Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nf7_JSdH9WelTYl8-shn9ilmADw.roa
File: nf7_JSdH9WelTYl8-shn9ilmADw.roa (raw, json)
Hash identifier: Gxu1cZDs/9XLqdH4DfqU6PK9b8eSMlYZ2RpCnecRSas=
Subject key identifier: 9D:FE:FF:25:27:47:F5:67:A5:4D:89:7C:FA:C8:67:F6:29:66:00:3C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADFFF86734B642CB383F1D14A7AC6BF35
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nf7_JSdH9WelTYl8-shn9ilmADw.roa
Signing time: Fri 29 Sep 2023 08:12:59 +0000
ROA not before: Fri 29 Sep 2023 08:12:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:ff:86:73:4b:64:2c:b3:83:f1:d1:4a:7a:c6:bf:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 29 08:12:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dfeff252747f567a54d897cfac867f62966003c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:33:d9:24:7d:92:90:da:fc:b2:9b:cd:e1:
72:45:45:0d:c9:e8:74:a3:57:30:52:5e:f9:8e:84:
ab:60:f9:64:77:d7:51:8d:e8:eb:42:5e:82:bc:c4:
0e:94:1b:89:54:17:0b:d7:8d:1b:64:ce:e6:72:5a:
04:27:86:d7:56:80:f2:dc:8f:9d:d5:ec:f1:3b:b9:
c2:28:79:78:41:3c:c0:cc:41:db:54:05:78:40:49:
c5:ed:45:d2:09:76:f8:27:4f:a2:86:b0:2b:f3:6b:
16:1b:71:22:b6:b9:dd:69:9b:79:2a:82:3c:3b:7b:
32:a4:3e:8d:ab:6a:68:0c:e3:c7:1c:d0:8c:54:33:
61:f7:09:57:fe:9d:98:ca:56:b4:0e:6f:04:42:95:
6d:0d:b0:6b:2f:27:2f:dd:8b:69:55:25:49:17:d8:
2a:0b:98:36:31:90:85:98:b3:26:17:88:0f:f2:50:
a3:8d:64:11:db:53:86:e2:af:ac:cd:c7:0e:74:24:
da:e4:5e:9e:c1:c3:02:58:d7:60:31:24:e1:d8:02:
58:aa:e7:a8:79:4b:7a:cb:92:8f:e8:56:2f:f9:bc:
0f:cb:e3:39:f6:ca:ba:15:9a:49:76:42:3e:b2:d5:
7e:f2:1a:d4:ad:61:6f:9c:8e:6a:5a:13:66:8a:89:
3c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FE:FF:25:27:47:F5:67:A5:4D:89:7C:FA:C8:67:F6:29:66:00:3C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nf7_JSdH9WelTYl8-shn9ilmADw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:3a:d6:3c:51:0d:cf:16:23:ec:5d:bb:e6:5d:01:6e:db:8f:
4d:c7:91:08:39:3e:3a:50:45:8f:97:9d:19:c7:b9:41:a2:30:
29:50:24:f0:ca:6c:d5:e9:f8:19:50:48:7f:af:33:1f:3e:88:
f5:64:cc:24:b5:e0:d0:c5:56:91:80:d1:29:09:52:13:96:e4:
2d:e4:3e:32:03:1d:65:e7:53:b8:4c:d3:5a:8b:4c:03:16:ec:
19:5b:3a:82:38:84:3a:df:df:c8:6b:e1:8e:26:4c:03:06:b3:
d3:d7:6e:b1:03:d6:4d:ba:be:e9:46:db:87:a9:7f:0a:fd:f4:
23:c0:05:dd:53:31:85:7d:eb:65:a6:54:03:8c:38:3b:d7:2e:
8a:a6:60:38:a1:a4:be:b9:f1:4b:ab:33:42:8c:c9:e9:86:f2:
ae:08:b8:49:99:54:6d:11:06:b9:e7:52:4c:3b:e3:ca:ae:48:
0e:4e:51:49:22:20:c6:59:a1:37:65:7f:43:0d:8d:17:e2:26:
ef:72:96:58:b1:2a:ff:03:67:70:9b:7b:28:5b:f0:0c:4e:50:
06:a0:dc:67:9a:6c:5e:dc:9f:36:95:d3:0f:44:64:f2:16:b0:
93:17:5b:79:dc:6a:c4:3b:4b:48:d0:a2:5b:2a:42:de:fc:99:
77:30:b1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:14:22 2025 by rpki-client