Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Nq_if8I5hmrm1xe8LuW95gZJZDQ.roa
File: Nq_if8I5hmrm1xe8LuW95gZJZDQ.roa (raw, json)
Hash identifier: iha3nkQc4yXuxPEWcsvqju7pJl5Omgcic4exnrN2u6Q=
Subject key identifier: 36:AF:E2:7F:C2:39:86:6A:E6:D7:17:BC:2E:E5:BD:E6:06:49:64:34
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B4A36EF08A742A6CE097E59D8B944F059
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Nq_if8I5hmrm1xe8LuW95gZJZDQ.roa
Signing time: Thu 19 Oct 2023 23:13:15 +0000
ROA not before: Thu 19 Oct 2023 23:13:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4a:36:ef:08:a7:42:a6:ce:09:7e:59:d8:b9:44:f0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 19 23:13:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36afe27fc239866ae6d717bc2ee5bde606496434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:01:eb:e8:5c:ba:2c:22:4c:41:58:ba:13:
09:9c:c0:91:0c:40:ae:4d:52:3b:7a:cf:02:39:0b:
fa:25:b7:27:05:a4:5f:90:4b:1b:c4:06:71:34:4c:
c3:6f:84:52:c6:10:32:42:9d:13:d7:1f:80:d4:78:
55:a3:2c:e3:4d:fc:c2:47:81:00:4c:2f:27:9e:31:
2c:8d:48:55:cb:c0:89:4d:88:0e:25:18:38:cc:33:
2d:80:82:36:52:15:26:27:26:3a:31:3c:e5:09:6b:
e7:ae:a5:02:33:26:da:3f:52:63:9a:08:be:a6:81:
79:3a:5c:36:02:41:83:c0:ea:43:28:77:1a:73:c1:
b2:b7:54:3d:02:5b:e4:46:01:18:71:43:57:61:44:
7f:27:7e:fb:58:dd:bb:42:e8:dd:70:71:ea:4c:ed:
3f:7e:65:2b:14:d7:2f:df:64:30:20:f0:e8:cf:b5:
c3:0f:b8:0d:b4:c1:47:d5:79:3d:10:98:81:4e:69:
e9:8d:94:a5:8e:90:79:10:5c:1a:d0:68:06:1c:e7:
30:f6:fb:be:84:22:15:7a:bd:fe:53:d0:66:f2:f8:
b6:3a:79:a5:5b:d7:b9:c8:41:80:52:6b:48:79:6e:
d1:33:04:66:fc:65:b5:1d:3f:f0:ad:96:79:23:30:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AF:E2:7F:C2:39:86:6A:E6:D7:17:BC:2E:E5:BD:E6:06:49:64:34
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Nq_if8I5hmrm1xe8LuW95gZJZDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b8:de:40:f7:e4:1a:e9:cb:55:fd:a9:69:10:a0:71:ee:e7:12:
38:16:ec:9b:56:eb:6a:0d:6f:45:f0:c6:c0:dd:f3:5a:38:5e:
67:09:c3:65:16:df:fe:3e:b7:00:11:8c:51:25:20:9c:79:45:
b1:65:ac:cb:fd:4a:df:34:94:8c:b5:c4:85:03:af:e7:1f:f6:
80:cd:d5:65:6c:a2:b3:d4:ea:bd:b4:b6:41:96:cb:34:1d:30:
1f:5a:a8:35:7d:5f:b6:e2:b3:3c:bc:86:f9:90:b4:10:aa:7b:
75:85:27:d3:fe:8b:11:3b:8e:90:0d:d4:cb:35:d5:15:0d:79:
00:41:ea:ed:3e:91:3b:9f:0c:27:a8:ec:45:c9:b5:c3:40:2b:
9c:7a:eb:f7:91:f1:87:bb:bb:73:2e:53:83:7d:ad:d8:9c:fc:
9d:d4:f3:70:33:58:ed:47:ad:37:33:3e:33:e3:86:24:81:15:
88:94:4f:a1:4e:c0:d0:c8:80:26:ce:2d:43:00:b0:ff:8e:47:
3a:2c:83:24:01:b7:c1:4f:2e:a0:25:34:ca:a3:6d:86:90:84:
76:d9:44:c3:a7:f5:4b:f5:33:53:f1:0f:b0:2e:7d:4a:90:99:
76:04:f8:67:5c:ba:d2:c9:f0:33:ef:b6:23:50:a0:a3:b6:56:
2a:67:05:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:40 2025 by rpki-client