Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NTgfEoC61HnkXiTzkWKRsjgP9rc.roa
File: NTgfEoC61HnkXiTzkWKRsjgP9rc.roa (raw, json)
Hash identifier: 6UPeFnorC5r2g8pfa0G0rwBlmqH0zDzmTHNB7tsXaG8=
Subject key identifier: 35:38:1F:12:80:BA:D4:79:E4:5E:24:F3:91:62:91:B2:38:0F:F6:B7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0A3A994DA6575C99FBDF18D50D88CDCD
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NTgfEoC61HnkXiTzkWKRsjgP9rc.roa
Signing time: Sun 26 Nov 2023 06:04:21 +0000
ROA not before: Sun 26 Nov 2023 06:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:a3a:7a52/128 maxlen: 128
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0a:3a:99:4d:a6:57:5c:99:fb:df:18:d5:0d:88:cd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 26 06:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35381f1280bad479e45e24f3916291b2380ff6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:cc:50:7c:3b:80:95:c0:38:ff:c5:c4:35:
d6:a0:29:eb:13:f4:45:5a:f1:e2:e0:55:81:7f:f2:
dc:5c:3d:29:74:0d:ce:6b:13:25:a5:21:fc:a7:2a:
c3:5d:b6:85:de:1d:bb:f9:74:c4:2a:1b:9f:2f:e5:
0d:1c:b7:c7:d4:63:38:84:f2:f7:35:03:99:bf:29:
bb:f5:e2:0f:20:f9:fe:3b:d2:35:6b:1e:7a:35:f9:
b1:fb:61:7e:0b:7d:0a:4d:f4:9a:71:4d:b4:69:62:
3e:ec:e6:e1:0d:62:20:ee:7c:4d:4f:ad:3b:03:70:
a8:50:64:fe:d3:4b:a1:9b:1f:5f:a5:b7:2e:aa:7f:
d3:70:32:e3:78:27:83:77:02:88:cc:36:cf:b2:7d:
79:f1:dc:8b:89:60:75:ca:4c:b2:4a:47:54:ec:65:
94:79:f6:65:f7:2e:ec:9d:d0:eb:fc:b8:d6:b3:34:
4d:30:d1:fd:35:64:2a:51:59:40:0e:1f:d2:3a:ec:
2a:9b:c9:20:73:f4:76:e2:85:71:df:80:75:25:24:
21:f6:5f:ba:45:cd:d2:e3:34:9c:1d:9b:a5:ae:9f:
60:e5:e9:40:44:20:0f:d2:30:d9:57:23:bb:0f:56:
61:a6:67:08:d2:3b:3b:1b:d4:96:09:f0:3a:55:ef:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:38:1F:12:80:BA:D4:79:E4:5E:24:F3:91:62:91:B2:38:0F:F6:B7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NTgfEoC61HnkXiTzkWKRsjgP9rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b7:5c:cf:39:8b:0e:ab:44:53:e3:f5:f3:7a:4e:44:fc:1e:f3:
2b:da:da:2a:2f:e7:81:26:28:0f:bb:04:19:aa:b0:79:d2:ba:
49:82:27:12:92:6e:90:91:d1:ce:d5:ce:db:76:dd:bd:be:07:
cb:55:8d:54:cd:ac:d9:97:07:59:c2:c4:77:82:1c:7a:55:f9:
18:e6:09:20:ff:48:b8:4d:cc:6a:f3:a6:b2:cc:c6:19:8a:e3:
10:81:3d:ac:af:5b:61:dd:3b:9c:04:a0:30:35:cf:1f:dc:14:
b6:2a:22:fe:6d:7b:e0:d9:fb:df:f9:24:1e:24:ff:af:d3:3a:
81:4d:04:b8:ec:b9:d0:ec:de:89:6e:bd:4a:26:79:f5:83:2a:
b1:07:63:4f:fb:42:ea:a6:82:9e:c4:ef:07:aa:38:82:95:e1:
39:f8:55:28:94:72:bd:bb:e8:2b:90:ea:1d:52:30:d0:00:e1:
1b:45:e3:18:ab:76:53:6c:c3:60:46:2d:a5:41:9b:58:05:d3:
a9:0d:0a:fb:62:a9:12:b5:d9:82:fd:62:7a:94:fd:bd:50:d9:
60:f8:2a:f9:2e:44:45:9f:df:52:cd:65:43:ae:28:d7:7e:83:
10:31:71:a8:c6:23:d8:c6:6a:73:de:77:9d:ae:0e:54:75:b8:
b2:7a:b3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:25:33 2025 by rpki-client