Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pA7nKWsfpsHvLIBvyiXXgim-NKI.roa
File: pA7nKWsfpsHvLIBvyiXXgim-NKI.roa (raw, json)
Hash identifier: kxi0WDPlO+lFTPpfNwhbyb9YCpwGgm8xc39DIGP7KQI=
Subject key identifier: A4:0E:E7:29:6B:1F:A6:C1:EF:2C:80:6F:CA:25:D7:82:29:BE:34:A2
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C0779A3BE7D90908AB37595080AD42FFF
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pA7nKWsfpsHvLIBvyiXXgim-NKI.roa
Signing time: Sat 25 Nov 2023 17:14:21 +0000
ROA not before: Sat 25 Nov 2023 17:14:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:07:79:a3:be:7d:90:90:8a:b3:75:95:08:0a:d4:2f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 25 17:14:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a40ee7296b1fa6c1ef2c806fca25d78229be34a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:e7:72:4b:18:e9:d8:19:b2:77:ae:02:ac:
7d:98:8e:d4:3f:df:92:54:88:2c:f9:97:42:dc:10:
0b:d4:a4:22:a8:e7:6a:7c:5a:3b:d4:c8:6f:07:ec:
2f:9f:b3:9e:c2:bf:35:6d:c1:19:39:e6:08:a8:93:
8f:1d:c8:ea:6a:62:1f:1f:ce:d7:01:ae:27:ab:56:
ea:f6:76:b7:4c:b2:d1:7b:bc:41:55:e0:3c:f4:16:
46:ac:86:a5:98:ac:84:9e:96:d6:98:8f:70:8f:19:
d2:4c:ff:5e:6e:98:31:14:2e:06:3a:c2:15:dc:2c:
3b:fd:a3:5f:71:ee:00:87:e2:7c:ca:6e:11:0a:a7:
56:e8:f6:61:d6:ad:ca:c6:b6:bc:03:c8:4b:9e:26:
08:4d:e5:fc:5d:8f:30:7c:de:bf:92:a9:aa:c4:3d:
3f:08:f0:b4:be:ee:84:ad:b8:d8:fc:f1:b8:41:86:
87:5a:d5:fa:a9:e5:06:d8:b3:d5:c1:dc:1c:fc:f0:
a2:0f:99:28:59:59:86:b0:bb:84:62:82:89:75:4e:
ed:ae:79:b7:2b:0b:e3:2e:eb:33:47:63:7f:41:32:
89:1a:c3:1d:3f:84:cf:d7:67:7e:fc:92:66:c3:a8:
7b:93:b8:17:b4:01:6f:0f:8e:00:3a:c7:36:d1:cd:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0E:E7:29:6B:1F:A6:C1:EF:2C:80:6F:CA:25:D7:82:29:BE:34:A2
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/pA7nKWsfpsHvLIBvyiXXgim-NKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cd:72:39:53:85:97:73:67:67:40:6f:5f:58:b8:ca:de:8c:cd:
0b:00:78:3a:dc:75:dd:14:ae:3b:6e:a3:0d:4a:3a:51:8a:10:
f1:a9:a8:59:0f:06:3f:46:0c:a0:18:6a:5f:b7:fd:c1:8b:70:
69:0a:fc:8e:c0:70:da:7c:c5:3c:18:70:3d:7f:de:18:2b:cf:
c8:74:88:66:ab:d4:e4:36:19:db:c3:33:dc:96:ff:4c:3f:bc:
60:ca:6b:6a:f4:09:9b:ce:0d:9b:98:c8:2f:82:1e:c8:84:6b:
ed:f7:cc:b4:de:78:47:8d:22:9d:c9:ec:a1:6c:17:0d:a4:25:
3c:c5:ed:f3:5f:3f:be:8c:ec:23:db:60:49:79:8b:6f:9d:cd:
c9:b7:21:75:a1:ec:c7:12:04:52:59:1b:08:f2:a7:c5:56:19:
89:f0:48:00:83:79:aa:54:21:c8:d1:e7:08:c0:0d:2d:f3:8e:
ec:6e:ee:6b:20:43:fb:cc:1b:64:cd:1e:e0:c5:a2:a7:68:b1:
aa:be:fa:fb:67:8a:b3:54:8f:2a:f6:34:97:64:71:7f:fe:1b:
97:6e:80:10:f0:af:c7:28:78:40:11:86:6e:d5:8b:bf:7b:a3:
e4:ca:f6:7b:02:a1:01:89:d3:fb:bb:09:67:26:5b:f5:91:35:
e3:9f:4b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:09:53 2025 by rpki-client