Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NZ4wlltwI3RXD-8Mz4MByS0RaXU.roa
File: NZ4wlltwI3RXD-8Mz4MByS0RaXU.roa (raw, json)
Hash identifier: RLkmtK8cOClH+qAlvGRf8knr4jjLG58TCtL0r1yE4qY=
Subject key identifier: 35:9E:30:96:5B:70:23:74:57:0F:EF:0C:CF:83:01:C9:2D:11:69:75
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BF04C1BD5AD885CC64A4963B5D55FD47D
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NZ4wlltwI3RXD-8Mz4MByS0RaXU.roa
Signing time: Tue 21 Nov 2023 05:13:21 +0000
ROA not before: Tue 21 Nov 2023 05:13:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:4c:1b:d5:ad:88:5c:c6:4a:49:63:b5:d5:5f:d4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 21 05:13:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=359e30965b702374570fef0ccf8301c92d116975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:e3:31:50:f2:40:93:95:d8:d0:03:27:e0:
10:b4:ca:4a:27:49:9f:4e:a0:26:b1:d1:09:56:12:
30:07:d0:0c:96:81:28:0f:fb:56:e4:4c:e0:fc:f4:
9d:08:f4:83:97:04:5d:c7:54:5d:57:38:1d:50:91:
3c:48:9d:57:57:69:1e:d0:51:71:2a:16:ed:1e:b0:
52:00:09:9a:dd:2d:5a:60:01:ad:37:84:b8:50:67:
0c:85:35:50:df:63:68:39:b2:f2:51:2e:32:04:2b:
89:d4:ef:a6:86:d5:bf:80:da:5b:0d:cf:6c:2c:f6:
52:f1:c9:69:ba:1f:8f:bb:e5:60:76:c2:50:49:ab:
0e:97:98:10:c2:e0:b9:1f:73:5e:f4:a6:9f:87:2e:
07:86:34:a1:7e:e3:a9:6f:fd:12:71:4f:c6:d9:47:
98:a8:c8:64:8f:a0:bb:02:b6:57:de:a8:bc:14:ce:
36:fa:e8:05:24:a3:45:8e:fc:34:46:29:d4:4c:b3:
a0:2a:7b:74:c7:56:12:18:b1:f7:98:3c:84:fb:51:
ea:92:e7:9c:f0:3d:3a:75:b1:11:87:3f:50:b8:9f:
67:63:74:2f:30:fd:ab:9f:e4:84:23:e6:a7:b6:80:
d6:08:47:d7:f0:81:8c:97:8b:c1:b4:68:cb:77:c3:
d2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9E:30:96:5B:70:23:74:57:0F:EF:0C:CF:83:01:C9:2D:11:69:75
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NZ4wlltwI3RXD-8Mz4MByS0RaXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:6b:ea:9f:85:7f:53:fe:9b:31:ac:e9:c9:30:12:c3:5d:bb:
df:87:9b:6d:33:7f:5b:72:02:cb:f2:43:2a:5a:9c:27:80:58:
5e:ba:00:63:3d:4b:4a:8a:1d:08:4c:9b:a9:2e:ea:e8:0a:90:
0a:3b:9c:5c:b6:73:2a:66:4d:6c:d1:b9:7a:3c:a1:49:2a:e7:
48:b7:ec:20:16:8f:c2:b1:a8:64:a1:71:57:56:2d:7b:f2:d8:
83:84:2a:91:32:54:16:18:bd:a1:cd:0a:a6:03:ff:a2:3a:81:
bd:aa:cd:00:c6:ea:20:88:a9:36:19:51:9a:6a:1b:3a:99:54:
bb:ed:3d:b3:48:e4:55:57:d9:ff:9d:14:cf:38:fc:bd:b0:a1:
a6:91:31:9e:46:02:46:61:26:f2:5f:64:ac:3b:6a:0b:5e:ae:
88:4e:19:66:03:ac:0d:ad:52:79:09:ab:f1:8c:5c:c6:e8:f0:
4d:46:0a:46:75:ac:dd:79:62:42:08:3c:a5:00:cc:59:69:96:
6e:55:89:3f:f3:6d:3f:fb:52:69:e9:97:63:3c:9b:f5:da:ba:
bb:10:be:f1:9e:07:27:ef:dd:f0:a4:ec:8a:f3:99:c5:61:03:
74:4b:64:ac:6a:78:1c:90:db:13:49:98:8a:6f:b1:ce:57:d9:
0c:63:f4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:42:36 2025 by rpki-client