Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NriTTJbhVAKqml9uXtG6nBwLncw.roa
File: NriTTJbhVAKqml9uXtG6nBwLncw.roa (raw, json)
Hash identifier: x9Y3z7SCg6kRYXoXiJ4ghLAYtSbxhkDIEoJOoKG66js=
Subject key identifier: 36:B8:93:4C:96:E1:54:02:AA:9A:5F:6E:5E:D1:BA:9C:1C:0B:9D:CC
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E987F05EB44ECC036D9A6CCDE3FAAD31F
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NriTTJbhVAKqml9uXtG6nBwLncw.roa
Signing time: Mon 01 Apr 2024 07:10:45 +0000
ROA not before: Mon 01 Apr 2024 07:10:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:98:7f:05:eb:44:ec:c0:36:d9:a6:cc:de:3f:aa:d3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 1 07:10:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36b8934c96e15402aa9a5f6e5ed1ba9c1c0b9dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:1a:e3:63:25:1e:90:fc:1a:2e:6f:7f:a7:
0a:d1:1e:b9:34:61:59:4a:15:0d:4a:d1:be:7b:3b:
cf:e3:5b:52:3c:90:ae:0e:c7:35:ed:cd:dd:6b:74:
ad:19:28:b0:f7:73:85:86:80:9b:cf:bc:69:6a:33:
39:b6:44:85:43:52:da:67:8b:2b:ed:d2:63:84:d4:
22:ed:67:ae:5f:18:f4:61:f9:d3:6a:2a:b8:b8:64:
92:8b:2c:aa:91:79:13:66:93:82:bd:b2:a1:dc:19:
b4:da:a1:80:6a:12:85:4f:95:03:38:91:cf:c2:b3:
db:e4:e2:85:02:b0:4a:85:45:6c:f0:8f:d6:ca:22:
fe:a7:79:57:f9:ae:b2:e0:ed:33:16:b2:a9:22:1b:
bf:ea:7b:ec:ad:b7:7e:58:40:9e:d6:54:4f:3b:f6:
98:37:bd:16:f4:de:17:6f:60:51:24:0a:ac:c2:02:
f4:f8:b6:78:fd:f2:00:0b:1d:75:55:db:0f:bb:bf:
b9:df:d1:63:ea:dc:94:ac:3a:4a:de:66:f8:47:24:
0b:ff:8a:36:db:03:57:d0:99:7d:cf:a2:f5:36:d0:
9a:f7:c5:72:b9:b1:26:97:1b:e1:aa:46:05:18:a2:
2e:61:6e:bd:cd:10:94:fb:ae:40:22:a2:73:0f:8f:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B8:93:4C:96:E1:54:02:AA:9A:5F:6E:5E:D1:BA:9C:1C:0B:9D:CC
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NriTTJbhVAKqml9uXtG6nBwLncw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:6f:c3:3e:d1:1e:25:49:05:64:e3:e8:83:87:14:9f:2a:d8:
36:e1:65:10:15:46:35:b9:b7:80:50:bc:8c:2c:37:32:4a:ff:
9c:69:58:18:ed:01:59:64:51:21:23:f6:dd:73:c8:0e:15:41:
58:c6:84:f2:ca:2b:a9:fa:1a:99:a0:b9:fe:5b:51:48:99:f3:
50:10:1a:22:6f:e3:ad:5b:04:29:55:a3:72:0a:6e:9c:27:2b:
73:54:75:1d:78:4f:4d:c5:ec:3e:a5:c6:02:65:bf:58:a5:38:
b1:75:52:bf:35:f1:ec:f4:39:fa:4f:88:31:c6:68:36:0a:84:
9c:56:d6:8e:2e:2e:ca:4e:60:fd:8c:71:f0:ce:69:8c:e9:5c:
6e:cb:67:6b:7f:7c:87:93:3c:34:5f:79:c2:30:a8:d2:bb:e4:
55:00:0e:9b:2a:7f:60:a2:0a:48:15:f3:9a:08:10:aa:2b:f7:
df:9d:e8:f6:93:fc:10:e3:6f:51:4c:91:36:43:f6:09:58:7a:
7b:5f:c3:f3:45:4b:29:cb:b6:08:e7:1d:d5:a4:2b:e8:a9:c4:
da:43:2f:6a:00:d8:86:7f:f9:fb:73:49:06:80:fb:d9:20:3d:
d0:5b:74:00:47:2b:10:28:6e:82:81:09:76:9f:52:9c:c5:a9:
2c:36:c6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:33 2025 by rpki-client