Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Nc287hnCKvzbkGDtXd7EDLssacc.roa
File: Nc287hnCKvzbkGDtXd7EDLssacc.roa (raw, json)
Hash identifier: Y8M7VYg9BdK2rmcnHplDfBLEqKe3383qTWztPxYZW7k=
Subject key identifier: 35:CD:BC:EE:19:C2:2A:FC:DB:90:60:ED:5D:DE:C4:0C:BB:2C:69:C7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B51B8A04B8B39924E8977E3FA5234556B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Nc287hnCKvzbkGDtXd7EDLssacc.roa
Signing time: Sat 21 Oct 2023 10:12:15 +0000
ROA not before: Sat 21 Oct 2023 10:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:51:b8:a0:4b:8b:39:92:4e:89:77:e3:fa:52:34:55:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 21 10:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35cdbcee19c22afcdb9060ed5ddec40cbb2c69c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a0:5d:47:71:38:0f:3d:3a:a3:72:67:0d:1c:
52:5a:2a:6f:ac:8b:a8:d5:15:7a:b8:ad:2b:bd:08:
5f:37:0a:76:33:76:09:ac:3f:7e:c0:be:85:ab:04:
39:d6:ee:40:a7:49:f4:c3:38:61:bd:59:48:70:0d:
61:14:5f:4a:36:a9:0c:72:3d:91:a6:e4:18:02:99:
df:07:e4:ef:68:65:e3:03:c3:fc:8d:5b:a4:93:c5:
f7:53:e4:97:cd:4e:ff:5a:41:b4:84:f8:14:61:f5:
15:a8:ee:25:96:8e:57:f8:cd:48:97:5a:5a:6e:f9:
35:c5:65:cb:3d:82:73:d0:6e:f2:60:16:f8:b7:ea:
08:b5:e5:26:b1:77:70:f5:25:a7:48:65:67:0a:ef:
2e:59:29:49:15:58:ec:f3:cd:41:fe:ac:fa:7b:a8:
c5:ee:11:b0:7e:bf:29:73:0f:78:d6:d6:b8:ce:f0:
2b:30:fb:1f:48:cf:35:e9:ff:d9:79:c7:10:04:a5:
f2:2f:40:2f:a9:68:32:ae:21:31:3b:37:3f:5d:d5:
d3:69:a6:7a:2e:6f:48:af:89:a4:e0:ad:7b:92:75:
a6:04:96:e7:09:f7:ae:d1:1a:ef:97:5e:c7:12:dc:
65:dc:d3:ef:24:ac:fb:b3:a3:33:80:ea:bb:39:ef:
35:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CD:BC:EE:19:C2:2A:FC:DB:90:60:ED:5D:DE:C4:0C:BB:2C:69:C7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Nc287hnCKvzbkGDtXd7EDLssacc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:45:0f:a3:38:de:fd:93:bc:e8:7c:ec:a5:ed:15:28:90:9e:
0d:67:a9:44:54:15:64:ad:4e:6d:00:55:7f:ba:0d:6e:eb:a8:
6d:59:0b:b4:4b:79:70:e3:92:1f:8e:90:7f:c0:0d:88:a7:d3:
25:3b:5a:74:a4:f6:f2:d5:74:bf:4c:e0:0f:56:fb:66:e2:07:
a8:a3:c1:dc:73:3c:da:26:d5:27:f7:10:b0:2d:79:03:5b:25:
d1:32:78:05:01:f3:ab:13:b8:b7:98:19:0c:22:61:8a:83:f3:
c5:8f:a4:ea:07:f3:c3:d7:d6:fa:83:af:a2:c0:06:0f:9c:b4:
69:42:68:80:df:16:07:22:8d:08:6d:9a:f0:d8:9b:0e:a6:56:
60:03:d1:5d:dd:30:49:c1:82:fa:48:48:ec:34:67:0b:f7:5f:
fe:73:06:80:d9:f9:c9:16:4a:d6:fe:ec:ac:23:be:c6:cf:58:
73:0d:12:ed:5a:89:66:92:0c:c3:f2:2a:00:cc:0d:d9:a2:ba:
8a:e6:06:e2:14:a9:33:db:9c:66:37:21:f1:94:a7:f8:f1:48:
42:6b:c0:44:d4:78:35:40:f9:b3:b3:1d:da:55:5b:1b:5b:aa:
3c:49:db:5d:bd:73:53:c9:dd:e0:65:71:ca:0c:99:11:3a:60:
0c:48:91:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:02:40 2025 by rpki-client