Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nYUn8IEYHw5MjS_5psCC7QE4mT0.roa
File: nYUn8IEYHw5MjS_5psCC7QE4mT0.roa (raw, json)
Hash identifier: SojLZDwoJcvpiAa9ajT9JJ+qTK3NesPhrFr7QQk1cZs=
Subject key identifier: 9D:85:27:F0:81:18:1F:0E:4C:8D:2F:F9:A6:C0:82:ED:01:38:99:3D
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AB7AAAD027365984B35C70EF3D0CED0BC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nYUn8IEYHw5MjS_5psCC7QE4mT0.roa
Signing time: Thu 21 Sep 2023 12:15:30 +0000
ROA not before: Thu 21 Sep 2023 12:15:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:aa:ad:02:73:65:98:4b:35:c7:0e:f3:d0:ce:d0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 21 12:15:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d8527f081181f0e4c8d2ff9a6c082ed0138993d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:ef:b4:8b:12:5e:d0:8c:0d:80:be:fa:81:
e7:a7:25:c0:70:d8:69:54:cc:c3:d1:47:7e:1e:44:
85:6a:b8:85:70:c3:fa:38:de:d4:3c:56:95:d9:a5:
d9:82:95:1d:a4:b4:43:8c:d7:64:f9:1a:d6:50:b0:
62:7d:e6:fd:c4:0b:cf:b0:24:af:63:d9:ea:45:1d:
1d:b6:73:c5:24:8c:1c:13:24:08:58:03:a9:75:89:
f4:c2:06:6f:6a:5e:59:4e:03:90:b6:35:86:8b:17:
b3:b4:cd:32:86:f4:51:bc:07:d8:c6:ae:32:fd:27:
0e:5b:a3:c9:14:41:4e:9a:cc:13:f9:2b:a1:7a:9d:
52:44:19:4b:a1:70:23:09:e2:16:da:d2:04:03:70:
ba:81:87:78:0c:ac:78:26:a5:98:00:e9:63:d9:5b:
2f:8a:b6:38:df:5c:0e:96:81:0e:52:57:5a:a8:8c:
8a:2a:59:d6:95:73:36:01:2c:4d:ea:45:4d:a7:b2:
e7:ec:13:58:a1:eb:da:1b:15:82:50:cc:94:47:2a:
03:ad:3e:a0:b5:91:8a:07:f0:e8:8d:6e:4d:85:30:
2d:ec:1f:3b:de:0d:ec:2e:f5:97:87:38:09:a8:89:
7a:a0:1b:bc:92:bb:85:f7:b5:e9:2d:68:bd:e8:dd:
a2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:85:27:F0:81:18:1F:0E:4C:8D:2F:F9:A6:C0:82:ED:01:38:99:3D
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nYUn8IEYHw5MjS_5psCC7QE4mT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:63:45:ec:8a:74:89:3e:62:4e:24:87:5c:0c:56:48:99:d8:
45:12:2f:1e:be:ff:80:a3:2d:8e:77:5b:87:38:e6:a3:39:b3:
02:3d:83:a9:89:fe:1e:54:d1:6d:0a:e4:1e:e7:f1:84:b7:40:
41:79:d0:09:92:79:3a:2e:71:ca:a5:2c:bc:49:e2:ee:4f:be:
9d:cc:29:40:c8:e1:60:6a:d2:3b:19:63:ac:97:df:87:e4:db:
aa:be:12:1d:99:5d:ca:a8:e2:6d:58:e4:bc:e8:63:02:6d:d6:
30:35:92:c8:31:b0:46:75:2b:9b:e6:55:c2:1e:27:87:40:da:
5d:fd:49:a3:d7:15:c2:b3:a5:0b:83:70:41:bd:4c:ca:d0:da:
a1:b4:53:ea:25:ff:79:b0:f5:42:3b:21:87:c3:47:82:6b:ef:
55:30:6e:8d:01:76:96:c7:3e:ea:4c:b7:b6:39:36:28:35:d4:
dc:b5:5c:bd:dd:26:3a:c7:23:b4:1c:c2:78:e2:9a:48:bc:d3:
79:28:90:d5:c6:67:8c:b5:d6:6f:11:b4:fe:73:5d:7a:b9:a7:
a7:26:a7:16:75:d6:da:82:9b:88:59:fd:c5:3f:02:a4:aa:e2:
21:5a:50:81:ca:e3:f6:17:b5:66:63:78:06:f4:e9:13:36:ac:
cb:80:9c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:58:14 2025 by rpki-client