Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NZPaajDc9u3iG1i8cpVDrslrH0c.roa
File: NZPaajDc9u3iG1i8cpVDrslrH0c.roa (raw, json)
Hash identifier: 6nehP1+MViuW6UmRM+aMhp7Hoor5xzXaqNmj/Jjaweo=
Subject key identifier: 35:93:DA:6A:30:DC:F6:ED:E2:1B:58:BC:72:95:43:AE:C9:6B:1F:47
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018BB79E769157CAF89E6104F81E197C33AC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NZPaajDc9u3iG1i8cpVDrslrH0c.roa
Signing time: Fri 10 Nov 2023 05:04:57 +0000
ROA not before: Fri 10 Nov 2023 05:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18b:b79e:1cff/128 maxlen: 128
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b7:9e:76:91:57:ca:f8:9e:61:04:f8:1e:19:7c:33:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 10 05:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3593da6a30dcf6ede21b58bc729543aec96b1f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:d9:20:68:78:af:d6:2f:3b:97:1f:4d:e6:
48:61:23:d5:6e:cd:ce:bf:e5:37:84:48:20:cf:29:
71:51:71:ad:8e:d9:3e:5f:93:a3:1a:2c:9f:d3:c3:
09:14:bf:7d:d8:93:4e:61:3f:fe:f5:37:14:46:27:
24:51:d6:01:e5:e2:c9:4f:e4:60:71:2d:13:a0:99:
51:39:81:e0:3e:b1:3d:82:4d:19:90:47:21:3a:70:
fe:5f:2f:58:97:0e:83:92:73:6f:2c:30:83:76:91:
75:4e:70:d9:93:f0:79:64:98:98:93:eb:2f:53:c8:
93:b8:69:0c:99:ba:3e:bd:c6:ba:81:d2:9b:7b:d3:
01:fe:41:85:90:21:b1:aa:12:39:d5:b6:30:b8:36:
53:1e:da:5b:0e:54:f7:7c:e9:5a:09:5f:78:a7:30:
fc:53:66:15:43:03:3d:4a:65:4f:f2:6d:56:09:57:
ec:30:d0:10:54:b1:4f:ac:1d:22:35:79:8c:e3:77:
9c:dc:ff:49:72:8c:46:f6:fe:78:30:eb:b4:c7:44:
1c:02:a5:99:af:ab:43:ef:41:30:84:6c:24:05:44:
95:bc:3f:67:22:18:bd:9e:39:75:c6:d0:dc:81:f5:
d0:6e:31:7a:03:fe:63:9e:f8:f6:f7:6b:0c:87:5a:
15:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:93:DA:6A:30:DC:F6:ED:E2:1B:58:BC:72:95:43:AE:C9:6B:1F:47
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/NZPaajDc9u3iG1i8cpVDrslrH0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
c5:eb:b7:0e:d8:d9:df:38:ce:31:d3:5d:3f:43:4b:c1:8a:61:
32:47:d9:34:dc:1b:dd:37:ee:f5:c1:6d:40:c0:f8:2e:b6:85:
00:5e:26:70:b0:50:8a:1d:69:d0:95:57:c1:6c:91:f4:c3:9f:
aa:7b:36:bd:e9:a7:e5:1c:10:06:fc:32:d9:ae:e4:7d:58:d4:
f3:de:6c:00:7a:4f:48:1a:b8:18:07:d1:30:ba:02:f6:a1:a5:
2c:5c:29:0d:57:6a:e6:94:d8:2a:ef:cc:6e:2a:34:9b:13:8b:
b3:ec:5c:d2:07:3e:7c:30:3a:56:72:dd:93:a8:e2:71:27:d3:
7e:a7:8c:21:06:25:87:c0:9b:0e:0f:7b:d6:4d:a6:f7:1b:9f:
07:49:9c:df:20:99:95:b1:ff:4b:af:ff:40:8f:7b:fa:46:e0:
7a:a9:48:f6:59:0b:5b:fd:56:0e:c9:3a:71:53:de:8d:af:4c:
30:dc:b4:d1:6d:1f:fe:9d:cc:42:cd:62:fe:71:e3:31:2f:d5:
39:f4:c4:de:ba:ed:ac:6b:96:3a:63:0f:f2:09:9a:b3:a3:0f:
d2:5d:23:fd:dd:ed:54:2b:6a:43:b8:6d:95:54:5a:d8:b1:cf:
2a:c1:bf:d9:df:fd:e1:8c:39:58:60:5d:ab:06:59:30:78:32:
db:c2:f9:fd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYu3nnaRV8r4nmEE+B4ZfDOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMTEwMDUwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTkzZGE2YTMwZGNmNmVkZTIxYjU4YmM3Mjk1NDNhZWM5NmIxZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY/ZIGh4r9YvO5cfTeZIYSPVbs3O
v+U3hEggzylxUXGtjtk+X5OjGiyf08MJFL992JNOYT/+9TcURickUdYB5eLJT+Rg
cS0ToJlROYHgPrE9gk0ZkEchOnD+Xy9Ylw6DknNvLDCDdpF1TnDZk/B5ZJiYk+sv
U8iTuGkMmbo+vca6gdKbe9MB/kGFkCGxqhI51bYwuDZTHtpbDlT3fOlaCV94pzD8
U2YVQwM9SmVP8m1WCVfsMNAQVLFPrB0iNXmM43ec3P9JcoxG9v54MOu0x0QcAqWZ
r6tD70EwhGwkBUSVvD9nIhi9njl1xtDcgfXQbjF6A/5jnvj292sMh1oVpwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDWT2mow3Pbt4htYvHKVQ67Jax9HMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvTlpQYWFqRGM5dTNpRzFpOGNwVkRyc2xySDBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAMXrtw7Y2d84zjHTXT9D
S8GKYTJH2TTcG9037vXBbUDA+C62hQBeJnCwUIodadCVV8FskfTDn6p7Nr3pp+Uc
EAb8Mtmu5H1Y1PPebAB6T0gauBgH0TC6AvahpSxcKQ1XauaU2CrvzG4qNJsTi7Ps
XNIHPnwwOlZy3ZOo4nEn036njCEGJYfAmw4Pe9ZNpvcbnwdJnN8gmZWx/0uv/0CP
e/pG4HqpSPZZC1v9Vg7JOnFT3o2vTDDctNFtH/6dzELNYv5x4zEv1Tn0xN667axr
ljpjD/IJmrOjD9JdI/3d7VQrakO4bZVUWtixzyrBv9nf/eGMOVhgXasGWTB4MtvC
+f0=
-----END CERTIFICATE-----
Generated at Tue Jun 17 07:54:04 2025 by rpki-client