Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/neri4vuCLKUf1tUbsCsnh7RMz7A.roa
File: neri4vuCLKUf1tUbsCsnh7RMz7A.roa (raw, json)
Hash identifier: ltzmTBua0YHHhf2hzcRb6kPv8KByyvOMO8cCpTqekHk=
Subject key identifier: 9D:EA:E2:E2:FB:82:2C:A5:1F:D6:D5:1B:B0:2B:27:87:B4:4C:CF:B0
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B02F3A5C7D4FD1FFA4150763CF24B7EAA
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/neri4vuCLKUf1tUbsCsnh7RMz7A.roa
Signing time: Fri 06 Oct 2023 03:06:43 +0000
ROA not before: Fri 06 Oct 2023 03:06:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:2f2:c055/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:02:f3:a5:c7:d4:fd:1f:fa:41:50:76:3c:f2:4b:7e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 6 03:06:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9deae2e2fb822ca51fd6d51bb02b2787b44ccfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:cd:98:0f:88:eb:73:e7:3a:60:98:f0:7b:
ec:62:c1:b7:fc:ba:88:b0:87:16:62:66:0e:42:9b:
30:e4:ee:c8:bd:31:36:69:13:bf:6e:0b:0a:93:ba:
bb:27:ab:83:3c:d8:fc:68:5e:55:80:d3:b5:c1:24:
1d:75:db:41:2a:5f:db:62:52:e6:50:62:99:cd:c5:
33:b1:d1:cc:ce:50:f2:4c:16:4b:17:04:5b:d1:c0:
20:77:50:e8:ed:ae:2c:51:90:14:43:ef:b1:59:61:
fb:19:b7:b1:6d:a6:09:30:31:cd:51:5c:77:ff:c5:
64:34:2c:29:cc:93:d0:16:85:07:1f:14:06:f1:30:
08:f4:d0:2b:b1:b3:95:b4:65:3d:81:6d:9c:2d:79:
01:0d:0c:fb:8f:d9:13:ad:cb:39:83:bc:aa:3f:23:
f3:63:bc:87:a9:ac:fb:00:95:9c:a9:56:f6:4e:6d:
e7:e1:62:54:f5:24:08:75:a8:38:ef:4c:4d:97:02:
5b:1f:27:c2:4e:c4:35:e3:cb:02:2c:0b:d9:b3:24:
e2:df:d5:f0:8b:7c:3d:59:57:0f:0e:2c:e8:25:b2:
6a:16:c7:4b:d6:ca:08:07:73:65:2b:7e:90:bb:6d:
9e:6a:c4:61:2f:cd:38:fb:9b:15:40:1e:38:61:a9:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EA:E2:E2:FB:82:2C:A5:1F:D6:D5:1B:B0:2B:27:87:B4:4C:CF:B0
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/neri4vuCLKUf1tUbsCsnh7RMz7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:30:06:4b:20:b8:d1:db:f0:8e:58:11:33:c4:d4:fa:cc:2e:
2a:b2:96:bd:8d:84:cd:cb:2f:8b:7f:98:d5:d2:13:3f:b8:c1:
53:1d:40:7f:74:14:8f:7a:4a:9f:5b:15:35:03:62:ba:ec:1e:
cc:f4:62:f6:9d:1d:fa:c3:96:23:2e:e0:74:f5:ea:52:cb:75:
4b:f3:bf:eb:b1:15:47:fd:69:18:4b:c6:a7:c7:1f:2b:9e:73:
c0:82:1d:5f:cd:ee:9e:72:c5:2c:00:60:c8:2b:ae:66:f9:47:
5f:da:b9:5d:13:3a:d1:0a:39:65:83:d2:39:63:a4:d2:8e:fc:
19:3b:2b:ed:f8:21:ce:fd:89:c9:d6:dc:15:bf:51:ac:b3:8d:
1f:a5:6c:b1:8c:d9:84:98:2d:d8:63:35:78:d9:ac:ca:80:aa:
e4:ba:f7:9a:45:8c:8d:bb:61:a6:d8:c8:c0:4f:85:21:21:1a:
a8:a1:81:22:d4:7e:13:ba:4d:87:04:07:cb:03:05:87:6d:09:
33:5e:0a:34:51:c4:d7:e6:39:1a:44:df:5d:92:e7:e6:da:1e:
85:20:e2:d2:4d:ec:87:f6:ee:60:bb:de:a2:a6:2f:af:b7:8e:
6d:e7:0e:c8:e2:19:2b:66:12:00:fa:14:95:af:6e:b9:30:99:
98:85:be:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:28:49 2025 by rpki-client