Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x-0Nhb02c1LRv6U1CS-6IGkdUT0.roa
File: x-0Nhb02c1LRv6U1CS-6IGkdUT0.roa (raw, json)
Hash identifier: 9yhZfmRZ+TAhi8lp1VDOqT5AJw50InIf2qJbsT/5P2Y=
Subject key identifier: C7:ED:0D:85:BD:36:73:52:D1:BF:A5:35:09:2F:BA:20:69:1D:51:3D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B9287D09921B8BB7C2616070258E0EBFA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x-0Nhb02c1LRv6U1CS-6IGkdUT0.roa
Signing time: Fri 03 Nov 2023 00:14:16 +0000
ROA not before: Fri 03 Nov 2023 00:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:92:87:d0:99:21:b8:bb:7c:26:16:07:02:58:e0:eb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 00:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7ed0d85bd367352d1bfa535092fba20691d513d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:f0:b0:36:02:2b:b1:c8:4e:f3:8c:3b:8b:
82:5d:b3:fc:93:39:e3:a7:93:82:3a:00:10:9b:7b:
dd:fd:75:8d:f8:f6:9b:5f:64:6b:4a:8b:4e:20:0f:
50:ce:7e:ac:01:d8:75:ff:94:20:0a:2b:a3:75:69:
a6:95:2e:b7:b6:13:be:a4:2c:42:93:a7:d5:37:7f:
7a:4c:72:8b:78:b6:29:42:16:dd:e2:d7:65:da:e8:
6c:f3:2a:5a:d4:5b:b0:3e:a3:20:48:ed:17:e2:8d:
a7:f4:b8:bc:aa:5a:e6:ee:b1:7a:fb:f6:09:f1:a2:
4b:5a:c7:fa:a5:46:90:e3:01:fb:b7:9b:09:be:8e:
cb:66:4a:66:a8:32:1a:8d:b0:45:7b:96:21:f2:59:
a4:11:2c:fa:17:be:b4:46:7b:58:fd:c2:b2:58:58:
36:e7:dd:7f:e7:c5:2b:6d:bd:46:49:8c:06:41:6e:
98:3c:c7:ad:a5:a1:08:00:e2:7d:83:fc:f4:69:f9:
c3:41:3e:e7:c5:06:96:91:93:ac:13:72:68:46:0c:
ca:d8:ee:e9:59:f5:51:2f:f4:e5:a8:b9:33:9d:61:
7b:e1:63:e6:21:93:14:e5:c2:01:0e:92:13:6e:50:
70:87:4e:6b:f5:db:33:ed:35:a7:4a:d0:bf:76:56:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:ED:0D:85:BD:36:73:52:D1:BF:A5:35:09:2F:BA:20:69:1D:51:3D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/x-0Nhb02c1LRv6U1CS-6IGkdUT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c7:bd:e5:c9:15:09:b3:b5:e6:b5:38:90:cd:c1:41:a4:ba:66:
22:6b:4e:09:8c:20:40:86:a2:80:32:c6:e5:bb:b5:a8:94:62:
23:5f:a5:78:ac:e2:de:eb:3c:a5:29:ce:3f:c9:f4:f4:50:ae:
ee:5d:56:23:a9:08:e0:c5:ee:74:dc:aa:ec:30:c0:95:6e:f0:
ed:47:73:e9:2b:01:8a:2c:51:8e:80:70:07:09:1c:a9:cc:2a:
7f:d3:25:6a:b3:23:6d:d0:48:5d:41:4a:db:cf:6c:a6:9b:cc:
e3:e6:4c:17:51:06:be:68:0d:06:ae:19:de:42:f3:03:01:0b:
98:24:b2:59:32:b4:be:ec:09:60:1b:20:04:75:a0:3d:53:ec:
ac:ed:c9:d5:a1:22:2b:53:4b:69:de:b3:86:e6:d1:f5:8c:cc:
45:47:9e:9a:ad:78:86:5d:fb:f1:17:3f:94:91:be:a8:1f:e9:
3a:46:cc:35:d3:0c:09:e7:52:1f:d4:dd:62:d4:6d:63:9d:97:
33:a7:f7:f0:43:c7:6b:f0:3f:41:31:28:7f:97:e3:a0:0d:3e:
ae:c5:c5:57:ae:af:b2:b1:93:18:80:95:a2:92:0b:09:75:c8:
4f:f0:53:30:08:ad:ea:36:80:c3:85:2a:86:58:e9:56:00:04:
72:84:20:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:25 2025 by rpki-client