Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NUzwVAXS_HpyXDKUoYndS3HDuFM.roa
File: NUzwVAXS_HpyXDKUoYndS3HDuFM.roa (raw, json)
Hash identifier: v4GdLMF7LfuyV0RHQ2r+o2dY3xvp7s0ojXWHzUiHL9Y=
Subject key identifier: 35:4C:F0:54:05:D2:FC:7A:72:5C:32:94:A1:89:DD:4B:71:C3:B8:53
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D6A2E4F490CC43DCFF6E209DE1735C4AB
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NUzwVAXS_HpyXDKUoYndS3HDuFM.roa
Signing time: Fri 02 Feb 2024 14:17:16 +0000
ROA not before: Fri 02 Feb 2024 14:17:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:2e:4f:49:0c:c4:3d:cf:f6:e2:09:de:17:35:c4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Feb 2 14:17:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=354cf05405d2fc7a725c3294a189dd4b71c3b853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:4f:2d:31:23:ad:cd:91:7e:91:98:39:88:
c2:74:80:63:87:f5:6a:4b:3a:95:17:d8:08:44:61:
18:9b:b7:24:a7:ba:cc:17:f4:a0:e0:8d:f7:88:20:
c4:32:28:55:61:c7:01:e4:c5:bb:af:ac:7a:4f:6d:
85:96:bb:c6:5b:26:21:cc:d6:5b:0d:5a:34:7b:0e:
7f:2a:7e:72:9a:7f:8b:9c:22:f5:8f:d9:36:be:df:
06:41:bb:51:98:fc:21:67:6e:db:58:d8:81:77:52:
4b:8c:c6:2f:02:e5:25:dd:1a:85:df:d5:d9:4e:ae:
54:ae:c7:08:b8:86:31:69:0d:f5:7c:84:36:90:e8:
e6:be:5a:e1:db:12:2b:b8:b0:e3:c6:0d:1b:e3:9d:
b8:db:40:90:75:5d:57:70:eb:df:69:78:d5:71:72:
62:d9:49:30:d8:bc:01:ee:d4:a6:10:7b:1b:cc:5d:
fb:64:4d:b2:34:14:00:34:6a:22:b7:57:e4:2c:2d:
cc:c2:cf:06:17:61:98:aa:90:ea:4d:f8:15:b1:8a:
32:84:e2:94:5f:a5:41:eb:f0:af:4b:70:d2:c4:87:
c5:f7:57:6b:98:03:5f:1e:e4:34:d5:aa:6c:29:bd:
0f:aa:40:5e:14:6a:aa:dd:87:f4:e1:d3:18:df:50:
39:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4C:F0:54:05:D2:FC:7A:72:5C:32:94:A1:89:DD:4B:71:C3:B8:53
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/NUzwVAXS_HpyXDKUoYndS3HDuFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:61:25:b3:78:b6:92:8a:f9:b4:d5:7d:ef:4c:7f:f5:df:be:
59:ba:a0:86:af:31:8c:4f:18:af:c3:33:54:8b:37:60:54:7a:
da:70:06:ea:94:8c:17:7d:84:75:d3:8e:f2:9a:6b:51:0c:6d:
86:94:b1:a1:09:cc:2d:02:92:1f:e5:3d:f8:2f:11:05:48:5b:
49:a9:eb:98:62:bd:35:11:da:84:2c:c5:a3:89:29:dc:04:ce:
47:68:5d:cc:4c:49:96:1d:41:cf:98:23:31:76:5c:b5:a4:6d:
93:72:27:13:0d:57:68:a1:db:5b:10:16:86:ee:58:0e:01:c3:
ca:7e:bf:d7:b0:e1:c3:72:f7:28:b0:d0:8f:73:26:ab:83:10:
4f:16:09:2f:f5:af:55:0d:92:b9:10:a9:55:ee:b1:7f:24:a7:
07:c4:34:e1:44:3e:56:1c:f3:5c:0d:c1:45:f3:d5:db:8e:86:
2b:ce:79:68:85:5b:46:ce:4e:94:26:da:34:a2:67:cf:72:de:
c4:9b:0f:46:8c:79:89:1b:87:60:60:a4:79:43:82:b4:4e:2d:
a4:f4:e4:ab:85:86:72:f7:ec:f1:02:86:b9:89:a5:56:ec:0e:
51:c6:13:4d:f4:5f:14:02:5e:f3:c2:c1:7d:4b:bd:b0:0d:6a:
15:a5:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:29:07 2025 by rpki-client