:5a:b0:9c:
05:e5:d8:7b:aa:8a:f2:8a:ab:54:f8:9c:61:48:8b:
bf:4a:d5:dd:c6:f7:1b:86:e4:7e:e3:cd:fe:4d:55:
88:1f:70:91:1f:9f:f1:62:8a:c8:84:46:a5:b8:ad:
20:47:23:e7:70:04:80:33:12:3e:59:c3:4f:ba:0b:
c5:b4:b1:9e:4f:85:3f:7e:79:e6:d6:98:cb:81:2e:
3f:e2:6e:c3:37:08:40:81:e5:c3:0a:63:fe:0b:9a:
24:62:cb:2b:15:34:ad:3a:7e:93:8d:31:3d:63:d3:
2a:d4:04:36:ef:8f:50:73:cd:c3:03:29:49:8d:c1:
cd:86:cc:2c:71:b7:70:0b:05:4c:c8:a7:fb:69:5d:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:08:40:CB:C6:94:83:19:0A:0B:04:2F:51:40:FC:A9:6A:9F:92:12
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NghAy8aUgxkKCwQvUUD8qWqfkhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:5b:e9:51:90:44:f4:a5:fe:d3:84:1e:7e:5c:7f:ed:93:6b:
49:2f:83:e7:c6:23:b6:b9:3f:96:eb:02:5e:81:ac:5f:4f:ea:
4b:41:dd:14:34:03:db:a0:b3:42:ac:e6:1d:05:72:21:ce:38:
77:45:d5:7b:e9:ae:5c:3e:30:06:c7:36:ce:41:50:06:9d:ac:
ba:31:90:d8:53:92:97:71:b7:ee:6a:ee:56:9d:c8:26:49:4f:
08:80:af:7c:5c:78:a1:c4:c8:aa:a8:9f:08:95:7d:27:43:b1:
db:f1:f6:07:fa:41:9b:e8:01:a9:c3:98:b9:08:e1:54:d6:f9:
f5:10:2e:28:3d:f7:6d:86:d5:b1:b8:65:ff:db:53:04:65:84:
10:82:3c:1c:5f:36:8f:14:ee:7e:79:ea:b8:fc:09:fc:81:62:
6b:ca:38:20:56:61:30:5e:e7:45:a1:e8:01:48:2b:cf:81:dc:
08:be:4f:ef:17:f2:70:19:c1:6e:bb:7a:00:32:ff:21:a6:fd:
7f:69:fb:39:7e:fe:3a:04:5e:59:9a:c8:a3:36:96:ac:90:28:
e0:d8:e4:50:cb:40:a1:10:e9:da:92:52:2b:cb:ce:e4:cb:e1:
cb:0c:c9:b1:89:88:62:1c:74:4b:9b:ba:f9:f3:84:ff:28:d4:
7c:12:f4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:05:34 2025 by rpki-client