Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NJ-yWIL_iD2d2Jwshf6jLiLkBMw.roa
File: NJ-yWIL_iD2d2Jwshf6jLiLkBMw.roa (raw, json)
Hash identifier: eossgB7r2NFuoNZD8I1ae21jvcrzs8Pjqxf6GvN6iS4=
Subject key identifier: 34:9F:B2:58:82:FF:88:3D:9D:D8:9C:2C:85:FE:A3:2E:22:E4:04:CC
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B1124755BBE5AC8BB528BC9BFC39DC97E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NJ-yWIL_iD2d2Jwshf6jLiLkBMw.roa
Signing time: Sun 08 Oct 2023 21:14:43 +0000
ROA not before: Sun 08 Oct 2023 21:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:11:24:75:5b:be:5a:c8:bb:52:8b:c9:bf:c3:9d:c9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 8 21:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=349fb25882ff883d9dd89c2c85fea32e22e404cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:89:0e:16:ec:37:ae:80:ac:7e:7d:6d:94:a3:
3c:3c:61:38:47:98:3c:5c:82:c8:f7:9c:ac:6c:fc:
52:ff:73:9f:0b:51:0a:32:b8:88:b3:28:a7:2e:bc:
bc:78:80:78:ae:bf:36:af:1a:78:9c:4a:3d:2f:64:
ce:78:a8:6a:44:d0:e0:9a:58:19:11:11:3e:0c:91:
af:6a:2c:8b:23:e0:fd:b8:4c:a2:a2:aa:49:ea:bb:
8d:6c:b8:18:37:2b:0d:c7:6c:e9:c0:67:57:6d:76:
b8:dc:74:4b:3d:d9:71:61:ad:8f:93:b7:12:28:9c:
d5:7b:ec:57:c5:86:f7:5d:53:68:9d:60:18:b8:c1:
db:18:47:ad:8d:dd:db:a6:59:ab:fb:6f:da:ce:fa:
97:a0:97:a4:1c:63:d4:f0:c2:5c:3d:fd:96:01:a5:
45:ba:87:cc:9d:6c:da:e6:94:61:47:25:76:e5:a8:
be:b0:80:cb:dd:ac:65:b5:ab:f5:48:9d:60:e2:3c:
ea:af:ab:10:3b:87:bd:e7:20:11:20:fb:94:db:86:
23:1f:f1:f0:8c:89:1b:d1:39:85:aa:fa:a9:eb:61:
7c:99:e4:e8:4f:c4:94:d2:21:10:d2:0d:bc:52:43:
de:16:7d:89:27:d4:10:55:1b:8c:2c:e9:69:73:f6:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9F:B2:58:82:FF:88:3D:9D:D8:9C:2C:85:FE:A3:2E:22:E4:04:CC
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NJ-yWIL_iD2d2Jwshf6jLiLkBMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:f7:36:23:d7:84:ad:05:f3:d9:35:62:4b:ac:99:b2:ac:42:
f2:d5:9c:aa:8f:26:ba:83:d9:60:3a:73:e6:c0:d2:d1:d5:0d:
cb:b7:db:0d:2d:de:95:e4:63:d9:19:1c:a0:fd:fa:b8:c2:91:
bb:04:0f:ea:5d:8a:88:a8:82:c7:c5:cd:40:2c:d9:0c:95:83:
c4:c5:f4:2f:77:10:5b:f5:42:55:d8:86:cb:fc:02:50:69:57:
83:1a:b4:84:cf:95:d8:4f:60:c2:de:64:7f:e1:61:08:5a:7a:
45:93:4a:a7:ae:e2:dd:28:6c:1e:05:80:bc:d0:f5:e0:ed:a4:
55:88:de:99:2c:91:8e:40:3a:c9:4b:6d:be:5a:e4:f8:77:f3:
79:34:b8:3c:1f:29:4f:47:0c:06:22:b3:c0:6c:b8:54:ac:9d:
16:18:fd:27:ee:e0:73:2a:13:e4:12:d2:e5:d3:68:d4:0c:b7:
ad:c6:54:08:e7:82:5b:21:0f:de:c7:c2:13:06:f3:3c:b1:a7:
32:5f:44:1a:f1:d6:08:79:b7:e2:53:03:84:21:33:c5:00:18:
3c:0c:88:20:f2:73:bb:de:32:73:46:40:64:c1:49:db:43:52:
12:6c:0f:f8:d5:59:99:4f:70:69:7d:51:07:75:77:87:a2:a6:
a0:8e:fc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:27 2025 by rpki-client