Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ndl-wMGdNZ2FyZd5psuih-xwAFw.roa
File: ndl-wMGdNZ2FyZd5psuih-xwAFw.roa (raw, json)
Hash identifier: yLu7jYcTdXsuENbzg0lJLtcRI0yUJLDlK11CJA6J6uk=
Subject key identifier: 9D:D9:7E:C0:C1:9D:35:9D:85:C9:97:79:A6:CB:A2:87:EC:70:00:5C
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B963065E9B0DE0FBF84A42D99AF79FC40
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ndl-wMGdNZ2FyZd5psuih-xwAFw.roa
Signing time: Fri 03 Nov 2023 17:17:16 +0000
ROA not before: Fri 03 Nov 2023 17:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:30:65:e9:b0:de:0f:bf:84:a4:2d:99:af:79:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 3 17:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dd97ec0c19d359d85c99779a6cba287ec70005c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e1:48:eb:33:2a:b0:c1:79:e9:c0:b8:02:f4:
d8:f5:28:55:95:3c:d6:27:6c:1b:1a:7c:25:8d:46:
62:d3:87:70:79:25:35:10:20:3b:18:b8:9a:08:5c:
53:2e:17:64:77:f6:3b:ef:11:f6:9e:35:0a:e0:68:
03:e4:7d:87:1e:81:34:7c:98:00:38:86:4c:6f:76:
24:07:17:9a:28:a8:6d:4e:f1:c5:68:90:6d:63:33:
14:b5:69:cb:11:d9:92:ba:f7:09:51:30:d5:00:ce:
32:a7:56:7e:eb:be:7b:1f:ff:a3:9f:8a:e9:53:33:
a1:c3:da:58:59:65:1b:e4:d7:7d:ff:cc:27:1d:83:
e2:b3:d8:88:67:ca:b7:41:72:7c:d9:20:97:e8:3b:
0d:23:b0:51:74:88:ec:59:21:18:16:5b:5e:0e:29:
b5:9b:95:70:b7:dd:9b:bd:ee:2b:02:9d:65:c1:35:
ae:31:e4:1e:de:2e:b9:4c:46:83:0d:b2:2c:8f:2f:
10:c5:1a:b4:a0:e3:04:72:af:19:d9:67:6e:4d:3a:
1a:da:a0:97:20:04:72:51:ac:2a:35:de:5c:60:da:
d5:2f:8a:28:47:ff:9c:95:13:a6:87:72:5a:8c:2e:
38:cd:5d:c1:22:74:f7:d8:56:10:34:d4:44:56:83:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D9:7E:C0:C1:9D:35:9D:85:C9:97:79:A6:CB:A2:87:EC:70:00:5C
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ndl-wMGdNZ2FyZd5psuih-xwAFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:53:11:27:d8:50:60:8e:11:50:62:e7:d0:5d:cc:4c:78:c5:
02:d1:52:d0:92:79:92:ea:78:59:e7:cc:3e:93:91:c6:c6:13:
a7:9e:2b:79:18:a4:77:ef:8b:1e:17:c9:53:cc:fe:eb:f0:d0:
5e:63:d7:67:d8:50:fb:da:94:ff:54:25:15:50:ba:5d:63:87:
74:f0:b5:06:99:22:0b:7e:0e:e6:82:30:2d:25:58:5b:84:62:
e1:4d:e7:01:c9:3e:4e:7f:5e:72:94:75:de:51:7e:7b:99:4e:
07:47:37:66:b4:a9:31:6b:30:7a:a3:53:09:c2:9e:43:9f:c6:
a0:3e:af:80:fc:77:f1:cd:f3:4a:b0:9a:49:34:8c:cd:52:f5:
05:6f:93:b2:f7:53:f3:dc:27:6b:f1:f2:0e:db:7b:5b:72:e3:
bf:5c:49:f3:f8:29:fb:a9:71:fd:c8:3c:19:6c:c8:b2:f6:fb:
9e:63:e1:dc:1c:d2:8b:2a:5f:8c:ce:fb:4e:57:44:5b:57:45:
5d:0b:f4:e3:db:17:3f:44:86:8f:4f:d6:c0:f8:48:ae:42:5f:
8d:aa:c0:79:6a:3b:b1:0c:ed:f1:9e:d3:b4:24:bd:fe:d6:27:
f7:ce:ae:c7:42:5d:45:da:88:26:18:6d:d8:e7:ac:f5:b7:87:
0c:92:55:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:36 2025 by rpki-client