Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Nl1l-57q8G6ezfDqdmKeHcX3_E4.roa
File: Nl1l-57q8G6ezfDqdmKeHcX3_E4.roa (raw, json)
Hash identifier: FNoXEatHgy9oYAgBp5mrctrDaI4q0GVNvjavORaLPxw=
Subject key identifier: 36:5D:65:FB:9E:EA:F0:6E:9E:CD:F0:EA:76:62:9E:1D:C5:F7:FC:4E
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E83112E69D73618C5D9644DB04712F391
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Nl1l-57q8G6ezfDqdmKeHcX3_E4.roa
Signing time: Thu 28 Mar 2024 03:18:45 +0000
ROA not before: Thu 28 Mar 2024 03:18:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:83:11:2e:69:d7:36:18:c5:d9:64:4d:b0:47:12:f3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 28 03:18:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=365d65fb9eeaf06e9ecdf0ea76629e1dc5f7fc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:dd:28:23:8e:45:ac:c4:d6:50:8c:95:d8:
7a:f6:e3:9b:33:64:b3:31:8a:ed:f5:7f:59:0f:3f:
a5:d0:3d:e3:c8:c9:61:95:01:0f:55:76:87:da:d8:
e2:99:6e:81:c2:3c:bd:a2:04:08:d1:cd:c4:68:dc:
33:92:30:78:32:7e:38:02:94:9a:c2:67:e0:0f:a6:
52:53:3c:bc:d5:37:4c:47:c3:34:fd:62:f2:72:fe:
a5:1f:a4:fb:f3:cf:55:00:d5:71:a1:75:84:9a:3b:
b6:5d:8c:76:75:08:5a:aa:5d:e4:03:13:95:5d:1b:
ef:46:8f:24:a5:3e:8e:c0:55:db:b9:85:61:0c:94:
6d:30:73:62:de:5f:18:24:8d:bd:f0:28:d6:c0:bb:
a5:48:30:f5:92:a3:cf:29:cf:32:51:be:90:03:b1:
f3:a7:a7:d6:d0:ab:e2:ba:e0:5a:f1:5f:29:e4:38:
f3:b2:89:3e:4b:e2:b6:6e:f3:a7:82:cf:69:bd:47:
cb:c2:09:10:e3:e7:cf:52:75:3e:eb:7c:4e:00:32:
e5:c6:ad:86:d9:33:73:0c:09:72:49:c5:30:30:94:
22:9b:6f:e6:6a:6b:61:87:3b:cb:11:ca:e1:1d:06:
d2:f6:31:6c:c2:f1:49:f3:c5:91:07:e6:1a:c6:72:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5D:65:FB:9E:EA:F0:6E:9E:CD:F0:EA:76:62:9E:1D:C5:F7:FC:4E
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/Nl1l-57q8G6ezfDqdmKeHcX3_E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:59:b3:91:fd:b2:77:31:13:e6:7a:19:33:b9:1a:8c:47:3a:
ac:78:fb:1b:6f:4a:46:25:2d:95:22:72:80:1b:37:fa:38:72:
20:0c:d6:4a:45:8f:57:6f:9f:f8:a6:eb:eb:7b:f8:60:9e:6b:
e6:a8:19:1b:14:d3:26:9c:93:ed:4d:54:97:d8:2d:d0:65:b1:
df:d7:32:55:2e:8a:25:6d:66:89:04:2a:38:18:89:2b:9e:ac:
f5:a8:76:3c:9b:dd:12:f4:c5:2c:76:e8:30:66:56:2e:f5:e2:
b7:bd:37:b1:d4:ac:17:b8:ca:a7:77:d6:51:52:e9:97:39:b2:
3f:76:7c:8b:9a:7f:20:5c:91:43:bd:b2:32:64:dd:2c:7e:9b:
0a:85:b4:6c:00:c4:6d:a0:2b:09:36:0b:f8:fe:09:12:83:48:
b3:9d:e3:72:d0:ea:70:9a:0e:31:60:fa:6e:29:11:73:0f:ee:
c0:52:a4:67:15:c9:8e:6b:36:e6:0a:c6:6c:50:11:54:fc:bb:
6c:81:3a:71:f4:5d:32:3e:00:ef:99:a4:e8:0a:a2:ed:d9:37:
c2:9f:3f:97:5c:fb:1e:c1:55:73:51:df:86:2c:b9:76:c2:50:
9f:ac:d0:16:45:36:d1:7a:dc:cd:89:2d:5b:ee:b5:a6:eb:07:
d7:48:dc:c2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY6DES5p1zYYxdlkTbBHEvORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMzI4MDMxODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjVkNjVmYjllZWFmMDZlOWVjZGYwZWE3NjYyOWUxZGM1ZjdmYzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTrdKCOORazE1lCMldh69uObM2Sz
MYrt9X9ZDz+l0D3jyMlhlQEPVXaH2tjimW6Bwjy9ogQI0c3EaNwzkjB4Mn44ApSa
wmfgD6ZSUzy81TdMR8M0/WLycv6lH6T7889VANVxoXWEmju2XYx2dQhaql3kAxOV
XRvvRo8kpT6OwFXbuYVhDJRtMHNi3l8YJI298CjWwLulSDD1kqPPKc8yUb6QA7Hz
p6fW0KviuuBa8V8p5Djzsok+S+K2bvOngs9pvUfLwgkQ4+fPUnU+63xOADLlxq2G
2TNzDAlyScUwMJQim2/mamthhzvLEcrhHQbS9jFswvFJ88WRB+YaxnI2sQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDZdZfue6vBuns3w6nZinh3F9/xOMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvTmwxbC01N3E4RzZlemZEcWRtS2VIY1gzX0U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHpZs5H9sncxE+Z6GTO5
GoxHOqx4+xtvSkYlLZUicoAbN/o4ciAM1kpFj1dvn/im6+t7+GCea+aoGRsU0yac
k+1NVJfYLdBlsd/XMlUuiiVtZokEKjgYiSuerPWodjyb3RL0xSx26DBmVi714re9
N7HUrBe4yqd31lFS6Zc5sj92fIuafyBckUO9sjJk3Sx+mwqFtGwAxG2gKwk2C/j+
CRKDSLOd43LQ6nCaDjFg+m4pEXMP7sBSpGcVyY5rNuYKxmxQEVT8u2yBOnH0XTI+
AO+ZpOgKou3ZN8KfP5dc+x7BVXNR34YsuXbCUJ+s0BZFNtF63M2JLVvutabrB9dI
3MI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:31 2024 by rpki-client on console-fra.rpki-client.org