Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NwyLdG19xtR3AWLKsSqNmkTRhEc.roa
File: NwyLdG19xtR3AWLKsSqNmkTRhEc.roa (raw, json)
Hash identifier: KeS2mdKpkHPa8ceUPk3srXN5vKUK5v3Actnj70XFaww=
Subject key identifier: 37:0C:8B:74:6D:7D:C6:D4:77:01:62:CA:B1:2A:8D:9A:44:D1:84:47
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AF199A12F210E9788EC8DC0C8E397197F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NwyLdG19xtR3AWLKsSqNmkTRhEc.roa
Signing time: Mon 02 Oct 2023 18:14:51 +0000
ROA not before: Mon 02 Oct 2023 18:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:99:a1:2f:21:0e:97:88:ec:8d:c0:c8:e3:97:19:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 2 18:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=370c8b746d7dc6d4770162cab12a8d9a44d18447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:05:68:a4:04:18:b0:da:17:57:06:43:8f:57:
b1:ee:b8:b2:9d:ba:05:86:a2:0c:28:4a:2c:22:b6:
52:9a:6a:29:c0:96:45:b1:cf:36:41:02:25:bb:3d:
46:9b:11:9c:e5:2b:48:ed:75:1e:90:09:72:68:c1:
79:72:91:b2:d3:24:e0:60:83:b9:f2:6c:00:ef:19:
f9:c1:09:b1:53:d9:a1:80:e7:33:0a:11:f4:df:3c:
a1:15:84:e3:e9:0d:ab:7c:33:17:08:9d:1f:e8:ef:
86:0d:16:76:f5:e9:a8:ec:0b:3d:d4:22:85:c9:bf:
c8:96:4e:ba:cb:ac:5c:e0:b3:05:3e:52:96:81:be:
94:7a:1b:3c:2f:4e:ee:62:c2:69:de:fe:34:97:41:
93:2e:6c:3a:20:a3:b5:a5:53:36:5f:57:15:6f:c8:
6d:9f:e4:29:01:6d:90:74:5e:f2:7e:e1:3e:d3:20:
cd:86:31:ba:0f:7d:e9:73:48:50:c8:b4:03:b4:18:
07:0b:0b:57:07:22:a6:0e:33:a9:9b:12:19:e6:cd:
8f:98:b8:98:38:d7:03:c9:92:52:84:ec:b0:ec:ca:
d4:e6:88:f6:b3:26:7d:ea:4e:fa:b9:59:34:79:89:
5a:ea:19:75:da:97:ef:3f:92:dd:e7:b2:f2:ef:43:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0C:8B:74:6D:7D:C6:D4:77:01:62:CA:B1:2A:8D:9A:44:D1:84:47
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NwyLdG19xtR3AWLKsSqNmkTRhEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:b0:f4:cc:66:0e:e0:b4:64:a1:1f:ae:35:8e:16:0f:b8:55:
86:92:98:58:57:66:ab:10:88:b8:31:ad:24:45:8a:0d:bf:15:
99:3c:ab:9f:60:e3:d2:dd:32:8d:cc:74:6a:17:07:e4:9d:58:
50:14:b9:36:1e:83:52:b8:b3:7b:0b:eb:2d:aa:64:c0:99:6e:
49:8c:b7:a5:f2:7d:f1:89:08:41:6c:b4:21:03:6d:f3:7a:c6:
92:a1:20:89:ed:76:18:70:d6:e4:3c:90:72:7b:e6:c9:41:06:
bf:7b:e2:04:e0:a4:27:39:4e:ea:fa:5b:39:4a:ee:1b:8e:a0:
68:01:a5:86:7b:3f:87:e7:82:69:85:ff:b0:54:79:8c:9e:f0:
f5:88:01:68:f9:30:a1:11:dd:11:02:f1:24:15:d4:2f:79:bb:
3e:70:24:a7:06:dd:e1:47:a0:22:2e:9a:22:08:e8:e1:36:a8:
e7:f6:2d:2d:53:86:2e:d9:70:f1:d4:ee:3c:41:b4:10:ba:9d:
72:ab:d1:92:e9:6d:7c:89:fd:ac:4f:61:41:15:92:d3:90:cd:
82:f6:80:ed:82:6f:0b:52:8d:18:40:70:35:2d:d2:5b:a6:01:
0e:89:31:0d:b2:45:7e:0a:80:c6:e4:86:bf:41:cd:b4:ce:1c:
41:54:a8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:36:35 2025 by rpki-client