Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nVsS3zLqDOitU_owIqKnnMLMPI4.roa
File: nVsS3zLqDOitU_owIqKnnMLMPI4.roa (raw, json)
Hash identifier: ar51pp4mORutvloavYxrw2V3YtXQQyJpIYyTEXyRYiE=
Subject key identifier: 9D:5B:12:DF:32:EA:0C:E8:AD:53:FA:30:22:A2:A7:9C:C2:CC:3C:8E
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AAD5E41C6BF6C21B8DF3F053FC4EDB69D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nVsS3zLqDOitU_owIqKnnMLMPI4.roa
Signing time: Tue 19 Sep 2023 12:15:50 +0000
ROA not before: Tue 19 Sep 2023 12:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:5e:41:c6:bf:6c:21:b8:df:3f:05:3f:c4:ed:b6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 19 12:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d5b12df32ea0ce8ad53fa3022a2a79cc2cc3c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:50:5d:d3:c0:16:1e:57:8e:1e:93:b3:cb:
38:c4:02:68:03:70:88:9d:5a:a0:87:07:44:14:f2:
be:2d:06:e1:36:4a:9f:b7:4b:d6:a1:52:53:b2:6f:
24:ee:c6:f2:12:63:60:07:af:76:60:d7:0e:61:0c:
9f:db:47:f7:a5:64:61:e6:2a:44:28:c0:64:26:1d:
5d:e2:a9:72:c7:00:a8:97:7e:06:b0:0d:b1:77:54:
a0:6d:4c:88:29:3d:fe:87:92:c4:e0:db:50:fb:1a:
8e:b6:b1:d7:08:8d:1c:ad:bd:ed:47:af:35:84:fd:
49:f9:50:ae:ca:9e:d5:2c:c6:96:23:4f:67:12:0e:
27:f6:23:c3:a8:ac:1e:98:66:c7:68:45:68:d4:85:
2c:ba:45:2f:2d:ad:f0:0f:1c:65:a3:f1:7c:04:d3:
49:ee:fb:71:a8:4e:6e:c1:3d:f9:04:2f:60:13:df:
ef:6e:f1:12:74:c2:18:38:af:18:53:02:5e:16:72:
8b:07:87:46:2c:ff:f4:11:bd:8e:4f:25:cf:bb:64:
60:e0:c1:4a:6c:3a:53:a4:06:d8:67:b8:80:9d:c0:
fa:01:1f:b5:0e:5e:b4:39:67:cc:e0:3b:c9:34:4e:
78:2e:99:f8:9c:30:c3:2f:e9:55:3b:91:5e:45:5a:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5B:12:DF:32:EA:0C:E8:AD:53:FA:30:22:A2:A7:9C:C2:CC:3C:8E
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nVsS3zLqDOitU_owIqKnnMLMPI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:09:39:ca:9c:94:c4:80:1a:a8:b6:68:55:46:14:18:10:d4:
b9:be:f7:99:5c:bc:96:cf:b7:52:9f:46:3d:d0:d6:d0:e6:f2:
b0:fe:6a:46:0d:f8:4a:c9:20:e3:8f:f9:4c:c1:d8:99:dc:36:
39:c8:df:3c:4c:a0:ba:f3:34:df:f7:34:d6:e0:5e:72:fa:8d:
c7:b9:c2:03:76:23:a6:94:7b:6e:0a:5f:24:ab:e6:c2:b2:1a:
26:aa:b5:b7:38:93:30:e5:c1:a2:2d:d7:2e:09:32:8a:a9:ce:
f6:e7:ed:79:c5:9f:c3:40:91:de:94:cd:17:a5:f9:84:36:14:
c1:a8:65:f4:1b:92:d9:4f:be:21:d9:13:10:06:b9:c6:58:e0:
6c:a9:5c:20:97:74:3c:e3:ff:28:d3:d1:84:6e:e6:36:14:46:
cc:dc:73:dd:97:67:7c:70:ab:7a:2f:5a:f5:30:21:2d:0f:24:
d8:19:4b:fa:80:c1:01:47:fc:a8:50:6c:02:f8:31:ed:7e:f8:
88:e0:fe:5d:2c:f7:a2:bf:69:14:68:f4:57:80:71:13:53:92:
29:ca:22:61:62:c2:f6:59:48:96:41:bb:31:cf:bf:0c:fe:97:
82:52:5d:16:08:a7:11:21:13:00:f7:52:ad:f9:75:82:ce:1a:
2a:b7:8f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:12:50 2025 by rpki-client