Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nk_LkcGJeOhs5IIJydwZl-XXBCs.roa
File: nk_LkcGJeOhs5IIJydwZl-XXBCs.roa (raw, json)
Hash identifier: szmzASOY3u0kvaCw9QzkhVHQ7Yxu+HpQQZzMgc8BFvg=
Subject key identifier: 9E:4F:CB:91:C1:89:78:E8:6C:E4:82:09:C9:DC:19:97:E5:D7:04:2B
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B0AB657A723389ECA656D2DC0F7CD7C8B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nk_LkcGJeOhs5IIJydwZl-XXBCs.roa
Signing time: Sat 07 Oct 2023 15:16:44 +0000
ROA not before: Sat 07 Oct 2023 15:16:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:b6:57:a7:23:38:9e:ca:65:6d:2d:c0:f7:cd:7c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 7 15:16:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e4fcb91c18978e86ce48209c9dc1997e5d7042b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:ee:22:2a:62:1e:15:dd:d8:33:06:99:4e:
9b:c6:98:40:72:82:79:1e:71:13:b2:ea:47:79:98:
16:ad:01:85:94:fa:bf:c3:cd:b6:bf:15:48:5a:56:
cf:a4:cb:49:ec:6f:36:21:1b:ad:f7:37:2f:3a:6e:
00:ba:8a:8a:c3:82:4f:a5:7a:74:a1:b8:59:2d:76:
0a:52:b3:7f:c2:ba:c5:30:1c:99:2e:cb:82:1d:d9:
2a:bc:85:3c:e0:2b:d8:d5:87:4d:5d:d3:8a:75:03:
96:66:bf:eb:25:46:f3:09:aa:1b:2f:7f:0a:ee:e8:
f3:4a:d6:ce:9c:c3:b3:3d:b8:42:b9:07:27:69:e3:
a1:ef:1e:a5:25:c2:ec:28:ad:8c:15:1d:50:8c:b3:
5e:0e:2d:9a:a8:41:92:41:08:15:09:a6:71:4f:ae:
57:76:00:bf:ff:67:8c:c0:76:f2:74:11:2f:32:7f:
1b:0a:a4:e4:92:03:b1:f4:fb:05:fe:67:bf:81:3c:
ee:ca:12:94:94:a1:6a:a7:c8:07:fc:ea:fe:b6:50:
38:f2:08:3c:ef:58:4c:5e:db:98:7a:ec:ec:6e:f5:
46:bb:8a:33:b0:53:3f:7e:e8:6c:6f:73:d6:3a:e9:
e4:c2:18:5f:09:51:e9:99:58:8a:4f:8a:a4:d3:bb:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4F:CB:91:C1:89:78:E8:6C:E4:82:09:C9:DC:19:97:E5:D7:04:2B
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nk_LkcGJeOhs5IIJydwZl-XXBCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:c8:74:65:10:4f:0b:22:ea:d9:80:1f:05:29:bc:dd:a8:3a:
a5:a6:64:13:35:cd:9a:5c:84:f0:1e:dd:4d:0c:89:79:a3:d2:
06:a0:78:e0:f8:c8:29:2d:e2:2f:0d:27:24:4e:91:58:f5:3e:
36:01:2a:29:69:de:f8:a9:16:d3:df:46:73:ce:5d:bd:cb:a8:
2e:71:fe:d3:7b:af:06:1d:f3:42:5b:6a:fb:15:df:ff:4e:df:
0f:ea:f4:4d:55:cd:69:5c:8d:12:b1:e0:a9:3c:ca:55:e5:f0:
8f:1a:e1:69:90:50:65:0f:d5:50:43:71:12:60:a5:57:2e:3f:
ec:17:ba:02:5d:1c:f8:4b:ef:e0:40:e9:8d:08:9c:03:d4:0f:
e3:e9:e8:2e:dc:a5:f7:fb:df:d8:15:8e:83:52:66:ce:eb:a6:
05:62:ce:89:75:78:5e:d7:5f:2a:8c:46:62:b0:90:18:60:44:
a6:72:ea:fb:90:fb:97:eb:0c:08:88:26:8d:6e:db:eb:6a:12:
e8:41:a5:17:a0:10:93:bb:59:8d:ce:f2:f8:0a:11:6c:8d:17:
de:bf:e4:d1:8c:a8:f5:ad:71:8b:84:27:54:fe:a4:a7:bf:1b:
e4:c4:e4:2b:a6:ed:e3:bc:9d:7a:df:b2:18:41:cb:af:d5:9e:
3e:76:23:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:26:40 2025 by rpki-client