Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NVT4wIQ-L1roMrySfNeFSijlf00.roa
File: NVT4wIQ-L1roMrySfNeFSijlf00.roa (raw, json)
Hash identifier: E9HPo3YoN3Gk1I+GhyM6FusYxIy4EmT0QK2UjeqBU78=
Subject key identifier: 35:54:F8:C0:84:3E:2F:5A:E8:32:BC:92:7C:D7:85:4A:28:E5:7F:4D
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E6AC517705A28DFE3734587E2EC40F01B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NVT4wIQ-L1roMrySfNeFSijlf00.roa
Signing time: Sat 23 Mar 2024 10:04:45 +0000
ROA not before: Sat 23 Mar 2024 10:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:6ac4:a001/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6a:c5:17:70:5a:28:df:e3:73:45:87:e2:ec:40:f0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 23 10:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3554f8c0843e2f5ae832bc927cd7854a28e57f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:eb:f3:71:4d:d5:79:27:32:81:1c:30:2a:f6:
31:53:a9:e2:34:a7:14:06:06:dc:c7:b1:94:f1:fe:
cf:12:73:92:5a:e7:f4:6a:76:33:e3:c9:f6:dc:e1:
4b:6e:1d:b9:3c:5c:49:99:a1:0f:b4:8a:0c:54:47:
94:ac:54:4d:4d:54:9f:b4:9d:27:f5:58:63:39:79:
82:16:aa:06:be:b5:8f:47:87:8d:a6:c7:28:b9:82:
e1:ee:1c:bd:39:0b:b3:9c:0a:e2:a0:2e:a7:96:6f:
8d:3d:9f:d6:f8:be:04:bf:d4:b3:ea:87:7a:c6:12:
85:ca:d0:49:4e:78:8c:b0:49:ab:fc:f6:1d:27:4d:
4b:2d:90:b2:59:96:c5:d5:2c:f8:ad:42:82:f7:38:
7e:c0:5e:39:2b:52:18:19:69:98:ac:12:08:df:1e:
51:5e:c7:ee:71:7d:df:25:8d:d0:e0:ed:76:3e:15:
6b:97:2c:47:9e:9b:14:5f:de:c8:ad:70:0d:9c:ba:
19:ea:06:fd:2a:a3:78:73:16:97:4b:a3:8d:e0:e9:
05:53:67:aa:ff:ec:be:e8:5b:73:7c:33:5a:85:75:
5a:36:6f:05:c4:e7:8d:62:1d:bf:29:2d:ed:9c:19:
82:ee:90:7d:8c:e8:04:0f:24:90:28:03:19:0d:76:
71:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:54:F8:C0:84:3E:2F:5A:E8:32:BC:92:7C:D7:85:4A:28:E5:7F:4D
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NVT4wIQ-L1roMrySfNeFSijlf00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:07:dc:6a:95:08:52:ec:9c:a6:a7:60:f5:e5:ad:09:65:0a:
3d:8a:bd:19:c5:b5:3b:49:9e:71:bf:2c:20:47:40:96:07:51:
e4:37:26:fb:28:bb:e4:7c:c4:4a:42:92:fb:64:fb:cb:93:fe:
d8:67:ce:4e:ed:33:74:8b:0a:21:04:2b:8a:12:54:2b:ad:34:
3d:66:6f:a7:3d:58:9f:48:e7:15:48:e2:d8:82:46:da:27:31:
2a:bf:2c:66:dc:8a:d1:58:22:ce:62:65:b4:9f:87:1b:56:65:
bc:61:c5:37:65:52:54:97:2d:c2:ac:05:1c:b6:38:fc:ae:1c:
a9:39:54:14:87:8e:be:b4:17:10:c5:5b:d7:94:64:14:d8:66:
57:42:fb:63:bc:f1:0e:e5:dc:b8:25:9d:7c:9e:e3:74:4c:a4:
89:9f:87:7c:0d:78:23:8f:3a:f0:12:dc:2d:e4:6d:51:1f:90:
57:a2:f3:e7:7b:98:7b:fa:7b:ab:86:b1:9e:f0:b5:92:ce:91:
e2:ff:82:59:0b:df:df:b5:8e:90:88:e8:e6:10:ac:ef:a3:2b:
df:3a:32:b8:0e:57:bc:17:2f:f6:e3:f8:ae:16:c4:a9:3e:62:
bb:c3:35:a1:30:1f:7a:b3:90:0e:dc:1f:8b:97:3d:d1:79:f2:
2f:5e:aa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:19 2025 by rpki-client