Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nYJ2v1n0INYjEoFIzd07IEW9QRs.roa
File: nYJ2v1n0INYjEoFIzd07IEW9QRs.roa (raw, json)
Hash identifier: Ybl/Uuchx0jW5QY7iD8thCac1bxr9epRuXHXqv2BAFM=
Subject key identifier: 9D:82:76:BF:59:F4:20:D6:23:12:81:48:CD:DD:3B:20:45:BD:41:1B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B6D2EF61E320F9DAF8C4FB8BB40246BD7
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nYJ2v1n0INYjEoFIzd07IEW9QRs.roa
Signing time: Thu 26 Oct 2023 18:11:16 +0000
ROA not before: Thu 26 Oct 2023 18:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6d:2e:f6:1e:32:0f:9d:af:8c:4f:b8:bb:40:24:6b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 26 18:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d8276bf59f420d623128148cddd3b2045bd411b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:44:78:11:06:78:73:fc:6a:98:60:f7:36:20:
ed:47:88:ba:77:6f:60:95:96:b3:27:a2:f1:8b:b5:
a2:c1:d1:ed:33:bf:37:0c:b7:ea:db:05:f5:8b:68:
17:79:c6:ac:8a:12:65:39:84:e8:6b:21:be:cd:bd:
2f:83:55:6c:8b:11:ee:2b:3a:54:25:9f:2c:ac:7a:
ee:97:4c:0a:47:67:2d:0d:f0:67:7e:d1:0f:ef:b7:
76:7a:3e:5c:a5:2d:3f:7f:20:9c:b5:e3:f1:b2:79:
4a:5c:d8:78:dd:e9:70:67:a0:c9:37:a7:6d:48:43:
64:ba:57:90:5b:b9:ef:89:b1:88:d6:4a:db:34:3b:
dd:3d:4f:0c:5c:d7:e1:02:6d:0e:c8:9f:3c:6b:83:
e5:9d:cb:c1:5a:2a:c4:e1:6e:ba:a1:1f:fb:cf:9c:
7f:b5:3b:f8:aa:7d:5e:17:d7:9e:16:8b:68:3f:f0:
98:91:99:8e:54:b6:45:12:a1:b7:f3:d2:f2:ed:15:
4e:de:81:88:3b:8f:61:dd:e4:ef:fa:b0:41:b1:2e:
27:d2:bd:ca:2d:b1:c9:34:b7:81:c8:fd:4b:ce:b4:
19:4a:aa:89:86:2d:c9:16:ce:33:a7:d3:05:c8:b8:
8e:5d:bb:a8:4b:d6:c7:7f:12:b0:ac:dc:5d:11:70:
47:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:82:76:BF:59:F4:20:D6:23:12:81:48:CD:DD:3B:20:45:BD:41:1B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nYJ2v1n0INYjEoFIzd07IEW9QRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:c2:93:d9:c9:ef:5d:dd:56:a6:a2:a1:fd:5d:cc:a9:db:1c:
33:00:b8:69:90:07:97:c7:f6:61:2c:32:ec:ad:53:f2:96:02:
73:76:68:cb:4d:74:19:04:66:68:f5:51:42:17:e7:58:61:fa:
0f:ae:1c:3f:3f:f8:3f:18:05:0b:78:6c:a2:aa:08:d8:0f:f5:
69:4f:3a:85:e7:c8:0b:e3:f8:3a:d6:ef:0a:ad:8a:6d:15:ff:
17:16:51:0b:33:54:9e:c7:4f:b6:ea:4c:c0:29:59:85:6c:aa:
da:b8:ea:ed:b2:e7:4a:c7:3c:ad:bf:90:03:dc:d4:69:aa:03:
63:26:ae:7b:50:86:b2:0f:61:95:a2:e9:92:5c:39:75:14:52:
0f:aa:9e:dc:40:0a:41:ae:e7:3c:48:66:2c:bc:18:bc:3b:dd:
70:68:07:a8:eb:83:02:c5:af:51:38:b5:71:2b:26:94:8b:a2:
24:91:fa:20:e4:c2:cc:b5:ec:ce:c8:83:57:e8:fa:d9:46:c1:
c4:76:3f:bb:e5:f2:a0:2c:5f:f4:75:ea:a4:2c:87:1f:89:f3:
69:62:b0:34:78:94:a1:2a:53:60:06:6d:82:39:97:ea:7e:35:
12:fb:57:c7:c5:93:81:4a:47:95:35:22:7b:1c:df:c2:2f:dc:
1c:b6:43:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:23:24 2025 by rpki-client