Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NTAuUsxjFSWY_iW0tN4HC44t1A0.roa
File: NTAuUsxjFSWY_iW0tN4HC44t1A0.roa (raw, json)
Hash identifier: CMA3VwZFFz6rge+278E5wekS1tbNY2mtSkSmPU7nE0k=
Subject key identifier: 35:30:2E:52:CC:63:15:25:98:FE:25:B4:B4:DE:07:0B:8E:2D:D4:0D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AECAB3D1E70D11B01416FD5475C9E4981
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NTAuUsxjFSWY_iW0tN4HC44t1A0.roa
Signing time: Sun 01 Oct 2023 19:15:59 +0000
ROA not before: Sun 01 Oct 2023 19:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ec:ab:3d:1e:70:d1:1b:01:41:6f:d5:47:5c:9e:49:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 1 19:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35302e52cc63152598fe25b4b4de070b8e2dd40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:ab:af:13:ee:7f:ff:67:84:2e:0c:fd:7f:
97:fe:88:be:77:58:5c:c2:ed:89:3b:55:f7:54:f2:
07:f8:f7:d2:60:95:e9:51:0f:cd:22:75:0c:ff:55:
b7:a6:c7:24:a9:fb:6f:b3:c8:52:6a:95:b4:29:63:
91:80:6f:54:a3:27:a1:72:d4:28:82:70:84:86:ba:
55:ce:86:7b:22:95:26:ed:f1:a0:c4:a9:e2:f8:ea:
2c:56:70:e1:75:17:d8:df:69:f2:75:a9:d3:6e:c8:
4d:58:46:f2:5d:a2:c1:97:dc:38:24:e1:e6:5f:27:
c2:a1:e1:62:ce:c4:21:59:f9:16:fb:d6:11:0d:98:
57:8f:55:c4:0c:9c:fd:8b:49:08:7f:50:2c:24:c5:
5c:5c:02:19:fe:83:da:9d:37:db:d7:5e:da:e9:be:
84:cf:4d:6e:c8:1b:7a:b2:b2:6d:92:13:9e:55:22:
88:88:13:f6:3c:9c:05:58:61:1d:74:7e:aa:f7:c4:
a6:0a:09:cc:38:28:9b:43:79:6d:af:02:cd:87:5f:
d4:3c:56:ee:47:88:f8:86:71:56:d6:fd:a9:39:43:
93:21:37:bf:8c:e6:99:2f:b6:9e:25:6d:d7:23:6b:
c3:7f:77:3d:b8:e3:b4:4c:71:96:c0:5a:9a:b0:09:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:30:2E:52:CC:63:15:25:98:FE:25:B4:B4:DE:07:0B:8E:2D:D4:0D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NTAuUsxjFSWY_iW0tN4HC44t1A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:d7:44:60:e9:24:0c:ec:72:1e:cd:0a:46:a6:87:89:26:9e:
2f:66:e7:74:69:2d:b0:34:96:be:a8:97:ca:51:c1:74:54:99:
cb:4a:56:d6:e3:ef:57:f9:f0:6b:f1:9b:da:ab:52:43:8d:c0:
5c:7b:2c:56:8f:b3:28:56:2a:20:2f:d7:b2:ec:b9:ca:92:3f:
8d:0f:17:d9:26:c7:87:55:c1:5d:b2:74:cf:73:30:c4:2e:c2:
86:07:c8:8a:34:c3:bf:67:0b:fb:32:b4:d4:af:eb:3a:38:da:
71:52:c5:af:f7:cd:f0:1e:1e:5e:c6:ed:a8:ae:9c:a9:04:4d:
13:6f:d4:37:64:d4:fd:73:65:22:fd:b4:13:50:31:5b:20:23:
e4:3c:11:fe:01:61:11:69:62:d0:b7:47:41:3f:64:32:da:71:
ea:d8:43:74:07:12:93:2d:cd:15:d5:68:97:5d:ea:dd:72:fe:
eb:5d:b6:ca:fa:c4:9c:b0:d9:cd:cc:bb:78:ca:37:07:3f:a4:
99:e6:bd:97:1d:f6:a7:65:05:40:ae:c1:04:8b:ef:6f:7e:cc:
82:52:c1:15:cd:08:ac:b9:37:0a:6a:a8:12:0e:e9:b4:a9:5d:
19:97:03:d7:8c:ef:8e:ca:7a:f0:f9:67:73:2b:73:02:6c:6f:
4b:9e:65:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:25:44 2025 by rpki-client