Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NNFzd5vBFqo_W8CxKty8avNmgBI.roa
File: NNFzd5vBFqo_W8CxKty8avNmgBI.roa (raw, json)
Hash identifier: Aa8vyTn1MAdggJ1zSSWs12Vh69CkdhEb3fXGTljQC5A=
Subject key identifier: 34:D1:73:77:9B:C1:16:AA:3F:5B:C0:B1:2A:DC:BC:6A:F3:66:80:12
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB76C1AD0126E59F938A124E987386D21
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NNFzd5vBFqo_W8CxKty8avNmgBI.roa
Signing time: Fri 10 Nov 2023 04:09:57 +0000
ROA not before: Fri 10 Nov 2023 04:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b7:6c:1a:d0:12:6e:59:f9:38:a1:24:e9:87:38:6d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 04:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34d173779bc116aa3f5bc0b12adcbc6af3668012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:cf:69:b4:ba:01:a7:ef:77:79:ad:6a:87:
b4:d0:be:c9:63:8b:c9:bd:2a:fe:25:64:b3:da:e0:
2c:b9:2a:2b:70:77:ce:4a:a6:3a:0f:13:62:31:0c:
b6:1e:8e:f9:af:97:0d:43:4d:6f:49:51:fe:e5:c1:
1e:97:37:0c:e2:b7:73:f6:93:d6:58:f2:00:e4:a9:
f3:f1:f9:c2:18:66:82:03:ff:5f:4f:cd:58:69:7a:
4f:b1:71:e6:06:f3:3b:99:19:eb:59:e1:35:c2:06:
1f:a6:2c:4c:55:2b:b7:77:b4:5f:3c:76:9a:63:13:
4a:62:67:ee:52:cd:0a:af:24:46:d7:2a:56:37:4c:
79:67:83:9d:ff:4f:24:77:f1:65:f4:ca:de:24:ff:
fb:d5:bc:c4:ff:76:a7:02:52:e4:a5:10:0c:41:21:
b3:1c:bd:3e:b6:bd:e9:0d:ef:7c:72:60:d3:02:03:
71:7b:49:bb:39:60:81:a6:91:b9:6a:f9:c6:fb:69:
d0:5a:31:1e:ae:cd:c2:35:ee:23:2c:74:70:a3:19:
16:df:a3:2d:b1:54:52:84:61:2a:4a:46:b6:0e:5e:
83:f0:73:61:b6:1b:ee:f2:8d:b5:25:cc:2e:2b:d2:
c2:91:2b:5f:1a:5b:9d:a7:b9:d8:27:0c:68:1d:bc:
3d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D1:73:77:9B:C1:16:AA:3F:5B:C0:B1:2A:DC:BC:6A:F3:66:80:12
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NNFzd5vBFqo_W8CxKty8avNmgBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:ba:2b:23:c9:96:60:21:c1:15:ab:d7:db:11:fc:dd:90:2c:
d1:1b:be:34:71:62:93:fc:81:d3:79:9b:52:50:70:04:1c:6e:
9b:47:cc:3c:52:fa:22:28:15:8b:5e:b3:cb:ad:f1:72:7e:5a:
48:f2:49:d6:8f:f8:a1:c9:50:b3:a1:c6:a4:ab:2c:94:08:84:
87:29:a9:85:8d:8b:5b:36:fc:de:41:cc:59:b0:10:61:e3:3a:
67:6e:bc:09:82:81:d5:88:90:6c:c2:54:b8:46:63:3f:f0:2b:
3e:9c:4a:d5:11:42:58:93:7c:78:ec:57:5c:8e:b5:f5:64:d1:
df:e3:79:d4:bf:c6:9f:6c:a1:2b:51:6e:85:30:d6:b0:8d:8e:
03:82:e2:85:c6:69:12:1f:65:85:83:c9:c3:fc:77:a2:17:5d:
bf:80:f3:8b:70:bb:6f:31:15:17:2f:93:57:86:67:82:2c:9f:
33:cc:aa:f8:7a:f3:fc:f8:6e:8c:89:76:b9:bd:0f:8a:e3:bc:
d0:f8:ba:de:88:c3:7f:85:46:9e:79:84:5f:84:0a:eb:5b:d3:
01:f8:91:b9:a1:3f:b6:a9:48:0b:6a:b6:83:23:78:f9:28:aa:
a2:86:e9:9e:0f:84:8a:96:d8:0a:83:c4:dc:4e:97:22:93:17:
94:8d:6f:2c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYu3bBrQEm5Z+TihJOmHOG0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTEwMDQwOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGQxNzM3NzliYzExNmFhM2Y1YmMwYjEyYWRjYmM2YWYzNjY4MDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWrPabS6Aafvd3mtaoe00L7JY4vJ
vSr+JWSz2uAsuSorcHfOSqY6DxNiMQy2Ho75r5cNQ01vSVH+5cEelzcM4rdz9pPW
WPIA5Knz8fnCGGaCA/9fT81YaXpPsXHmBvM7mRnrWeE1wgYfpixMVSu3d7RfPHaa
YxNKYmfuUs0KryRG1ypWN0x5Z4Od/08kd/Fl9MreJP/71bzE/3anAlLkpRAMQSGz
HL0+tr3pDe98cmDTAgNxe0m7OWCBppG5avnG+2nQWjEers3CNe4jLHRwoxkW36Mt
sVRShGEqSka2Dl6D8HNhthvu8o21JcwuK9LCkStfGludp7nYJwxoHbw9fQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDTRc3ebwRaqP1vAsSrcvGrzZoASMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTk5GemQ1dkJGcW9fVzhDeEt0eThhdk5tZ0JJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJG6KyPJlmAhwRWr19sR
/N2QLNEbvjRxYpP8gdN5m1JQcAQcbptHzDxS+iIoFYtes8ut8XJ+WkjySdaP+KHJ
ULOhxqSrLJQIhIcpqYWNi1s2/N5BzFmwEGHjOmduvAmCgdWIkGzCVLhGYz/wKz6c
StURQliTfHjsV1yOtfVk0d/jedS/xp9soStRboUw1rCNjgOC4oXGaRIfZYWDycP8
d6IXXb+A84twu28xFRcvk1eGZ4IsnzPMqvh68/z4boyJdrm9D4rjvND4ut6Iw3+F
Rp55hF+ECutb0wH4kbmhP7apSAtqtoMjePkoqqKG6Z4PhIqW2AqDxNxOlyKTF5SN
byw=
-----END CERTIFICATE-----
Generated at Tue May 13 11:14:40 2025 by rpki-client