Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/NGXm4fKpYS7oJWrg425CFR7M9IU.roa
File: NGXm4fKpYS7oJWrg425CFR7M9IU.roa (raw, json)
Hash identifier: Nw66TH8z9oN8afoHfMTaxconWkRq9Cvm/hRuR23FIT4=
Subject key identifier: 34:65:E6:E1:F2:A9:61:2E:E8:25:6A:E0:E3:6E:42:15:1E:CC:F4:85
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A63F91BE6D0B55D65BDF8C57104AED74E
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/NGXm4fKpYS7oJWrg425CFR7M9IU.roa
Signing time: Tue 05 Sep 2023 06:13:04 +0000
ROA not before: Tue 05 Sep 2023 06:13:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:63:f9:1b:e6:d0:b5:5d:65:bd:f8:c5:71:04:ae:d7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 5 06:13:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3465e6e1f2a9612ee8256ae0e36e42151eccf485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f7:a7:e9:05:37:3a:b4:23:41:7e:a5:b4:9e:
c4:d0:98:75:26:3f:93:bc:b9:66:86:5f:03:a0:6e:
42:91:ec:16:19:2f:70:48:70:65:49:6c:35:45:b1:
9a:5d:4d:97:47:2a:6c:9d:5a:be:e8:b8:03:c7:50:
82:ca:f7:3a:35:a8:f6:a3:b7:ce:99:d1:5c:86:4c:
d1:15:f8:7b:f4:47:15:d4:30:e7:34:48:bb:bb:98:
b1:40:83:ad:20:9a:8e:fc:e1:55:97:27:39:81:7f:
b3:21:ff:0f:f4:82:34:97:2c:57:30:a3:0d:3e:67:
d0:94:f2:18:c6:6a:11:c4:f7:bf:0a:76:af:c2:2f:
d9:09:05:89:27:ce:ef:07:19:7a:32:50:df:a4:c5:
2a:d4:de:d4:e5:bc:d4:56:57:35:e4:e5:95:3f:3d:
56:eb:0c:0c:6c:d5:78:99:4a:72:d5:db:8b:45:91:
7c:1a:2f:40:fb:9a:35:42:b0:65:6e:f1:14:d2:db:
27:e7:12:31:ad:29:12:9c:c5:6a:f2:42:d9:20:45:
29:45:f3:42:6b:31:d1:a1:e4:01:84:62:11:68:ab:
b8:b8:81:7a:7e:8e:cd:20:ee:3e:e1:f7:97:91:e1:
1f:56:c3:9a:1f:bf:58:81:a6:24:f7:4f:1c:62:1e:
e4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:65:E6:E1:F2:A9:61:2E:E8:25:6A:E0:E3:6E:42:15:1E:CC:F4:85
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/NGXm4fKpYS7oJWrg425CFR7M9IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:28:05:f6:61:30:b5:91:fc:96:0c:d1:f4:f0:bc:38:bd:53:
cb:f0:e9:58:a3:9a:3a:18:dc:e2:d8:15:ea:98:a8:ec:97:ee:
c1:10:71:2e:68:80:04:a6:3f:58:59:47:a9:9f:7b:c0:20:55:
c0:4d:5b:ec:04:34:48:b6:20:d2:c0:35:7b:7c:69:00:2d:4b:
5a:51:a3:c4:a9:72:74:75:03:f7:50:98:30:33:23:67:30:d1:
1a:c6:a1:f2:77:f7:6e:45:35:d4:a9:8a:ae:d8:82:79:94:7f:
24:49:38:7d:c6:16:60:32:a3:54:d9:78:d3:8b:6a:0b:a0:01:
d1:4e:c4:64:c7:6c:4a:e9:6d:87:4f:29:3d:63:11:d3:09:36:
26:fb:d2:2e:57:0a:d1:0d:6a:30:39:52:3e:c4:6c:3e:fa:1c:
ef:a7:76:db:90:f0:1e:9e:1d:f7:66:0c:ef:8e:ed:50:f1:f9:
48:ce:29:26:2d:03:e1:6a:ef:38:ab:5e:7d:52:de:98:73:17:
a1:2a:7f:7a:e2:e4:0d:82:fa:15:bc:fb:d9:6c:1b:ca:03:34:
d0:6e:3c:70:21:e4:cb:81:33:3f:65:25:1f:4b:05:85:56:10:
77:f6:cf:d4:2a:4c:7b:77:d4:67:af:62:11:44:0a:45:a8:51:
5a:63:3b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:06 2025 by rpki-client