Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NYSHv93JvajdATV9xRzooph05kk.roa
File: NYSHv93JvajdATV9xRzooph05kk.roa (raw, json)
Hash identifier: 188LIKS4o49iXSOYHAqW7YbPFuf+TwE/V1o+DxyIAkI=
Subject key identifier: 35:84:87:BF:DD:C9:BD:A8:DD:01:35:7D:C5:1C:E8:A2:98:74:E6:49
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E9547F7A016E46E23CBB0338986CB9270
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NYSHv93JvajdATV9xRzooph05kk.roa
Signing time: Sun 31 Mar 2024 16:11:45 +0000
ROA not before: Sun 31 Mar 2024 16:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:95:47:f7:a0:16:e4:6e:23:cb:b0:33:89:86:cb:92:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 31 16:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=358487bfddc9bda8dd01357dc51ce8a29874e649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:e2:50:4d:bc:90:70:5a:61:23:69:ad:b9:
ab:91:ad:02:4b:fc:0f:0f:ee:c5:c3:61:60:07:46:
50:45:f1:17:f3:1c:b3:46:6d:a9:6a:7d:9c:74:35:
2a:d1:7e:c0:da:06:7b:fb:18:56:18:53:c8:03:78:
c8:a6:45:02:62:fb:78:24:e5:61:4e:92:22:e7:51:
d8:b7:fd:96:0e:00:7c:d3:51:44:e3:6d:a1:0b:f3:
9c:bc:dc:04:92:ae:d9:1b:c1:4d:90:76:7e:f1:79:
89:64:76:d3:50:ad:a0:78:75:4d:a2:67:e3:b4:c5:
a6:28:55:36:05:66:23:3a:d4:a0:8c:8c:56:a7:f9:
27:4d:e8:c5:b0:3a:3b:a8:56:0f:2b:78:f1:90:60:
25:8f:2e:46:f0:0b:46:48:b3:30:f2:1a:fc:34:cd:
63:b1:61:35:e8:15:3e:b3:43:f2:b6:80:29:2d:41:
ac:33:79:67:c9:b9:b0:c1:bd:aa:29:b5:63:ac:6d:
19:3a:1c:9e:e2:21:19:e5:b8:0f:df:35:28:97:d0:
a7:9d:08:dc:e4:5a:a7:0b:43:7f:cb:52:5c:6b:77:
c2:c7:b2:55:e5:a4:33:c6:b9:6f:6f:46:1a:a8:ce:
03:59:04:69:29:96:1e:61:c2:bf:a6:31:a3:03:a6:
67:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:84:87:BF:DD:C9:BD:A8:DD:01:35:7D:C5:1C:E8:A2:98:74:E6:49
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NYSHv93JvajdATV9xRzooph05kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:71:9d:a9:73:49:b0:35:32:1b:a5:04:37:45:93:47:ff:41:
f2:58:86:d9:3f:83:01:aa:b5:78:73:fa:9a:a7:f1:12:7a:ba:
0f:0b:2f:b1:8d:24:69:95:f9:b3:61:e7:63:a7:53:a5:ea:f6:
d8:e8:76:bf:1f:d8:de:40:7b:36:cb:a3:d7:6a:64:73:d9:76:
0d:4c:61:f6:08:ce:b8:eb:25:84:7f:3d:43:56:74:e6:f2:45:
4a:2a:ae:e2:08:24:02:60:b4:83:d0:a3:0a:95:64:81:5e:0c:
50:08:cc:ef:55:4d:c9:43:94:44:a2:a1:f9:36:cd:ce:99:a5:
a9:8c:d5:6a:f2:59:94:f7:c2:60:d0:03:2c:40:d2:35:fd:28:
31:4d:b6:97:4b:83:4d:2a:9f:d1:c5:ed:40:9a:28:46:31:42:
a5:77:17:d9:d6:99:d6:82:eb:2a:cd:9e:38:11:dd:76:8f:c2:
87:66:d8:c0:57:8b:9d:e6:5d:98:8f:35:03:29:3c:cc:0b:95:
38:72:4c:36:b9:99:64:e4:31:80:d2:33:66:63:71:57:1c:51:
8b:1e:e6:a0:66:54:cc:4c:7f:8e:36:90:f5:aa:23:3b:93:ce:
e6:30:eb:13:e6:44:fd:2d:0d:6d:4c:5f:87:0d:59:90:37:dc:
4f:57:61:d7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6VR/egFuRuI8uwM4mGy5JwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzMxMTYxMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTg0ODdiZmRkYzliZGE4ZGQwMTM1N2RjNTFjZThhMjk4NzRlNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqTiUE28kHBaYSNprbmrka0CS/wP
D+7Fw2FgB0ZQRfEX8xyzRm2pan2cdDUq0X7A2gZ7+xhWGFPIA3jIpkUCYvt4JOVh
TpIi51HYt/2WDgB801FE422hC/OcvNwEkq7ZG8FNkHZ+8XmJZHbTUK2geHVNomfj
tMWmKFU2BWYjOtSgjIxWp/knTejFsDo7qFYPK3jxkGAljy5G8AtGSLMw8hr8NM1j
sWE16BU+s0PytoApLUGsM3lnybmwwb2qKbVjrG0ZOhye4iEZ5bgP3zUol9CnnQjc
5FqnC0N/y1Jca3fCx7JV5aQzxrlvb0YaqM4DWQRpKZYeYcK/pjGjA6ZnoQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDWEh7/dyb2o3QE1fcUc6KKYdOZJMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTllTSHY5M0p2YWpkQVRWOXhSem9vcGgwNWtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHtxnalzSbA1MhulBDdF
k0f/QfJYhtk/gwGqtXhz+pqn8RJ6ug8LL7GNJGmV+bNh52OnU6Xq9tjodr8f2N5A
ezbLo9dqZHPZdg1MYfYIzrjrJYR/PUNWdObyRUoqruIIJAJgtIPQowqVZIFeDFAI
zO9VTclDlESiofk2zc6ZpamM1WryWZT3wmDQAyxA0jX9KDFNtpdLg00qn9HF7UCa
KEYxQqV3F9nWmdaC6yrNnjgR3XaPwodm2MBXi53mXZiPNQMpPMwLlThyTDa5mWTk
MYDSM2ZjcVccUYse5qBmVMxMf442kPWqIzuTzuYw6xPmRP0tDW1MX4cNWZA33E9X
Ydc=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:37:11 2025 by rpki-client