Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NBHSeGUr2dOkZ99LY5NAeHJ_3Ag.roa
File: NBHSeGUr2dOkZ99LY5NAeHJ_3Ag.roa (raw, json)
Hash identifier: /UQtLH947Diy0pwwWuUHIo2oimbl40QjWkvxcg6NTnE=
Subject key identifier: 34:11:D2:78:65:2B:D9:D3:A4:67:DF:4B:63:93:40:78:72:7F:DC:08
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018ADAD32C5D9C1F3606E3B84B577CBB985E
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NBHSeGUr2dOkZ99LY5NAeHJ_3Ag.roa
Signing time: Thu 28 Sep 2023 08:06:27 +0000
ROA not before: Thu 28 Sep 2023 08:06:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:dad3:492/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:da:d3:2c:5d:9c:1f:36:06:e3:b8:4b:57:7c:bb:98:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 28 08:06:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3411d278652bd9d3a467df4b63934078727fdc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:0b:fa:0d:9e:60:57:31:a4:5a:fc:a2:86:
95:18:db:bc:56:84:65:b0:81:35:64:6b:28:0c:8b:
6b:0e:a3:07:da:e1:ef:4d:ea:9e:62:02:19:ae:a4:
6a:bf:5f:ee:5e:34:c3:33:37:26:c8:4a:db:20:17:
1b:ae:16:d4:4d:8a:8e:43:26:64:08:fe:81:7a:65:
97:3a:ed:c7:75:19:cc:62:53:e7:92:1e:c9:92:2d:
d3:ba:06:ea:08:31:5f:18:f0:26:43:6a:7e:76:a6:
be:f0:31:46:2f:8e:a5:eb:4f:75:fe:77:04:c2:74:
86:dd:a5:eb:8f:28:ab:22:c9:72:ba:e7:e0:2c:cf:
a2:0f:7c:e4:a3:21:f6:86:70:47:4a:f0:c3:78:39:
bd:57:ea:39:ec:f3:8c:2a:0d:30:3b:9a:d9:90:a6:
3e:0f:7b:bd:b6:d4:c3:50:79:48:d6:9c:f2:00:7d:
73:a6:2a:54:15:05:08:6e:82:c6:9b:ca:89:ea:2f:
a7:ff:e8:d8:3b:97:09:e9:4f:6f:f0:50:76:a5:98:
ed:55:6d:cb:96:4e:30:f6:37:5d:51:13:59:3b:c8:
62:91:bf:7a:59:e8:eb:64:82:2d:af:09:be:30:bf:
21:7f:1b:aa:96:d6:65:a5:f5:49:4a:ba:0e:91:58:
9c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:11:D2:78:65:2B:D9:D3:A4:67:DF:4B:63:93:40:78:72:7F:DC:08
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NBHSeGUr2dOkZ99LY5NAeHJ_3Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:82:be:76:31:e4:f2:0b:04:15:ed:31:52:e4:bf:a1:77:d0:
d5:96:db:93:cb:0b:99:6f:de:a3:9c:48:3b:e6:74:da:ca:c0:
0b:dc:d6:6d:0a:c2:01:cf:b9:ef:73:51:bb:44:f5:b0:ce:5b:
b4:49:60:7c:9f:05:c9:23:2c:57:f1:5a:07:b7:1f:87:36:82:
15:b1:6d:21:62:50:8f:ba:b9:a7:03:0a:55:a5:f1:3f:2b:27:
86:fd:3a:65:f7:d5:f4:fb:74:5f:6c:3b:71:56:cf:4f:af:94:
40:52:40:50:a7:12:50:6c:52:8d:ac:bc:26:54:c3:61:4b:e1:
e6:0a:d9:6b:78:9c:bb:7f:f8:8d:eb:1e:8d:f1:a0:80:f8:f4:
91:22:bf:68:51:ba:e7:c1:04:9e:ef:fe:8e:20:a0:9b:36:3e:
d3:48:13:44:ef:3d:e9:94:39:3d:93:e0:d1:c8:1e:97:73:93:
c1:76:20:c9:48:57:90:75:52:18:5b:b0:79:72:39:9e:ab:60:
42:cc:07:dd:6d:db:0b:0b:99:3e:1d:bc:8a:0f:28:1b:91:d1:
97:10:26:0f:92:39:2b:69:4c:a0:37:dd:28:cf:6f:58:7d:2b:
33:6e:60:49:1b:e4:14:cd:00:75:f1:2a:04:90:27:64:05:0e:
cf:4b:56:20
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYra0yxdnB82BuO4S1d8u5heMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI4MDgwNjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDExZDI3ODY1MmJkOWQzYTQ2N2RmNGI2MzkzNDA3ODcyN2ZkYzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEIL+g2eYFcxpFr8ooaVGNu8VoRl
sIE1ZGsoDItrDqMH2uHvTeqeYgIZrqRqv1/uXjTDMzcmyErbIBcbrhbUTYqOQyZk
CP6BemWXOu3HdRnMYlPnkh7Jki3TugbqCDFfGPAmQ2p+dqa+8DFGL46l6091/ncE
wnSG3aXrjyirIslyuufgLM+iD3zkoyH2hnBHSvDDeDm9V+o57POMKg0wO5rZkKY+
D3u9ttTDUHlI1pzyAH1zpipUFQUIboLGm8qJ6i+n/+jYO5cJ6U9v8FB2pZjtVW3L
lk4w9jddURNZO8hikb96WejrZIItrwm+ML8hfxuqltZlpfVJSroOkVicKwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDQR0nhlK9nTpGffS2OTQHhyf9wIMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTkJIU2VHVXIyZE9rWjk5TFk1TkFlSEpfM0FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKuCvnYx5PILBBXtMVLk
v6F30NWW25PLC5lv3qOcSDvmdNrKwAvc1m0KwgHPue9zUbtE9bDOW7RJYHyfBckj
LFfxWge3H4c2ghWxbSFiUI+6uacDClWl8T8rJ4b9OmX31fT7dF9sO3FWz0+vlEBS
QFCnElBsUo2svCZUw2FL4eYK2Wt4nLt/+I3rHo3xoID49JEiv2hRuufBBJ7v/o4g
oJs2PtNIE0TvPemUOT2T4NHIHpdzk8F2IMlIV5B1UhhbsHlyOZ6rYELMB91t2wsL
mT4dvIoPKBuR0ZcQJg+SOStpTKA33SjPb1h9KzNuYEkb5BTNAHXxKgSQJ2QFDs9L
ViA=
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:11:02 2025 by rpki-client