Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c_ngibJpX640XPnR28vHcM00fJ4.roa
File: c_ngibJpX640XPnR28vHcM00fJ4.roa (raw, json)
Hash identifier: Xj5+wwZnEnANYVE1oEvUZWr2Fn0FWCWH67yMyuFViIc=
Subject key identifier: 73:F9:E0:89:B2:69:5F:AE:34:5C:F9:D1:DB:CB:C7:70:CD:34:7C:9E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADB485C4FCE5BA8A011355D72D8A6EF86
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c_ngibJpX640XPnR28vHcM00fJ4.roa
Signing time: Thu 28 Sep 2023 10:14:27 +0000
ROA not before: Thu 28 Sep 2023 10:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:48:5c:4f:ce:5b:a8:a0:11:35:5d:72:d8:a6:ef:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 10:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73f9e089b2695fae345cf9d1dbcbc770cd347c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:32:fd:1e:37:40:0c:9b:72:12:e3:dd:eb:
68:1d:a6:62:b0:f1:2e:1a:03:d0:9d:ef:36:32:de:
6a:4f:88:51:c1:65:b1:a0:71:77:ec:e4:49:6a:ad:
f2:12:d2:bc:bb:1c:4d:5c:16:0e:0f:78:99:47:1a:
12:83:fd:14:48:7f:27:30:56:90:81:a5:98:6f:cd:
99:95:02:6b:46:e5:a8:c8:02:43:fc:07:47:bb:c1:
52:be:50:1a:64:96:9d:2e:40:1c:b0:41:a7:84:17:
df:9a:c9:d1:52:f3:92:86:1b:8d:53:61:29:c7:ef:
ca:94:f2:96:c7:05:3f:e4:82:2b:8b:13:cb:d2:48:
9d:7b:e5:ca:0d:bf:7b:b2:27:69:9d:ba:00:af:e3:
39:9c:30:42:35:8e:53:67:21:00:a3:76:76:f0:89:
2d:a5:ef:38:56:e5:ea:2d:73:ff:d9:67:80:41:b8:
90:db:db:ce:e1:49:c0:a9:3c:56:e2:c8:f3:85:66:
1b:f2:bb:84:36:8a:f6:e0:28:09:d8:27:27:f9:07:
79:31:49:01:be:26:91:e5:34:0a:a0:fe:66:65:88:
53:13:32:ba:28:ba:1e:e5:3b:d9:9c:3b:f4:7d:f3:
3e:cf:82:32:78:d2:36:ba:32:ac:a5:a2:c5:3f:71:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F9:E0:89:B2:69:5F:AE:34:5C:F9:D1:DB:CB:C7:70:CD:34:7C:9E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/c_ngibJpX640XPnR28vHcM00fJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:65:a8:a7:47:40:7e:3a:b4:c6:69:d2:15:25:cf:70:89:04:
c4:b1:18:f0:c6:97:67:c3:b7:4f:51:e3:3a:d7:15:19:18:2d:
2f:5f:60:88:c9:22:62:43:b5:21:5e:97:ab:a6:70:16:72:17:
93:00:e3:50:9a:1d:c4:86:dc:9f:d6:e7:fd:0b:fe:18:a2:48:
9c:79:9e:b7:a8:9b:93:d9:14:99:e4:ab:e6:a0:1c:ec:f0:d3:
72:6c:d1:89:f6:35:5c:c3:77:bc:05:3c:42:d5:d9:3b:f4:e2:
99:0d:b2:d7:e1:d4:da:bc:a7:0e:9a:80:9e:8e:db:b3:0a:fb:
1f:f1:1d:b6:49:03:fd:6f:00:2e:88:b0:fc:dd:24:b6:c1:16:
ec:71:33:d2:1e:54:34:58:37:c6:7d:be:72:49:37:f0:d4:c7:
e6:89:bf:c4:84:19:63:64:82:92:1e:ae:aa:32:ce:e5:6d:1d:
2f:f1:8a:41:d3:f1:bb:41:68:c3:21:b9:8d:c4:8c:d9:5f:d1:
24:42:7b:22:f8:75:11:02:fd:85:b2:c0:f3:4b:fc:f5:16:a0:
74:88:b6:72:d8:22:bc:35:d6:20:0a:20:b2:5e:a2:24:9d:49:
8e:93:98:0d:e8:7b:ee:8a:62:b4:53:26:c4:d9:38:bc:5f:1f:
32:83:1f:41
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrbSFxPzluooBE1XXLYpu+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI4MTAxNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2Y5ZTA4OWIyNjk1ZmFlMzQ1Y2Y5ZDFkYmNiYzc3MGNkMzQ3YzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIMy/R43QAybchLj3etoHaZisPEu
GgPQne82Mt5qT4hRwWWxoHF37ORJaq3yEtK8uxxNXBYOD3iZRxoSg/0USH8nMFaQ
gaWYb82ZlQJrRuWoyAJD/AdHu8FSvlAaZJadLkAcsEGnhBffmsnRUvOShhuNU2Ep
x+/KlPKWxwU/5IIrixPL0kide+XKDb97sidpnboAr+M5nDBCNY5TZyEAo3Z28Ikt
pe84VuXqLXP/2WeAQbiQ29vO4UnAqTxW4sjzhWYb8ruENor24CgJ2Ccn+Qd5MUkB
viaR5TQKoP5mZYhTEzK6KLoe5TvZnDv0ffM+z4IyeNI2ujKspaLFP3GiVQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHP54ImyaV+uNFz50dvLx3DNNHyeMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvY19uZ2liSnBYNjQwWFBuUjI4dkhjTTAwZko0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF5lqKdHQH46tMZp0hUl
z3CJBMSxGPDGl2fDt09R4zrXFRkYLS9fYIjJImJDtSFel6umcBZyF5MA41CaHcSG
3J/W5/0L/hiiSJx5nreom5PZFJnkq+agHOzw03Js0Yn2NVzDd7wFPELV2Tv04pkN
stfh1Nq8pw6agJ6O27MK+x/xHbZJA/1vAC6IsPzdJLbBFuxxM9IeVDRYN8Z9vnJJ
N/DUx+aJv8SEGWNkgpIerqoyzuVtHS/xikHT8btBaMMhuY3EjNlf0SRCeyL4dREC
/YWywPNL/PUWoHSItnLYIrw11iAKILJeoiSdSY6TmA3oe+6KYrRTJsTZOLxfHzKD
H0E=
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:28:09 2025 by rpki-client