Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nxWgzCHK3EOQfPeG3qY89Ebat_4.roa
File: nxWgzCHK3EOQfPeG3qY89Ebat_4.roa (raw, json)
Hash identifier: HcCjVw1/mlWs4+PJZAy3uh1B7vD2y2Cl33A0+3eMtZ4=
Subject key identifier: 9F:15:A0:CC:21:CA:DC:43:90:7C:F7:86:DE:A6:3C:F4:46:DA:B7:FE
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B8B74E5D080FEE756A9A5275D24F9039A
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nxWgzCHK3EOQfPeG3qY89Ebat_4.roa
Signing time: Wed 01 Nov 2023 15:16:15 +0000
ROA not before: Wed 01 Nov 2023 15:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:74:e5:d0:80:fe:e7:56:a9:a5:27:5d:24:f9:03:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 1 15:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f15a0cc21cadc43907cf786dea63cf446dab7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:36:f3:eb:5f:ec:5e:35:dc:e7:c7:00:a7:
ee:1e:0d:5a:f8:a3:97:54:25:07:99:93:cb:ca:d6:
4f:66:31:10:c8:2e:b3:04:23:c0:35:9c:f0:12:38:
a0:45:30:be:cf:02:f0:66:1f:bf:47:46:bf:79:1d:
a2:b9:22:a0:86:11:0e:53:f1:3c:b9:13:cb:6f:3e:
ad:6d:c7:4d:a3:8e:3a:9d:b4:74:48:bd:41:11:c5:
c9:d8:f9:57:6a:7d:ec:94:39:99:9b:e5:85:a9:e2:
af:b5:c7:04:2b:b5:90:5c:b4:06:49:a5:db:99:48:
3a:ce:7d:01:09:2a:35:e5:1f:59:f5:5b:fc:41:d7:
41:f2:73:5e:f9:11:d1:ce:67:8e:57:3e:0a:32:3c:
42:9c:a4:de:7a:15:09:e4:85:e0:2b:4d:d5:0f:79:
8a:0d:a6:d3:de:91:42:d4:cb:1e:a3:2a:63:08:34:
ed:dd:67:f6:88:c9:72:b0:cc:27:9b:30:9c:22:5b:
15:9f:64:ae:25:21:bb:46:16:9d:fd:f7:48:1a:a4:
04:79:35:a0:3c:75:18:a9:45:b1:d1:e5:b6:16:72:
70:f3:b0:5b:5d:38:cb:ec:fd:79:cf:75:73:43:1e:
45:bb:5f:9a:75:07:2d:6b:6b:13:36:b4:41:5f:a9:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:15:A0:CC:21:CA:DC:43:90:7C:F7:86:DE:A6:3C:F4:46:DA:B7:FE
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nxWgzCHK3EOQfPeG3qY89Ebat_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b9:ac:19:31:36:42:43:c1:69:67:fc:2b:3d:34:68:f2:f9:95:
ee:ae:fd:b0:38:7f:95:e8:e5:c4:e1:6d:f8:f4:86:f1:2f:bf:
cd:78:7f:1c:83:be:42:24:63:d3:11:27:f4:63:df:37:79:0b:
03:87:a6:a2:db:be:70:ae:20:4f:e6:b8:19:ac:76:de:c2:85:
f9:29:b6:dd:49:b2:2d:3d:e2:ba:f6:94:1e:59:14:47:9d:0d:
fa:a9:8a:75:ab:80:5e:20:a6:f0:f8:d3:cc:04:5a:57:d0:b2:
68:af:d7:7c:b2:f1:e5:8d:8c:f9:9c:bc:75:b0:af:82:20:eb:
89:bb:3f:78:98:73:ee:66:0f:67:01:ac:46:e5:e0:bf:60:bd:
d9:05:3b:c5:ce:5e:b0:94:27:24:73:28:c9:22:b2:bf:80:37:
90:0e:34:79:30:64:59:e3:67:1a:c4:80:18:13:e3:35:6d:da:
41:6e:d0:d9:3a:9d:d3:d2:62:0c:26:4a:a5:02:7e:fb:07:c6:
0f:2d:c5:b9:44:58:59:4e:37:d0:35:a8:53:54:d1:52:c7:b9:
f2:ac:48:ae:61:f5:77:fe:d6:62:b3:ce:28:f0:20:b8:50:97:
20:f3:24:b4:89:df:b0:ef:9d:6f:fe:b6:82:61:ea:76:5c:98:
89:3b:30:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:24:02 2025 by rpki-client