Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nENcnFqJRe7qlIdQsPokZp3YI6I.roa
File: nENcnFqJRe7qlIdQsPokZp3YI6I.roa (raw, json)
Hash identifier: xu/CjbdYU2zEEa23qk5MErBRuI6aCwlB7LkCqy5EmLM=
Subject key identifier: 9C:43:5C:9C:5A:89:45:EE:EA:94:87:50:B0:FA:24:66:9D:D8:23:A2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BAEA1BCE98E41725D3D7DA654F8C57724
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nENcnFqJRe7qlIdQsPokZp3YI6I.roa
Signing time: Wed 08 Nov 2023 11:11:57 +0000
ROA not before: Wed 08 Nov 2023 11:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:a1:bc:e9:8e:41:72:5d:3d:7d:a6:54:f8:c5:77:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 8 11:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c435c9c5a8945eeea948750b0fa24669dd823a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:91:4b:19:d4:b9:1e:2b:27:56:50:82:4b:
04:66:1c:40:76:e6:fa:71:6a:27:39:17:11:f8:08:
82:4c:d2:d5:46:ee:e1:ef:9e:2a:31:e1:27:1f:18:
9b:00:f9:26:d4:da:8f:4f:6a:d7:fe:f2:23:a4:83:
45:a2:4b:aa:20:86:61:07:7a:90:96:bd:54:83:fc:
f7:ff:05:2d:a9:d2:2f:e8:29:f9:97:e4:3a:bd:63:
02:20:e2:d3:a2:46:0f:b1:4f:e3:d1:5d:14:bf:d7:
a7:70:f2:05:a4:03:9f:8f:52:83:5b:7e:e2:71:5f:
20:06:7e:4c:c9:b2:a2:ce:31:ff:17:9d:ca:26:ed:
92:a4:54:30:9c:71:e6:f0:4d:ea:d7:3d:61:f2:66:
c1:cb:4b:a8:14:5c:4b:47:c7:68:67:7b:ea:64:54:
72:95:18:8e:39:ca:c8:8d:9a:88:63:0b:c3:45:6b:
85:52:bc:35:da:b5:6c:94:25:30:d2:ba:f7:3f:9e:
fd:98:59:07:68:39:34:c9:45:87:19:b1:eb:b7:9e:
70:f2:ea:71:f6:30:10:87:ae:14:25:df:ef:b5:36:
6a:e1:40:6d:9e:7b:b9:2c:4c:d2:d6:a3:cc:e5:8f:
e9:43:89:b6:c0:d1:d2:b9:c2:ce:42:51:dd:15:04:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:43:5C:9C:5A:89:45:EE:EA:94:87:50:B0:FA:24:66:9D:D8:23:A2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nENcnFqJRe7qlIdQsPokZp3YI6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:f9:1b:62:e1:b4:a5:1e:30:32:44:94:ed:76:3b:f2:a1:42:
42:02:75:33:9e:5d:46:94:8b:3f:4b:26:85:c5:72:8f:74:e9:
77:28:ba:2d:e8:e5:7d:8f:72:a2:08:22:71:d7:8e:25:3e:07:
22:d3:bc:49:03:28:fb:62:37:d6:d1:3e:a8:c1:06:dd:ca:34:
f9:ce:1c:e2:86:dc:80:41:82:7d:d7:3c:d1:17:0a:de:94:d0:
fd:7a:58:f5:ac:13:80:d9:b4:d1:3d:70:02:b6:a4:09:28:44:
3c:76:49:72:a6:30:95:10:26:22:38:15:26:db:ed:55:da:d5:
03:c3:ef:7b:a1:b7:28:ca:c6:de:8b:8e:e4:4b:64:9a:0f:5c:
43:1d:48:65:58:2b:a2:b1:89:b0:f3:e1:b0:16:5e:69:e1:f9:
d5:6b:a1:b3:f0:00:d0:27:74:e7:68:c7:b0:12:9e:73:7e:d8:
c7:03:6c:4d:5a:54:de:cb:9a:c2:d9:16:b8:67:da:32:0e:81:
31:6d:50:4a:03:a4:14:0c:4e:a8:55:c4:1d:05:bf:04:b8:e9:
c0:91:99:14:6a:ad:a0:34:f4:9f:75:49:81:f2:9f:84:0b:89:
71:06:e1:26:58:47:6d:38:5f:82:16:a8:e0:2a:3d:4b:01:5f:
19:55:2d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:20:58 2025 by rpki-client