Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/NiC_YIk_BxxPQWQAVltpAcC1wOY.roa
File: NiC_YIk_BxxPQWQAVltpAcC1wOY.roa (raw, json)
Hash identifier: doMKFdFmqltMqG0lXm6coDldcZJhpfTkIovn55UqKBw=
Subject key identifier: 36:20:BF:60:89:3F:07:1C:4F:41:64:00:56:5B:69:01:C0:B5:C0:E6
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F6FB977ED221F4ADA0C0A6440F4CAA793
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/NiC_YIk_BxxPQWQAVltpAcC1wOY.roa
Signing time: Mon 13 May 2024 02:12:56 +0000
ROA not before: Mon 13 May 2024 02:12:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6f:b9:77:ed:22:1f:4a:da:0c:0a:64:40:f4:ca:a7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 13 02:12:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3620bf60893f071c4f416400565b6901c0b5c0e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:2d:85:5f:f5:26:1d:f1:a0:b6:ba:0d:63:
20:8b:ec:fa:2e:78:e3:3e:5c:44:23:dd:77:d9:11:
54:aa:38:a8:7b:d4:b7:6b:a0:d8:7c:a4:14:7a:66:
c1:ee:12:81:77:7e:5f:7b:47:31:7b:66:dd:3b:3b:
f2:b3:67:5d:4f:32:bb:85:84:d0:4d:0a:a9:2d:5c:
4b:12:24:b6:ff:86:9a:38:d3:8f:67:1e:29:b0:52:
af:33:f7:d8:37:30:ce:3b:e4:22:58:e5:79:e6:cc:
0b:29:63:de:06:87:db:45:8a:d9:bf:b6:72:b7:87:
1b:60:f2:86:5c:d0:4b:e4:5a:c4:fd:6b:73:45:8f:
7e:fa:3f:08:78:a9:bd:93:9b:4f:83:7c:9d:07:b3:
af:88:20:cf:f3:78:76:1a:24:db:22:92:57:37:d0:
00:7f:02:77:80:2f:70:1b:59:22:00:f8:a4:78:7d:
99:e3:e8:49:84:bc:ef:0c:4a:9d:0a:8f:c5:f9:1e:
84:12:dc:06:4d:04:0b:35:ba:60:74:81:bc:35:0d:
5f:be:be:2c:72:1d:37:5a:fd:5a:28:eb:76:82:2d:
69:93:e4:b2:8c:e7:66:bc:01:b6:53:df:1a:71:3a:
94:e3:3d:eb:a9:c2:f8:dd:24:31:cc:95:1a:e8:2f:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:20:BF:60:89:3F:07:1C:4F:41:64:00:56:5B:69:01:C0:B5:C0:E6
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/NiC_YIk_BxxPQWQAVltpAcC1wOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:64:57:7f:f1:0f:cc:01:52:d6:fd:c9:17:10:ac:d9:2f:de:
3b:4d:5e:34:d8:c1:25:64:9c:b4:aa:e1:3a:a4:e4:46:a8:d8:
5c:cb:8b:b2:bc:85:ef:a7:5a:aa:10:5a:0d:99:5b:13:37:1a:
2e:66:f0:d1:ed:e1:f6:b0:1f:88:8a:b7:80:78:34:df:f4:d2:
7a:a4:8d:15:5f:db:4b:cc:ee:64:d3:f9:7a:4d:61:37:b3:4f:
10:fd:3f:a1:1c:fa:2a:b5:aa:72:b8:c8:ac:47:4a:78:b8:da:
8b:a9:12:c3:cc:b4:61:3a:5a:79:9a:d6:10:08:d6:9b:79:85:
a8:91:04:8e:28:57:28:87:14:e3:b7:7c:27:97:89:48:36:fd:
b4:d6:d4:42:cf:fa:ed:c7:b7:06:bb:10:19:9e:e5:28:dd:46:
08:ad:00:67:47:d1:9c:39:d7:e4:53:48:e0:8c:e9:8f:8e:a0:
b4:a7:5e:3f:19:b0:95:a4:89:d6:21:80:92:8f:02:7f:05:7a:
ee:85:42:0b:6c:ed:e5:ec:f2:fd:8d:cc:6e:e6:50:fe:02:90:
43:43:75:a9:3a:78:01:47:2f:ab:d5:f5:59:4d:95:e3:74:60:
67:92:9b:18:a6:17:a2:76:3c:50:52:9c:1a:fc:07:2b:50:8d:
a8:9b:12:32
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9vuXftIh9K2gwKZED0yqeTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTEzMDIxMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjIwYmY2MDg5M2YwNzFjNGY0MTY0MDA1NjViNjkwMWMwYjVjMGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM0thV/1Jh3xoLa6DWMgi+z6Lnjj
PlxEI9132RFUqjioe9S3a6DYfKQUembB7hKBd35fe0cxe2bdOzvys2ddTzK7hYTQ
TQqpLVxLEiS2/4aaONOPZx4psFKvM/fYNzDOO+QiWOV55swLKWPeBofbRYrZv7Zy
t4cbYPKGXNBL5FrE/WtzRY9++j8IeKm9k5tPg3ydB7OviCDP83h2GiTbIpJXN9AA
fwJ3gC9wG1kiAPikeH2Z4+hJhLzvDEqdCo/F+R6EEtwGTQQLNbpgdIG8NQ1fvr4s
ch03Wv1aKOt2gi1pk+SyjOdmvAG2U98acTqU4z3rqcL43SQxzJUa6C8uHQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDYgv2CJPwccT0FkAFZbaQHAtcDmMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvTmlDX1lJa19CeHhQUVdRQVZsdHBBY0Mxd09ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACJkV3/xD8wBUtb9yRcQ
rNkv3jtNXjTYwSVknLSq4Tqk5Eao2FzLi7K8he+nWqoQWg2ZWxM3Gi5m8NHt4faw
H4iKt4B4NN/00nqkjRVf20vM7mTT+XpNYTezTxD9P6Ec+iq1qnK4yKxHSni42oup
EsPMtGE6Wnma1hAI1pt5haiRBI4oVyiHFOO3fCeXiUg2/bTW1ELP+u3Htwa7EBme
5SjdRgitAGdH0Zw51+RTSOCM6Y+OoLSnXj8ZsJWkidYhgJKPAn8Feu6FQgts7eXs
8v2NzG7mUP4CkENDdak6eAFHL6vV9VlNleN0YGeSmximF6J2PFBSnBr8BytQjaib
EjI=
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:32:10 2025 by rpki-client