Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nxRIqWyYhYHrVCRnC5bYUGrBgPc.roa
File: nxRIqWyYhYHrVCRnC5bYUGrBgPc.roa (raw, json)
Hash identifier: DrBrMZkv50T4QeXpgOJGIUeJqGzZ3EpRLYn9wCqgF84=
Subject key identifier: 9F:14:48:A9:6C:98:85:81:EB:54:24:67:0B:96:D8:50:6A:C1:80:F7
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CF4CA7F72F38AEEE2E1CA067F02412B5A
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nxRIqWyYhYHrVCRnC5bYUGrBgPc.roa
Signing time: Wed 10 Jan 2024 19:12:40 +0000
ROA not before: Wed 10 Jan 2024 19:12:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:ca:7f:72:f3:8a:ee:e2:e1:ca:06:7f:02:41:2b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 10 19:12:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f1448a96c988581eb5424670b96d8506ac180f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:1f:51:94:b4:70:cf:49:74:6d:04:53:0d:
f8:1f:cd:95:13:59:e5:d8:13:56:41:fb:96:13:29:
5e:a4:83:dc:28:86:42:70:94:e3:7b:e6:d9:45:94:
3e:a3:4c:8f:c9:73:e8:9c:7f:b7:19:7e:6e:02:6b:
b3:1f:20:15:51:01:ad:2d:98:34:c5:f8:95:1f:2a:
b2:da:6d:d8:33:41:5a:d6:da:de:ac:84:84:be:50:
5f:04:c8:f7:fd:cf:ac:a0:d2:72:1b:5b:da:c3:ea:
73:4f:be:42:ad:98:4e:3c:2e:25:2f:0c:7a:7d:64:
b1:76:44:1f:86:34:08:6d:29:42:cd:24:f1:89:fa:
4d:f1:6a:bf:88:d5:27:0e:ce:bc:2e:58:ea:76:64:
20:d5:d9:86:38:d7:5b:b2:a6:56:2e:dd:4c:7d:f9:
2c:d4:e4:52:3b:b6:7e:ca:6c:58:88:ac:e5:62:f4:
a1:a2:cc:33:ea:fe:32:ef:5b:00:85:d1:e7:0c:ab:
22:fc:0a:04:06:fc:a5:70:0c:b1:ed:e2:bf:6b:1d:
9b:47:31:aa:7d:be:0c:9c:7c:6c:cd:11:91:67:27:
bd:fe:37:ac:a7:89:b6:06:6b:4e:26:ae:15:88:f2:
d7:e2:9b:08:d8:d0:b2:3a:2e:b6:b4:a4:c3:6d:27:
96:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:14:48:A9:6C:98:85:81:EB:54:24:67:0B:96:D8:50:6A:C1:80:F7
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nxRIqWyYhYHrVCRnC5bYUGrBgPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:b7:25:56:b9:2c:1f:67:13:52:77:e8:2f:7d:c5:db:e9:7d:
5d:a2:fd:c7:99:f8:37:9a:ef:cc:ef:74:2e:bb:68:b1:ca:46:
35:9b:96:23:b4:74:1a:1f:50:81:86:d9:5b:db:63:b8:91:7d:
53:3d:8f:01:b8:a1:d3:a2:4e:ba:a0:27:58:75:9f:22:dc:76:
59:a7:55:9d:ce:55:00:c6:fb:35:4c:48:4f:75:8c:a4:40:67:
ee:3e:38:d2:e5:38:52:2f:3b:0a:89:f5:cd:d5:c7:ca:4a:b8:
27:2d:2c:7b:5b:d3:51:a5:ed:e1:b1:3f:e2:ed:44:8c:83:4b:
47:af:47:94:8f:7e:eb:14:44:5a:c1:90:01:c3:4c:91:eb:8a:
1d:15:6d:0b:8f:7f:4f:08:00:3c:a0:30:79:2c:4c:bf:d2:25:
d4:c8:12:ce:8e:ed:a4:10:86:1c:7a:a4:8a:0b:27:04:ac:e6:
f0:4b:bf:73:17:1e:2f:e6:75:b2:86:20:59:a9:ba:2c:bf:43:
85:3b:5d:a9:63:b5:e0:bd:40:e9:b4:52:80:77:d4:f4:76:ad:
c3:43:e0:54:04:46:3a:d9:ed:c5:a9:88:64:b8:fe:97:6a:f4:
71:68:10:c8:df:b4:7d:4f:de:90:67:33:bb:ce:1f:d3:1d:80:
ac:c8:6b:35
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYz0yn9y84ru4uHKBn8CQStaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTEwMTkxMjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjE0NDhhOTZjOTg4NTgxZWI1NDI0NjcwYjk2ZDg1MDZhYzE4MGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptIfUZS0cM9JdG0EUw34H82VE1nl
2BNWQfuWEylepIPcKIZCcJTje+bZRZQ+o0yPyXPonH+3GX5uAmuzHyAVUQGtLZg0
xfiVHyqy2m3YM0Fa1trerISEvlBfBMj3/c+soNJyG1vaw+pzT75CrZhOPC4lLwx6
fWSxdkQfhjQIbSlCzSTxifpN8Wq/iNUnDs68LljqdmQg1dmGONdbsqZWLt1Mffks
1ORSO7Z+ymxYiKzlYvShoswz6v4y71sAhdHnDKsi/AoEBvylcAyx7eK/ax2bRzGq
fb4MnHxszRGRZye9/jesp4m2BmtOJq4ViPLX4psI2NCyOi62tKTDbSeW9QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ8USKlsmIWB61QkZwuW2FBqwYD3MB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvbnhSSXFXeVloWUhyVkNSbkM1YllVR3JCZ1BjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACG3JVa5LB9nE1J36C99
xdvpfV2i/ceZ+Dea78zvdC67aLHKRjWbliO0dBofUIGG2VvbY7iRfVM9jwG4odOi
TrqgJ1h1nyLcdlmnVZ3OVQDG+zVMSE91jKRAZ+4+ONLlOFIvOwqJ9c3Vx8pKuCct
LHtb01Gl7eGxP+LtRIyDS0evR5SPfusURFrBkAHDTJHrih0VbQuPf08IADygMHks
TL/SJdTIEs6O7aQQhhx6pIoLJwSs5vBLv3MXHi/mdbKGIFmpuiy/Q4U7XaljteC9
QOm0UoB31PR2rcND4FQERjrZ7cWpiGS4/pdq9HFoEMjftH1P3pBnM7vOH9MdgKzI
azU=
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:38:58 2025 by rpki-client