Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5NFBAKIEdaianymLjxmH-GyRUH8.roa
File: 5NFBAKIEdaianymLjxmH-GyRUH8.roa (raw, json)
Hash identifier: 0SikZaMcTLO7J+KgtmPtl75QYwAUmrKcPSpuFzXsT4o=
Subject key identifier: E4:D1:41:00:A2:04:75:A8:9A:9F:29:8B:8F:19:87:F8:6C:91:50:7F
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD1D8488A4715F06838D7C748B72B165F
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5NFBAKIEdaianymLjxmH-GyRUH8.roa
Signing time: Tue 26 Sep 2023 14:15:27 +0000
ROA not before: Tue 26 Sep 2023 14:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:d8:48:8a:47:15:f0:68:38:d7:c7:48:b7:2b:16:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 26 14:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4d14100a20475a89a9f298b8f1987f86c91507f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:ff:6f:60:2f:52:17:40:f4:e7:40:4b:6e:
bf:6e:4b:b9:c6:ec:f5:63:8e:69:9b:c4:c0:68:0a:
82:bd:02:e2:c4:52:75:09:4e:e5:f4:9d:c6:51:6a:
de:83:d8:e6:39:c0:0d:10:1b:6d:ba:3f:b5:bc:a9:
d6:77:b9:bd:06:2e:54:c2:84:32:2b:b7:4d:8d:f6:
06:4f:b0:9d:62:f8:4d:89:85:af:ee:9a:35:95:ab:
f7:88:0d:f4:56:4f:96:a6:9a:6e:28:af:dc:54:57:
fb:19:84:70:07:8f:b2:ac:e7:14:24:75:c5:11:94:
65:e9:f7:1c:4b:a0:8a:fe:2c:48:ff:12:75:29:6c:
9d:50:42:87:a6:ca:f6:86:1b:f2:8c:8f:36:22:47:
a4:ed:9d:c9:62:0f:06:d6:98:d9:8e:f9:7c:8c:39:
ac:b5:96:7f:a2:39:10:d9:60:0c:d7:de:99:cf:00:
96:9d:c3:e2:ce:fd:ae:4c:c8:84:17:5b:4e:85:36:
78:ce:c5:9d:83:3c:aa:c9:82:85:a5:5d:d2:94:0c:
59:0b:78:75:b0:8c:a7:7d:41:de:12:b0:f6:2b:4e:
97:57:4b:11:64:e9:53:9c:af:fa:f4:a6:0b:78:f3:
d5:ae:a5:e2:22:07:f4:b2:9a:94:fa:49:9f:f2:4a:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D1:41:00:A2:04:75:A8:9A:9F:29:8B:8F:19:87:F8:6C:91:50:7F
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/5NFBAKIEdaianymLjxmH-GyRUH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:c6:22:c8:1c:96:99:24:52:7a:d2:a3:8d:ae:0d:ab:1a:00:
d1:73:4e:80:8e:7b:e5:3b:e3:ef:c1:94:8a:6e:c9:42:96:46:
57:5b:4c:42:eb:6d:cd:d0:8d:d9:23:00:d0:82:f3:11:21:10:
d1:84:84:c7:59:ba:64:1c:f1:37:88:fa:67:04:6f:b6:35:1b:
90:0e:a9:ad:12:c8:ea:59:c8:7b:6d:a1:e7:38:5f:90:3d:29:
0e:75:d1:3e:0d:1b:ad:0e:5d:cc:d0:c3:19:c1:c1:4a:8c:e9:
76:84:4b:97:e7:0b:f5:56:9a:00:c5:f9:05:5b:8d:50:61:6a:
d3:84:03:a9:95:53:1f:8a:1d:b3:bf:ce:a4:0e:7e:cb:69:77:
1d:74:94:4d:26:7f:18:c4:bf:f9:fe:2f:ec:8d:bb:69:7f:79:
7f:92:67:03:28:4b:53:ed:8e:ab:c9:d0:02:97:22:9d:ce:c1:
fd:d6:d8:ff:f0:f7:e6:1c:bf:10:ea:29:65:05:81:14:ca:7f:
d9:17:a3:55:14:aa:26:8c:6d:bb:b1:df:f7:de:27:0b:4a:b1:
36:3a:2b:92:91:22:5e:8d:e1:36:35:0a:de:39:1f:6e:2c:5f:
58:2f:ba:e3:36:7c:61:27:82:d9:28:67:99:83:ab:44:8f:c6:
b4:30:7b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:10:24 2025 by rpki-client