Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NpmPRTw8Zcfy8pmH6ZTyMVkQ7sY.roa
File: NpmPRTw8Zcfy8pmH6ZTyMVkQ7sY.roa (raw, json)
Hash identifier: q8MCzFyNB0FKTv89BFaoabSBQUwcq1fK9lMfJXbSoU4=
Subject key identifier: 36:99:8F:45:3C:3C:65:C7:F2:F2:99:87:E9:94:F2:31:59:10:EE:C6
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018B5E64563AFB3DC688442C727F7DA15CA6
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NpmPRTw8Zcfy8pmH6ZTyMVkQ7sY.roa
Signing time: Mon 23 Oct 2023 21:15:15 +0000
ROA not before: Mon 23 Oct 2023 21:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5e:64:56:3a:fb:3d:c6:88:44:2c:72:7f:7d:a1:5c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Oct 23 21:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36998f453c3c65c7f2f29987e994f2315910eec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9b:b6:89:92:36:e2:68:62:c6:b4:b3:98:0a:
e7:91:2c:2f:d2:4f:66:10:37:ca:b2:1f:f9:af:0e:
dc:63:c0:01:ce:1f:e5:6b:5d:5d:04:41:71:1c:04:
02:24:77:bd:12:bf:68:00:83:33:7e:a4:78:fb:5e:
f9:de:77:28:19:be:77:03:97:c7:62:bd:1d:2e:9c:
e1:fa:6f:68:64:35:ac:80:2b:c2:b4:d6:6e:53:6b:
36:45:b6:00:3e:e4:84:47:d6:55:29:c4:e6:86:07:
49:07:fc:d6:15:14:84:ad:a9:3c:8e:d8:d0:6e:f4:
4e:92:6b:a3:16:70:00:3b:af:49:41:d0:a0:b5:26:
48:7e:a2:35:a8:9d:96:c3:bd:38:36:85:91:c8:87:
59:3e:f4:b0:69:02:3c:2a:89:91:be:22:a0:92:c7:
f2:83:2b:49:f5:e6:c8:d3:fc:dd:f9:43:6b:10:95:
4e:21:d4:94:5f:54:75:d7:61:8e:d9:ee:94:f8:6b:
87:4e:89:3f:d7:9a:4e:2f:1b:e4:fc:a6:49:93:08:
5f:94:43:24:ab:39:87:78:77:fe:0c:aa:35:cf:ee:
51:8f:bf:98:c5:87:56:75:1d:0e:81:0e:88:35:f2:
36:bb:b2:90:e7:1e:4c:ce:fd:12:ed:37:09:cc:81:
e9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:99:8F:45:3C:3C:65:C7:F2:F2:99:87:E9:94:F2:31:59:10:EE:C6
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NpmPRTw8Zcfy8pmH6ZTyMVkQ7sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c9:36:ca:d5:dc:9d:46:a3:40:e7:45:b1:17:cd:e7:d8:e3:d6:
a4:00:a9:ec:19:92:71:85:53:db:82:e9:8e:dc:ce:62:b6:97:
c4:26:a5:94:7f:91:d8:fe:63:bd:fe:a8:09:d0:c3:70:94:d6:
27:54:7a:09:59:29:7a:af:c7:ba:e1:6c:af:a7:47:5f:29:07:
b2:46:cc:0f:21:e7:8c:fe:78:4c:c3:72:c2:0c:d4:e5:90:33:
77:fc:96:2b:9f:3d:2b:4f:cd:e4:6e:31:37:b4:56:d9:5e:52:
d1:fe:04:8a:cd:f3:b6:f9:f1:6d:03:da:1a:e3:f4:82:24:97:
74:10:7a:f8:46:06:06:e2:07:94:b9:2a:d9:a3:c7:e7:31:d7:
0d:d1:38:1a:ef:a1:ec:55:e9:57:30:b3:a8:32:65:2a:89:42:
cb:d5:cc:47:fe:e2:60:e2:77:98:61:ad:02:20:ed:8e:1a:20:
ec:6c:ad:b2:b9:d4:1f:6e:25:e6:79:6c:56:aa:b1:b4:cc:08:
71:dc:ea:6e:6b:f9:56:a4:60:95:4a:9d:73:a1:f2:02:f9:4c:
c6:b4:df:8d:4b:d1:f1:29:01:ec:d5:c6:6b:2b:21:1b:c1:35:
90:9d:7e:02:95:78:fc:60:c7:d1:6f:02:3f:b6:bb:79:bb:de:
5d:a6:5d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:53:00 2025 by rpki-client