Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nLWYVvlvCiZc-5QrMLnJt3fzovI.roa
File: nLWYVvlvCiZc-5QrMLnJt3fzovI.roa (raw, json)
Hash identifier: oZ3KFSes8JVnixJrNIwPOOOB0PbOGiU1in8qK0/7X0k=
Subject key identifier: 9C:B5:98:56:F9:6F:0A:26:5C:FB:94:2B:30:B9:C9:B7:77:F3:A2:F2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C4D019FAACCD77989192FD4B307F0E060
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nLWYVvlvCiZc-5QrMLnJt3fzovI.roa
Signing time: Sat 09 Dec 2023 05:16:40 +0000
ROA not before: Sat 09 Dec 2023 05:16:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4d:01:9f:aa:cc:d7:79:89:19:2f:d4:b3:07:f0:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 9 05:16:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cb59856f96f0a265cfb942b30b9c9b777f3a2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:10:51:53:cb:fc:09:fc:e1:ad:e6:8e:f3:
9a:ec:1a:8c:45:e6:1b:5e:8a:73:38:78:40:f3:8c:
fe:e5:bf:a4:f5:df:37:40:2f:e0:0a:c3:bc:4f:cf:
4f:76:ef:4e:34:9f:70:e4:55:48:c3:2d:be:52:7f:
0c:06:d3:3e:58:11:c8:6e:88:86:5e:8f:35:e7:66:
ad:06:eb:91:f1:af:dc:a5:ba:d9:ce:c3:12:63:0d:
b8:57:3f:c1:27:c0:65:56:a1:8e:d2:1c:9f:62:9c:
dd:61:1a:15:b6:60:5d:53:55:e0:d6:a4:08:b7:80:
04:3f:6f:50:57:8c:08:86:d6:6e:71:e3:e0:1b:5d:
cb:d9:52:23:9c:81:84:50:db:e2:1b:fd:9f:0a:63:
ef:56:84:42:56:5f:48:ed:3b:c0:ab:cf:98:1b:13:
5f:f8:8f:3e:06:1d:e5:1d:2a:33:97:b5:da:04:af:
09:20:7c:97:79:cf:32:3e:f0:d8:7d:6f:64:a4:02:
11:79:d3:f3:0f:2f:47:0d:87:91:26:d9:ec:c2:26:
8b:ee:05:de:96:4e:bd:b3:7b:97:a6:27:df:75:70:
fa:12:d6:89:24:f5:e5:a0:bb:e3:9d:ae:83:10:77:
2a:1c:9a:c7:de:4e:e7:1c:08:5c:54:31:66:ae:ec:
2b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B5:98:56:F9:6F:0A:26:5C:FB:94:2B:30:B9:C9:B7:77:F3:A2:F2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nLWYVvlvCiZc-5QrMLnJt3fzovI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:6f:28:f6:92:2b:d6:6a:f5:4c:1f:2d:2b:1b:ad:46:aa:c1:
b3:a5:75:2f:e2:0e:0b:42:ef:27:d6:e0:58:9f:83:cb:99:76:
ee:cb:25:3c:74:85:20:9f:ab:65:25:b0:39:a2:13:fb:6d:b5:
d7:31:18:4b:6f:f8:dc:5a:42:20:46:9a:32:e2:56:86:00:aa:
b6:a2:f9:cc:33:9b:55:64:8e:99:ee:d0:e7:63:f2:a3:12:da:
26:36:6a:0e:34:5f:7b:1b:ee:1d:01:79:b0:23:11:8c:0a:88:
57:b8:53:ef:d4:97:16:b5:e6:38:7b:67:35:ba:27:93:bc:3a:
05:2d:e1:7c:60:fb:fb:9a:07:2d:cc:5a:a1:ed:29:7d:64:97:
b1:59:80:34:2b:42:da:d9:ee:0e:40:38:4e:6a:c3:4d:ea:9d:
f5:e1:9b:63:45:20:70:81:40:f9:67:ef:d4:73:74:91:73:61:
8f:84:11:70:ed:99:26:dd:8c:f4:71:f5:f4:f3:00:ff:76:a4:
e2:ec:10:bd:30:99:e4:76:c3:1f:22:e5:4e:f7:8a:5c:47:7a:
26:bb:8c:f4:41:fb:dd:14:c2:e0:84:ee:eb:e1:65:d0:c6:cc:
18:fa:c4:96:1b:12:08:09:d2:83:86:86:be:f0:62:93:16:72:
87:5d:c4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:30:07 2025 by rpki-client