Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nRZapsvVGSY82Twtc-lX77SBWHw.roa
File: nRZapsvVGSY82Twtc-lX77SBWHw.roa (raw, json)
Hash identifier: xalDqp9ij+W/NzrVUv5ZsGHD0S5gYLns5qYfYl1HIVs=
Subject key identifier: 9D:16:5A:A6:CB:D5:19:26:3C:D9:3C:2D:73:E9:57:EF:B4:81:58:7C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C6505C5E6C1834D1EAE09FC0B019F9E1E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nRZapsvVGSY82Twtc-lX77SBWHw.roa
Signing time: Wed 13 Dec 2023 21:12:06 +0000
ROA not before: Wed 13 Dec 2023 21:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:65:05:c5:e6:c1:83:4d:1e:ae:09:fc:0b:01:9f:9e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 13 21:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d165aa6cbd519263cd93c2d73e957efb481587c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:05:91:e7:d1:03:1a:32:e6:f1:e7:12:d6:
c5:af:bf:45:c0:65:2c:95:aa:dc:2c:9b:f2:4f:ea:
44:f9:99:04:c8:04:22:f2:35:ae:b9:3a:7b:c2:21:
f3:3a:77:89:35:14:79:30:c1:7e:ac:27:d4:d2:8a:
61:e4:57:08:8a:79:32:34:52:58:1e:71:d1:04:1b:
fe:7b:67:5c:cb:8e:cb:83:b7:fe:1b:1d:30:a6:bc:
bc:06:d2:c7:e1:a6:79:ec:b6:51:6f:22:3b:c2:ca:
63:73:22:51:76:16:e7:16:e6:cc:c9:58:92:ad:dd:
53:32:db:7a:a6:a7:b6:d9:a0:07:ca:f4:29:9a:69:
51:46:8c:38:49:06:ec:06:da:c8:4d:72:f2:35:2f:
f9:8f:38:11:20:88:df:5d:e7:46:d6:08:77:30:73:
64:fc:df:76:75:69:4c:97:cf:2f:de:b8:fe:2c:ce:
03:35:e6:98:64:9c:7b:bd:65:bb:f3:48:13:41:10:
eb:ec:15:4e:89:2d:9f:d9:0d:a6:b4:b5:6a:a8:3a:
57:4d:5a:ac:ec:c3:ea:b0:03:1f:1e:14:db:51:3d:
e2:4c:1b:71:cf:c2:a0:6c:e5:fd:bc:4c:46:fa:54:
02:44:87:04:55:4b:0e:80:62:41:ff:0a:0d:25:42:
8a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:16:5A:A6:CB:D5:19:26:3C:D9:3C:2D:73:E9:57:EF:B4:81:58:7C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nRZapsvVGSY82Twtc-lX77SBWHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:a9:05:b0:67:ee:a1:87:1a:10:08:01:29:bf:51:55:41:3a:
db:d2:48:e3:5d:be:fb:1d:8c:f9:14:01:bd:f3:d0:70:f9:67:
dd:51:d6:de:8e:4c:89:32:bd:53:60:df:fa:84:dd:dc:a9:b5:
91:6b:f0:b3:51:d0:bb:7a:7e:84:f0:fd:42:97:59:53:d5:71:
13:71:50:56:57:8e:89:06:0a:ed:39:4a:d4:a3:a6:1d:89:48:
92:70:fc:07:a6:ef:ed:33:c1:a2:ff:63:40:21:fd:e1:98:c1:
db:f4:3e:ad:2c:c3:6a:41:36:6e:97:a1:66:7e:b7:54:5b:11:
39:7f:a4:c6:28:f1:56:33:c3:f6:0a:9d:51:56:d3:aa:44:16:
59:70:fe:b8:f8:26:65:84:c4:87:f0:0b:63:e1:e3:5e:a0:85:
91:81:b4:95:3f:b6:f1:41:19:e0:0e:79:a8:1d:d7:10:9c:4b:
95:ab:b9:f4:5c:5e:85:a9:5c:d5:66:04:0c:14:c7:1e:65:45:
cc:ce:42:57:9a:84:72:43:c7:0f:fb:1d:fa:de:28:12:1a:5a:
94:19:51:3a:de:d1:61:9f:bc:e2:71:27:6e:50:2f:52:2c:22:
52:3d:d9:d5:41:78:7e:01:9b:66:e1:b5:4c:5f:ca:ed:2a:b0:
13:7f:24:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:04:21 2025 by rpki-client