Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-1j7YOP94E-nrssMa_0TQbaHeBo.roa
File: 1-1j7YOP94E-nrssMa_0TQbaHeBo.roa (raw, json)
Hash identifier: WlJ5tDB3+r0kJhS2tfwES6RYCmajvRyVuwc6CIuMvd8=
Subject key identifier: FB:58:FB:60:E3:FD:E0:4F:A7:AE:CB:0C:6B:FD:13:41:B6:87:78:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01832451CA61BAE66F3A597F7E60E354971C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-1j7YOP94E-nrssMa_0TQbaHeBo.roa
Signing time: Fri 09 Sep 2022 22:14:43 +0000
ROA not before: Fri 09 Sep 2022 22:14:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:24:51:ca:61:ba:e6:6f:3a:59:7f:7e:60:e3:54:97:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 9 22:14:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb58fb60e3fde04fa7aecb0c6bfd1341b687781a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dd:39:b3:4e:89:f9:ce:3b:14:db:93:f3:d2:
20:d1:f8:48:89:0c:09:01:ae:eb:6a:22:c7:ec:5a:
e3:e4:92:c9:c2:7f:85:b9:a9:0e:b5:91:af:51:53:
5d:93:7b:e5:40:82:a1:d2:c1:b4:81:c0:8e:fe:e9:
03:8c:77:8e:dd:d1:67:fd:5d:a8:f4:6b:81:d1:60:
71:89:ac:9c:f4:bd:0e:a2:9f:d0:e6:73:5c:66:ce:
eb:f4:04:8d:0a:b7:5a:5c:23:81:bd:30:03:6a:6d:
89:4f:48:a1:7b:75:56:9f:83:c4:81:c4:69:06:b7:
3f:14:9c:0b:7a:99:4b:ee:3b:12:96:19:ff:11:4e:
01:4c:e9:cd:fb:02:a0:19:44:29:02:34:63:7e:81:
d1:28:28:bb:74:1f:8d:64:7c:a1:2b:13:5e:ff:48:
a6:db:8d:17:57:f3:f9:11:43:f4:43:d9:c5:0c:b7:
91:3d:a6:d8:8a:70:ff:19:df:5a:25:14:53:a1:98:
fa:9d:75:35:06:73:79:43:25:1e:a3:6b:a5:10:45:
65:00:7f:e7:c0:b2:88:2c:e8:c5:14:cb:03:bb:49:
88:2b:b5:0b:e6:f1:5b:8b:c6:fd:5d:97:2a:d4:a6:
56:2e:d4:5b:1f:77:96:96:39:63:0a:e2:39:ff:a8:
11:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:58:FB:60:E3:FD:E0:4F:A7:AE:CB:0C:6B:FD:13:41:B6:87:78:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-1j7YOP94E-nrssMa_0TQbaHeBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:8f:3d:2a:e3:63:73:78:5f:88:32:b1:9b:62:75:d9:ef:b6:
b1:e7:11:08:f4:c1:67:73:38:7c:5e:4b:e2:ed:03:75:fe:08:
8c:20:20:00:c5:0e:9b:00:ad:3e:b9:0e:2d:45:c7:0e:ea:99:
c0:e5:23:b1:a6:28:6c:d7:28:14:de:44:4e:1e:f0:6e:b8:ef:
13:9d:1d:f3:e0:f3:da:ae:cb:02:68:96:3f:9e:48:88:db:42:
94:d3:57:3f:80:2e:c7:48:60:e7:ea:e4:fd:1c:09:0d:87:d9:
7a:01:73:31:c8:86:9b:77:3e:42:77:a9:20:27:b4:13:47:91:
70:26:e6:dd:e3:1f:c3:e4:bc:95:97:98:60:7b:d8:d0:28:f0:
2f:32:d9:65:3f:08:4d:fc:8e:87:e5:80:21:4a:5d:93:3c:68:
7a:46:f6:0d:87:58:4a:63:d0:a6:83:78:d4:6c:39:b9:02:29:
dd:29:ee:8a:c3:56:48:60:8f:8b:99:8e:19:1a:8d:be:c2:c9:
a8:d0:fb:95:e0:86:cb:4f:af:79:56:4b:07:2a:66:70:04:73:
be:fa:5f:b1:81:8a:f9:31:06:02:38:91:02:21:fb:18:d8:bd:
72:58:f3:dc:ba:50:cf:24:d1:28:54:32:f5:49:ea:12:2e:c3:
63:39:77:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:06:07 2025 by rpki-client