Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nAZXY9RRoZxa3rlLPqEkZIj4Vvc.roa
File: nAZXY9RRoZxa3rlLPqEkZIj4Vvc.roa (raw, json)
Hash identifier: FZnnG03dmqeCGg4/kFA1YFk72ARWMaQNXlXHu6IPiTI=
Subject key identifier: 9C:06:57:63:D4:51:A1:9C:5A:DE:B9:4B:3E:A1:24:64:88:F8:56:F7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AAFB996F1454C7CF0F0B47F6B1CEEB89F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nAZXY9RRoZxa3rlLPqEkZIj4Vvc.roa
Signing time: Tue 19 Sep 2023 23:14:50 +0000
ROA not before: Tue 19 Sep 2023 23:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:af:b9:96:f1:45:4c:7c:f0:f0:b4:7f:6b:1c:ee:b8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 19 23:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c065763d451a19c5adeb94b3ea1246488f856f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:b1:bd:9f:9e:77:46:54:9b:37:6b:e1:61:
46:fd:ec:45:a5:0d:6a:8d:6c:3a:a3:60:6b:56:08:
a9:86:56:4f:fb:77:e7:bc:04:c0:34:e7:cd:1a:7d:
4d:77:fe:a6:e2:93:89:b6:aa:da:bf:18:95:5b:5d:
40:80:4c:92:f4:0e:67:af:bd:d4:a3:5b:35:f4:aa:
94:da:99:b8:ac:42:31:fe:7b:b5:93:fc:a6:57:87:
41:fe:7d:ee:c9:4c:ec:c6:26:5a:5e:35:a0:5a:d4:
84:7c:49:af:10:bf:65:06:ec:57:76:e9:ab:78:4b:
4b:6f:69:50:79:f4:3c:27:5a:dc:18:bc:51:cb:e5:
ee:70:ce:cc:e6:29:63:c0:d5:48:c3:25:d8:60:38:
45:e0:df:d2:fb:74:98:bb:3a:a0:6d:81:88:b6:45:
cc:ec:b9:45:8e:73:61:fa:4f:af:b3:e9:94:a4:ac:
f6:04:2a:18:1e:ff:8f:d9:b6:66:28:4a:68:59:2f:
7e:7f:77:13:48:27:8e:05:f4:86:5f:81:f2:3b:a1:
3d:ec:57:a8:73:bd:24:8d:f7:74:f2:01:19:c6:4d:
2f:f9:0e:13:28:0d:19:82:40:8a:55:75:76:c2:f9:
89:46:57:78:7d:1d:19:51:4c:1b:c3:71:47:9b:6a:
95:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:06:57:63:D4:51:A1:9C:5A:DE:B9:4B:3E:A1:24:64:88:F8:56:F7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nAZXY9RRoZxa3rlLPqEkZIj4Vvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:0f:44:25:ae:e3:f2:18:7e:0b:42:11:da:13:a5:6b:ad:9f:
3b:7c:a2:9c:22:b6:ff:89:80:7f:f2:89:17:f6:19:44:90:68:
4c:91:ee:02:21:cc:8f:51:2e:c5:cb:99:42:3f:e3:5e:d1:40:
d9:75:e0:1b:ae:49:79:e2:33:ef:93:57:c1:ad:1a:c4:15:9f:
48:a9:5d:cf:96:00:19:b7:ef:32:33:58:ab:2c:50:b2:9d:15:
4d:e6:17:ba:df:e3:71:4b:75:dc:b1:31:6e:fe:ab:6f:52:70:
10:3a:94:43:13:03:f9:76:d7:17:3b:99:17:fc:cf:26:f5:6b:
0e:26:d4:1a:46:59:04:f7:bc:e6:b9:d0:06:14:4b:27:62:7b:
74:84:28:78:91:9e:61:a9:ec:de:95:d2:44:bc:7c:b2:8f:7d:
0d:55:27:a0:7b:25:ed:b7:25:66:4b:60:dd:e6:49:1a:30:b3:
3f:07:94:42:b8:37:c5:0c:9a:ee:bc:7c:3c:6e:c6:8a:3a:d2:
f3:33:86:78:63:d1:d1:e2:29:3d:a2:8a:23:09:e8:f8:01:89:
2e:96:f0:c8:9b:cc:22:8a:9d:25:34:f8:4e:d0:54:a5:25:67:
b5:dd:e4:c1:66:a7:31:38:3d:90:53:aa:d3:b4:bd:27:6f:a2:
a2:4c:89:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:32 2025 by rpki-client