Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nuVLT_Nw7dTcFrp1QYx-eocGFIo.roa
File: nuVLT_Nw7dTcFrp1QYx-eocGFIo.roa (raw, json)
Hash identifier: MW/a6kLRToLIYw2ycuP+JSqNlgvEQRfbr53bv4DayhY=
Subject key identifier: 9E:E5:4B:4F:F3:70:ED:D4:DC:16:BA:75:41:8C:7E:7A:87:06:14:8A
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018E90FE3E846208C467232344C3F9D04BFE
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nuVLT_Nw7dTcFrp1QYx-eocGFIo.roa
Signing time: Sat 30 Mar 2024 20:12:44 +0000
ROA not before: Sat 30 Mar 2024 20:12:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128
2001:67c:64:ffff:0:18d:e84f:370a/128 maxlen: 128
2001:67c:64:ffff:0:18e:76c8:d5da/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:90:fe:3e:84:62:08:c4:67:23:23:44:c3:f9:d0:4b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Mar 30 20:12:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ee54b4ff370edd4dc16ba75418c7e7a8706148a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:17:80:38:9b:4c:57:45:f5:4d:71:c8:cc:
bb:50:fc:51:eb:36:34:ef:8c:25:e1:c4:b3:f8:11:
48:ab:91:3f:1c:0f:74:0c:4a:54:da:67:eb:73:d5:
4c:33:ef:c3:bd:b8:4a:b7:d0:8d:90:a7:28:a6:01:
3b:eb:03:91:6e:66:a7:9e:44:ae:04:7a:51:df:2e:
e7:a5:44:9e:63:67:c2:62:cf:4b:cb:16:3a:ea:d7:
83:25:41:57:f4:ad:f6:85:ec:b3:78:81:7b:19:70:
f6:f6:62:9c:1d:49:c5:66:4d:b2:32:21:8d:d2:a4:
ad:2c:20:54:f7:3d:81:58:a6:d4:b7:2b:bd:96:c8:
d3:f4:b6:25:52:8a:ee:cc:6b:db:6f:62:53:f6:fc:
f7:01:df:4a:fa:6f:9e:4e:86:9f:25:57:3d:2c:6b:
d1:47:d4:ac:81:c5:c9:1f:cf:dd:74:28:6e:45:20:
9d:c0:df:b1:9b:4a:aa:3b:0d:01:e9:b8:5c:73:32:
83:9a:d9:bd:d7:90:a6:20:15:b5:6a:b5:81:d7:6d:
d8:a5:9e:ff:9e:d9:6a:ad:d6:4b:7a:f7:a9:c3:66:
f5:1f:ea:2b:c1:cb:13:24:e1:d0:65:55:a0:ac:62:
15:78:31:45:0b:06:ac:2a:f2:ff:50:39:e2:55:4a:
9b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E5:4B:4F:F3:70:ED:D4:DC:16:BA:75:41:8C:7E:7A:87:06:14:8A
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nuVLT_Nw7dTcFrp1QYx-eocGFIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:13:7d:af:a5:ba:40:99:3d:06:04:73:5d:bc:93:b3:47:bd:
e9:ed:40:d9:f0:e0:db:9a:46:a4:91:43:fb:65:60:a2:13:4b:
65:44:cb:fa:b3:8a:18:ba:39:34:a4:9a:0b:1e:a2:49:05:2d:
88:76:7c:8f:07:6b:ae:3b:6c:5f:b2:a3:73:d5:a1:b9:50:3d:
d6:d5:5a:7d:62:36:fb:04:9f:b2:7e:20:98:23:de:87:cb:c3:
37:be:1e:38:ab:4c:ad:8f:53:5b:47:24:94:cc:a6:2f:8e:7d:
bd:47:96:4c:9c:bd:9a:c7:76:7e:50:0c:d1:43:e8:41:64:e1:
c8:93:77:01:c8:dc:88:4e:f9:2c:94:1c:b0:b6:ae:b5:e0:fe:
c4:fe:eb:b1:a5:78:ee:c8:9f:1b:db:55:87:fa:d8:fb:c6:e1:
8f:9f:4d:dc:ba:c1:97:13:25:84:26:81:31:3d:2f:67:56:3c:
64:49:1e:48:01:cc:3f:d3:7d:3b:45:e1:de:73:05:60:51:3e:
d3:48:f7:86:7e:c4:9d:8b:21:7d:bb:cd:8f:db:de:8a:60:18:
84:8b:23:6f:7f:c1:e6:30:61:13:7c:23:d4:b0:8c:b1:74:90:
c3:e9:31:3e:c1:6a:50:fe:69:67:79:e9:64:7d:6b:2b:40:1d:
12:a7:e2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:57 2025 by rpki-client