Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Nmyg6_B03UzW3APTLMPxCXfJQcg.roa
File: Nmyg6_B03UzW3APTLMPxCXfJQcg.roa (raw, json)
Hash identifier: shemr+G+Kdfj2elzVaabkRBZtCOc1oG3tnX+PqXx+3w=
Subject key identifier: 36:6C:A0:EB:F0:74:DD:4C:D6:DC:03:D3:2C:C3:F1:09:77:C9:41:C8
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BED7AAC31432E4A6546D4C852C04F24DB
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Nmyg6_B03UzW3APTLMPxCXfJQcg.roa
Signing time: Mon 20 Nov 2023 16:05:21 +0000
ROA not before: Mon 20 Nov 2023 16:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
2001:67c:64:ffff:0:18b:ed79:fa03/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:7a:ac:31:43:2e:4a:65:46:d4:c8:52:c0:4f:24:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 20 16:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=366ca0ebf074dd4cd6dc03d32cc3f10977c941c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2c:0a:f1:74:53:2e:b4:e6:95:db:41:f7:7c:
90:2c:d3:fb:48:20:1f:87:df:ec:8c:5d:6e:70:3b:
58:95:c5:eb:5b:5d:79:f6:5a:b5:29:af:99:6c:2b:
90:c5:ca:8a:5b:47:65:2a:da:c1:9a:4a:6d:98:4b:
c2:59:8b:2c:47:af:42:33:a3:58:2f:a1:9b:30:4b:
70:dc:ce:b2:17:48:30:ca:56:91:8e:51:d9:c4:7f:
a3:9d:7f:11:48:b7:a9:c5:07:bd:29:74:16:33:97:
38:fb:03:7b:a6:92:31:3b:3a:3c:e6:d8:77:5c:91:
c8:5d:63:fd:96:8b:be:80:37:5a:e7:6d:42:37:78:
26:65:96:46:f0:ea:d4:f3:62:0b:0c:9f:c9:0f:b7:
58:72:03:4e:b5:97:e6:7c:14:36:e1:86:32:0a:4e:
b5:90:6e:84:05:15:c0:bd:99:7c:7f:86:7e:25:2d:
20:1b:80:84:ed:bf:f5:eb:96:26:6e:25:d7:aa:3b:
a9:fc:eb:5c:2e:95:50:dd:82:1e:44:b1:35:43:35:
92:ac:5b:60:15:36:fb:4d:da:d4:3f:48:b0:4d:64:
16:a5:a2:a0:2f:5c:95:c8:2e:1b:f7:9d:0f:92:16:
d6:52:d0:3b:e2:b6:39:3c:8a:b5:95:a0:b4:48:0f:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6C:A0:EB:F0:74:DD:4C:D6:DC:03:D3:2C:C3:F1:09:77:C9:41:C8
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/Nmyg6_B03UzW3APTLMPxCXfJQcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:e5:7c:e4:2a:05:77:fd:89:c3:4d:76:98:90:1d:3b:26:fe:
e3:67:b4:24:2f:e4:97:c7:91:dc:b0:9b:44:36:2a:19:99:ea:
a6:45:0c:04:c7:f6:90:b2:e9:70:8b:b5:82:1a:5c:84:d4:07:
a1:1c:f0:d3:cd:a8:b1:e2:2b:82:d3:6f:d7:7f:1a:27:f7:d0:
da:3d:ca:72:9b:a0:7e:68:25:13:1e:89:09:61:31:a7:06:31:
ed:48:4c:1b:2b:74:b7:04:33:8f:c7:61:38:b9:e9:56:e1:a5:
10:9f:e8:88:58:0a:89:16:c6:1e:89:25:91:d2:60:5b:d6:06:
6e:50:7e:1c:e6:18:42:ec:34:fe:3d:28:8e:37:cc:97:2f:b4:
c7:40:9c:f9:10:0e:7a:f5:1b:7b:70:b7:26:98:1a:9b:75:73:
d4:d0:4d:09:66:d3:fd:37:ec:b9:f4:de:5a:2b:8d:8a:1a:47:
36:9f:d1:3b:a4:e0:59:ac:46:61:e0:a6:ba:b7:fd:2a:9f:55:
0a:b0:26:83:cb:38:c3:92:2f:7a:7f:18:24:b8:bb:6d:da:f2:
4a:f4:49:97:8f:50:bb:2b:bc:b5:41:8a:11:26:32:e0:30:be:
ac:61:58:63:09:03:3a:26:5e:91:b9:bb:d1:90:f8:7b:08:3e:
4d:51:93:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:06:04 2025 by rpki-client