Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ns4UWMlTL2dRd0lvqBTuaKMEbaU.roa
File: ns4UWMlTL2dRd0lvqBTuaKMEbaU.roa (raw, json)
Hash identifier: osX3o2XCjq6RwiK96quCNJ8QYN65fuYZxlJjF/mEZLU=
Subject key identifier: 9E:CE:14:58:C9:53:2F:67:51:77:49:6F:A8:14:EE:68:A3:04:6D:A5
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BDDD0A9F09EAB8F657E0B55F8B1747E71
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ns4UWMlTL2dRd0lvqBTuaKMEbaU.roa
Signing time: Fri 17 Nov 2023 15:05:21 +0000
ROA not before: Fri 17 Nov 2023 15:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18b:ddcf:d071/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:d0:a9:f0:9e:ab:8f:65:7e:0b:55:f8:b1:74:7e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 17 15:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ece1458c9532f675177496fa814ee68a3046da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:26:43:57:c0:46:e5:d6:38:32:66:b3:f7:98:
86:5e:ae:99:8f:8e:f5:5d:e4:ca:da:eb:38:79:f1:
11:ae:de:8a:a2:9c:9d:99:43:31:c1:39:cb:4a:4f:
3f:f0:5a:5c:0b:8d:68:70:b1:20:46:1c:7f:04:b4:
ae:8a:c7:c7:53:a9:b7:e5:bc:a7:50:47:53:3d:61:
57:75:8f:8a:19:04:6d:50:e8:7b:63:2f:4c:76:6f:
43:7a:e3:48:db:6a:6d:af:bc:62:78:1f:dc:35:67:
05:f1:ed:c2:70:12:79:f0:16:f2:f1:aa:0e:8e:9d:
6a:0f:f4:ca:fa:a5:9e:69:bf:dc:8e:7c:fd:e4:6c:
91:8d:22:f5:e4:5f:4c:a4:e3:de:f6:d0:c2:fa:5c:
02:fa:43:64:c8:98:1b:9a:26:1f:92:46:aa:ea:bc:
9b:d4:a2:e2:c6:1d:ca:b3:bb:86:af:a5:ee:84:31:
ee:bc:f7:1a:3f:f0:25:ee:b1:2d:7d:56:29:df:dd:
dc:a7:e6:2c:9e:ed:33:69:16:ca:08:ad:25:95:a5:
e7:22:b8:7e:b9:d6:4a:42:ee:26:c7:3c:2f:e4:8c:
7e:7c:9e:8a:de:6b:f2:9a:12:a0:a7:c1:e0:55:4f:
2d:14:5a:84:21:74:d0:ee:fc:9c:a1:b4:68:fa:35:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CE:14:58:C9:53:2F:67:51:77:49:6F:A8:14:EE:68:A3:04:6D:A5
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ns4UWMlTL2dRd0lvqBTuaKMEbaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:72:b3:27:13:ac:1b:ad:74:bb:0d:0b:03:77:f9:77:79:05:
fc:da:33:50:ff:3d:ea:37:83:75:2e:ad:34:3d:46:79:03:fc:
02:6f:14:6a:5b:55:d6:67:64:2f:73:6f:12:f5:2f:a1:a1:e2:
8a:83:53:d6:02:ae:5d:c4:4f:5c:b3:1a:1f:9e:d4:e1:62:fa:
23:ad:99:57:82:29:46:d5:58:d9:ac:ca:f6:01:56:ee:ce:15:
fe:84:c3:0b:f3:b1:4c:12:ac:d1:b7:d7:fb:95:60:3c:ef:61:
64:70:90:16:80:58:c3:03:d4:86:09:fc:65:11:17:0a:f6:c1:
bf:4f:33:ee:9a:78:7f:de:13:f6:5b:63:f5:b9:bf:1e:4b:f5:
4e:15:ad:5c:7b:97:20:e1:59:67:aa:6f:09:43:20:fd:90:ff:
f0:08:7a:ea:4c:9c:77:5b:7d:e4:67:c5:24:1a:09:b7:1e:b6:
e8:08:8a:60:3c:bd:0d:30:98:80:8d:75:b7:84:f6:80:c9:62:
74:1e:9a:0e:00:40:3a:71:47:04:82:5f:f6:36:56:d2:a5:19:
fd:23:0e:03:d9:aa:59:fe:10:87:e0:35:e0:99:85:d6:73:a9:
ba:07:93:0a:da:cd:df:e4:40:9c:35:0a:b2:de:db:af:fe:9f:
35:42:4a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:01:06 2025 by rpki-client