Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ncWQvTN3IgEuN3AdHzajBfm8a_w.roa
File: ncWQvTN3IgEuN3AdHzajBfm8a_w.roa (raw, json)
Hash identifier: 2Afp/56WKcXH18DdVaaV4oESRwBFnNnIWQK4H8UglBc=
Subject key identifier: 9D:C5:90:BD:33:77:22:01:2E:37:70:1D:1F:36:A3:05:F9:BC:6B:FC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C7A46C03FB2D26F9ADDE85FA2ABCB0F7C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ncWQvTN3IgEuN3AdHzajBfm8a_w.roa
Signing time: Mon 18 Dec 2023 00:15:06 +0000
ROA not before: Mon 18 Dec 2023 00:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7a:46:c0:3f:b2:d2:6f:9a:dd:e8:5f:a2:ab:cb:0f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 18 00:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dc590bd337722012e37701d1f36a305f9bc6bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:43:60:10:35:9d:5a:4a:65:b9:6a:1f:e1:
79:fe:e7:1a:76:54:7c:04:8b:df:4e:cd:00:be:ae:
62:4d:ae:8a:6b:ca:e0:69:31:47:1c:b1:d7:9a:b8:
8c:d2:41:d8:79:eb:e9:58:b2:ec:6b:a5:33:4f:7e:
d4:7e:09:14:7f:8e:8a:f9:73:85:87:bc:0d:8c:33:
1a:6e:b6:b7:0f:e7:f5:ee:ed:6b:70:9e:2b:f3:9d:
56:2c:83:25:e7:1f:b2:66:02:7c:04:2c:97:92:03:
b2:cd:1b:90:59:f7:73:cd:f6:a9:5b:8d:c7:ff:d2:
2f:c4:2d:ab:b8:d6:8c:a6:bb:e4:34:f0:1c:fa:2b:
ac:72:93:4d:92:6b:79:a0:5b:9f:aa:0d:f7:f9:0c:
d4:4f:c4:29:08:63:19:b2:49:05:ba:98:b4:ef:84:
22:cc:97:6f:b2:5f:76:7f:66:0f:bf:30:df:f2:b3:
a3:b7:cb:4a:59:50:37:f2:77:a5:95:8d:00:02:9b:
8f:41:ac:fc:5f:bf:94:8d:70:10:d0:81:7e:d9:47:
f4:85:99:60:d8:91:8f:71:16:e9:1f:26:27:d9:82:
8e:73:5e:62:70:c9:78:1b:fd:1a:46:cd:10:f3:d5:
41:e2:0f:9d:c4:4e:04:dd:17:1e:ec:dc:ac:11:13:
4a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C5:90:BD:33:77:22:01:2E:37:70:1D:1F:36:A3:05:F9:BC:6B:FC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ncWQvTN3IgEuN3AdHzajBfm8a_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:7c:6b:87:59:43:54:ac:ff:06:b1:13:69:47:f2:99:5c:36:
dd:9d:ce:36:f6:e5:ba:75:e2:39:17:cf:ea:ef:0a:b7:53:92:
72:da:e6:48:75:d0:34:8a:43:31:2c:3e:f7:0b:30:3f:5e:c5:
e2:f2:0f:f1:18:e4:90:79:27:56:d7:3d:13:bc:f7:14:3a:66:
55:53:f9:10:a9:41:7d:3b:d1:6f:b7:e5:ab:92:48:3b:59:4b:
0f:81:0f:46:36:b8:15:66:7c:1d:58:fd:45:1d:4e:d9:c6:c3:
49:ac:5b:ab:85:09:37:95:46:68:fb:9c:ba:3c:0d:9b:8d:0a:
88:b3:fc:ff:7e:57:80:2a:1f:39:b4:77:33:5c:27:43:80:a8:
2e:59:0d:42:75:5b:96:4f:e6:ae:60:6c:ae:20:f7:b6:4f:eb:
46:8a:36:df:a1:62:47:93:46:b2:56:21:7f:66:9d:5d:fa:d3:
06:1e:4a:2b:87:ba:50:12:b7:10:85:1c:67:c4:c9:e6:b3:15:
79:99:12:ef:5e:0e:e2:09:46:35:1f:51:e2:e4:0a:34:a9:13:
5e:8c:6a:4c:af:5e:53:12:1e:76:27:39:f9:7b:6f:98:03:c7:
68:cc:57:d6:28:0d:d2:56:1a:6c:4d:bf:92:1c:1c:06:a6:bb:
4f:16:d9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:27:13 2025 by rpki-client