Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ny4CxtMsnqGYE5W2MrMEEKuXRsw.roa
File: Ny4CxtMsnqGYE5W2MrMEEKuXRsw.roa (raw, json)
Hash identifier: lknBUqW+LvHgqvrDNeeSOCMJ2J7bokAL3/KtUw97ZiI=
Subject key identifier: 37:2E:02:C6:D3:2C:9E:A1:98:13:95:B6:32:B3:04:10:AB:97:46:CC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4950CA2076375685DDAD7C718F0EBE54
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ny4CxtMsnqGYE5W2MrMEEKuXRsw.roa
Signing time: Fri 08 Dec 2023 12:04:40 +0000
ROA not before: Fri 08 Dec 2023 12:04:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18c:4950:a9e2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:50:ca:20:76:37:56:85:dd:ad:7c:71:8f:0e:be:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 8 12:04:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=372e02c6d32c9ea1981395b632b30410ab9746cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7b:e8:23:a5:e8:d9:50:3b:2e:99:90:14:4b:
c0:1b:0c:ce:f5:27:2b:ef:79:09:36:de:e0:50:46:
c7:02:aa:57:54:08:dc:75:f2:0b:e7:86:d1:bb:4c:
d0:32:8a:a7:96:4f:ad:a9:e4:4a:86:58:45:a0:6e:
b1:44:b2:21:d1:bd:97:4c:2c:09:7c:70:c8:11:b2:
17:ea:93:bb:b6:ec:94:58:79:ec:a6:09:56:db:b5:
c8:a6:aa:34:f0:6d:d9:05:4d:f5:e1:09:66:58:a9:
91:44:3f:bf:54:ba:60:12:2f:f2:f2:76:e3:80:6d:
b1:e8:d4:cd:d5:27:57:07:b2:5f:0a:43:9c:91:b8:
1e:6a:27:60:c8:68:05:b4:21:db:65:88:f0:e1:0a:
d6:73:9b:fe:44:51:e0:33:74:c4:b4:e6:7d:4a:b1:
4d:d1:0c:86:c1:b2:cc:53:38:6d:f6:99:a5:4c:aa:
45:d3:59:28:44:82:ba:ce:88:2a:2f:67:fa:66:aa:
d3:ea:12:f5:e6:40:c3:b2:7a:ab:42:f1:de:15:cd:
3b:97:34:d2:30:48:a9:83:eb:06:44:3b:18:18:20:
ab:72:ac:91:32:60:ba:0f:20:53:fa:59:f2:b9:86:
2e:3d:23:dc:13:b5:50:b8:12:26:aa:45:7b:cc:a9:
17:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2E:02:C6:D3:2C:9E:A1:98:13:95:B6:32:B3:04:10:AB:97:46:CC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Ny4CxtMsnqGYE5W2MrMEEKuXRsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:c7:19:56:9e:95:83:2f:4f:4b:1d:c8:c3:d2:c9:b9:8c:69:
fa:f3:24:19:68:02:cb:97:30:94:2a:61:09:87:7f:28:79:7d:
ff:0c:34:4b:b5:08:ac:e2:ac:91:8b:1d:5b:fd:49:dc:0a:b9:
b0:45:41:7c:a2:2d:22:a9:ba:43:aa:7f:05:a0:94:af:27:a7:
f4:43:9e:8b:47:cf:02:04:7f:5b:57:4f:d0:34:c2:9b:1b:b5:
26:7e:fb:1f:26:17:dc:74:e1:e1:78:5c:ef:7d:48:c5:23:2e:
de:db:db:3f:24:c2:f1:16:72:86:e6:e5:b8:56:b3:91:43:eb:
ca:9d:77:7b:da:f4:15:e2:64:4d:0a:8d:6b:7a:f1:d1:f7:62:
d5:32:22:c8:7d:ba:36:fe:a9:fb:ba:dd:d1:78:e9:44:04:73:
a4:3e:59:ec:5e:eb:ae:ff:71:6b:09:b8:24:7f:d8:31:e2:bb:
b0:33:d3:1c:a8:06:be:59:ba:c5:74:5d:31:7a:5f:3d:ea:ff:
55:e1:27:d1:8c:57:34:04:a4:52:07:54:13:df:71:87:f5:94:
b5:0f:9a:0f:3e:99:38:f0:9a:91:c0:11:d7:14:dd:39:e6:bf:
f8:2c:99:93:9a:0a:5d:17:c3:e0:b9:be:68:79:17:fe:6d:a7:
ce:dc:3d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:30 2025 by rpki-client