Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nrp8y7H-urlqYS0O-lCTtkYk7_c.roa
File: nrp8y7H-urlqYS0O-lCTtkYk7_c.roa (raw, json)
Hash identifier: KaczXkd8gjlpRQPKf15YJY8hJgT1Ot4anuhrpuBKDO4=
Subject key identifier: 9E:BA:7C:CB:B1:FE:BA:B9:6A:61:2D:0E:FA:50:93:B6:46:24:EF:F7
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C39E5413A01BCEF553957B548CA02F049
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nrp8y7H-urlqYS0O-lCTtkYk7_c.roa
Signing time: Tue 05 Dec 2023 12:12:54 +0000
ROA not before: Tue 05 Dec 2023 12:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:e5:41:3a:01:bc:ef:55:39:57:b5:48:ca:02:f0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 5 12:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9eba7ccbb1febab96a612d0efa5093b64624eff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f1:49:cb:15:3f:e9:f3:33:49:c5:93:c1:19:
70:33:5c:a3:4e:cd:54:68:3c:9b:e8:2c:95:e6:72:
dc:94:35:c7:ee:2c:4d:cf:a6:db:d5:9a:61:94:dc:
42:b4:5f:6e:74:12:23:2f:b7:86:0a:c2:7a:b0:2f:
ab:10:5a:d6:d2:e1:bb:cb:0b:e7:2c:cb:01:48:73:
7c:2e:04:ac:6a:c2:ee:29:7b:13:b8:e3:b4:f6:ab:
4b:06:8f:6f:82:d7:75:6a:15:c4:d5:64:ab:3b:78:
3e:62:94:0e:1b:8e:ec:16:c6:9a:76:60:0a:56:3a:
c4:ee:7d:b6:08:2a:f5:8f:80:0f:d4:43:30:a3:44:
87:d2:cc:3c:3d:1f:e5:07:53:56:5d:32:0d:ad:dd:
6e:e6:8f:81:08:49:3e:27:73:75:f9:ec:f0:04:be:
7d:b6:a2:0c:80:d7:b8:8a:14:02:4f:3b:21:07:1c:
37:5e:25:21:fe:45:c8:3e:80:a3:60:e1:fd:81:bf:
45:f2:d3:6c:6e:66:ac:9d:fa:76:9d:b9:7b:2a:d4:
4a:97:58:82:fe:17:9e:1a:e1:db:d5:8d:ff:d3:ec:
45:4a:cd:3e:d6:5b:21:37:87:49:fb:7d:c8:4b:4d:
ee:09:a5:d6:36:bf:6f:b3:dc:5e:12:d7:74:e0:ec:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BA:7C:CB:B1:FE:BA:B9:6A:61:2D:0E:FA:50:93:B6:46:24:EF:F7
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/nrp8y7H-urlqYS0O-lCTtkYk7_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:91:0b:e9:28:56:80:12:62:bd:db:0a:a5:b9:df:56:ef:70:
7c:26:85:53:78:31:e7:93:a6:97:06:2a:c3:81:0f:77:bd:8f:
c5:c5:e4:89:7d:71:e5:a8:05:d5:db:64:30:fc:15:73:e5:2f:
b6:c0:3b:25:fc:c4:95:aa:65:43:db:ff:3e:d0:a9:30:a7:15:
da:37:68:45:b2:3e:80:f9:0a:62:62:db:28:1c:8d:57:ee:5c:
43:3e:1e:65:96:43:d7:c3:99:4b:c8:dd:9f:2a:bd:18:7f:9e:
61:5d:f7:40:ac:f7:bf:ce:95:bd:02:a1:e1:9c:c2:ac:6d:ef:
56:2a:6a:39:59:d7:67:71:8c:21:5c:8b:da:8b:15:c9:4a:e4:
bb:df:f3:fb:27:0d:e8:3b:60:17:5c:51:f9:45:bc:46:a6:58:
c2:eb:d6:11:0e:1c:75:42:14:24:47:61:d4:ad:cc:a0:6d:a1:
f4:53:67:e7:77:dd:4b:e6:5c:d2:04:cb:ad:6d:f9:4f:46:2f:
43:a0:db:64:19:b5:24:bd:73:45:84:a5:25:92:90:84:f0:73:
c1:f5:93:20:53:e6:b1:6c:e4:bf:50:b1:a7:09:38:a1:08:5b:
be:da:fa:f5:66:55:3d:21:ed:05:07:56:0b:ad:cf:b9:2d:c2:
46:c5:89:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:52:13 2025 by rpki-client