Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ncrcZ_NPxazyz7uE43scwW4JUIM.roa
File: ncrcZ_NPxazyz7uE43scwW4JUIM.roa (raw, json)
Hash identifier: NGcANjQ0cHIDMcPGQRALISZmyaHzWefcGzfjVd0ay3E=
Subject key identifier: 9D:CA:DC:67:F3:4F:C5:AC:F2:CF:BB:84:E3:7B:1C:C1:6E:09:50:83
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018C94A210D52F0244A46C9FED590242D6AB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ncrcZ_NPxazyz7uE43scwW4JUIM.roa
Signing time: Sat 23 Dec 2023 03:04:58 +0000
ROA not before: Sat 23 Dec 2023 03:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:94a1:d219/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:94:a2:10:d5:2f:02:44:a4:6c:9f:ed:59:02:42:d6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Dec 23 03:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dcadc67f34fc5acf2cfbb84e37b1cc16e095083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:56:ac:2d:38:8f:87:98:a0:b6:83:23:90:
a9:e2:5c:7b:74:24:3d:62:60:22:22:9a:95:4c:42:
d9:b5:0c:83:1c:8a:fe:f8:5b:91:e0:89:23:a1:09:
d6:44:d5:4c:d5:32:a0:1e:66:88:f1:2d:47:93:0c:
21:37:78:ad:b6:5b:da:3a:fe:1c:bf:f6:73:18:48:
a5:cf:cb:a5:a4:eb:31:c4:dc:29:dc:fc:c4:55:54:
dd:2f:01:19:6e:d1:c6:a4:64:2f:f8:b5:39:7a:e3:
3f:b8:42:ac:91:98:c3:a4:37:94:f1:29:ed:b4:d3:
b6:12:f6:31:84:55:4d:ce:46:84:ec:cc:ff:f7:96:
5b:9b:3c:26:73:71:c5:0c:96:9e:46:58:3a:0c:b2:
d5:f2:f4:6b:9b:0f:e5:89:6f:e4:55:60:a6:8b:10:
39:b8:88:71:1c:8e:a0:56:cb:82:43:73:b4:f0:f5:
00:81:f7:76:4f:84:ba:f7:c5:3c:54:f3:54:41:eb:
93:25:66:e9:25:a3:4c:be:8c:bd:65:8d:f6:0e:13:
27:32:46:8d:30:e2:52:0e:08:f1:92:fc:4c:df:15:
ad:b1:f7:a5:3e:62:5b:a6:e1:31:98:2f:aa:7e:0d:
6e:f2:f0:6b:25:91:e8:e5:a3:98:8d:3c:9f:22:68:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CA:DC:67:F3:4F:C5:AC:F2:CF:BB:84:E3:7B:1C:C1:6E:09:50:83
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/ncrcZ_NPxazyz7uE43scwW4JUIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:42:80:ee:ad:04:fe:6d:42:e6:52:c2:13:f8:50:0e:2b:1f:
41:01:2c:23:7d:c6:d3:f8:d7:18:25:9a:b2:7a:50:15:cc:a3:
a0:1c:8b:e9:03:cc:89:52:c8:ea:ef:23:30:27:67:f5:df:13:
34:17:f3:71:42:f4:5f:eb:9c:31:47:c3:55:ce:22:42:5d:02:
08:e3:66:78:8f:4c:33:44:94:11:a4:50:6a:17:2f:36:22:43:
0c:a2:40:fc:e8:eb:2e:00:8f:d2:d8:bb:4b:57:0b:cc:ff:88:
4b:a8:12:e6:0a:db:fa:76:a4:67:55:0b:aa:03:e3:fa:09:fe:
cc:72:fa:bf:89:cf:aa:41:29:63:ed:76:d5:ad:90:38:90:90:
f5:00:e2:75:83:f7:67:ab:ed:84:75:96:88:24:7e:d9:43:e5:
c0:81:f8:cf:15:2c:7a:fd:29:53:cc:78:ed:cd:da:51:5e:5c:
37:0b:05:d2:3d:fe:33:41:bb:aa:34:36:c3:25:5c:2d:f6:8b:
81:59:bb:98:b2:19:d4:ee:3b:40:b2:6d:e5:57:86:96:40:b0:
17:71:0c:fd:cc:79:19:7d:52:e5:43:9d:52:ec:7e:79:3d:49:
94:b3:fa:c1:30:f9:9b:05:7e:87:6d:dd:5f:9a:f6:24:62:0b:
07:b2:f4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:18 2025 by rpki-client