Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N-xqc5kJFFqTcAdDoFE5voG1Qww.roa
File: N-xqc5kJFFqTcAdDoFE5voG1Qww.roa (raw, json)
Hash identifier: nHWtQS1mzkyGtgSChJ1CynRPlMo6r6e/F3R8b7EGT/o=
Subject key identifier: 37:EC:6A:73:99:09:14:5A:93:70:07:43:A0:51:39:BE:81:B5:43:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182437036B7683DC0AB153CA67040484E62
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N-xqc5kJFFqTcAdDoFE5voG1Qww.roa
Signing time: Thu 28 Jul 2022 06:13:23 +0000
ROA not before: Thu 28 Jul 2022 06:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:70:36:b7:68:3d:c0:ab:15:3c:a6:70:40:48:4e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 06:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37ec6a739909145a93700743a05139be81b5430c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:24:7d:34:a5:22:16:2f:4a:43:2a:58:73:
ca:62:bb:1b:ae:80:44:8d:03:45:c2:d3:bf:56:ed:
90:ae:64:d3:1f:18:d4:f0:54:2c:42:46:18:6f:75:
87:ec:74:98:13:20:8b:10:a5:96:d8:4d:a9:03:0b:
5f:b5:97:b0:7e:c0:3d:6d:9b:d9:73:a1:ad:cc:7d:
cb:56:7b:47:b3:1c:21:d9:64:d6:32:ae:70:ec:fb:
95:3c:f8:66:a4:e6:8c:ea:c1:12:4b:3b:51:70:65:
83:c5:75:a7:62:9f:9f:3f:d4:4a:8e:39:c6:43:3e:
06:7b:91:68:4b:a3:83:0e:c1:0e:86:eb:3e:22:7e:
81:dc:86:b4:e1:18:5f:32:35:95:e8:1b:43:76:bb:
19:22:85:e0:fc:72:40:87:44:c2:6f:da:83:f5:43:
6d:29:e3:cf:50:ed:b6:2a:94:7a:7c:99:d4:31:f3:
bd:64:2a:a2:13:70:a0:c9:18:94:26:73:c7:dd:df:
21:3c:4b:74:32:4d:dd:69:57:bc:80:a8:29:1d:f2:
c8:6e:ea:99:ef:22:64:23:3f:30:4f:ac:7d:08:6a:
d5:ea:d5:a3:42:0f:ac:1b:ce:42:46:51:23:cc:24:
51:ff:81:c0:50:cb:09:e5:5d:4e:d9:0b:11:19:9b:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EC:6A:73:99:09:14:5A:93:70:07:43:A0:51:39:BE:81:B5:43:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N-xqc5kJFFqTcAdDoFE5voG1Qww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:a5:17:8f:e3:ea:08:5f:bb:3a:a6:7d:2c:59:18:26:18:e1:
86:de:d0:35:3d:06:23:b2:e4:75:85:65:f0:23:ef:80:e0:c6:
f4:c5:db:96:d5:4b:64:6f:a3:53:34:eb:95:f8:b1:ea:5b:81:
c6:5c:68:db:14:5c:a3:2e:03:fe:0a:e7:fc:f1:c8:ca:66:2f:
da:f7:82:6c:7b:a7:09:23:21:8e:bd:84:84:d5:e4:6d:a9:28:
a6:58:f2:13:b1:9a:00:83:5e:5e:d5:d4:8c:ae:5e:46:be:87:
4b:1b:4b:e6:83:90:95:b6:8d:fc:da:f1:e0:90:84:51:4f:90:
e8:79:ee:53:41:11:09:4a:a1:01:bb:d0:6d:db:93:65:96:e9:
64:8c:d9:36:d3:f2:d4:24:77:e3:b8:b4:43:03:25:1e:06:83:
93:0e:08:b3:05:b4:22:47:b7:f4:66:f9:68:6f:3f:ad:de:41:
f3:af:dd:37:ee:53:df:6a:18:0a:ab:2c:49:d6:dd:6b:75:a9:
2c:58:2f:8e:56:27:8d:52:79:5c:ce:05:14:69:a0:2d:64:3f:
6a:05:6b:75:72:86:67:31:09:80:5c:78:75:4e:f0:58:e5:76:
bd:c0:b0:0a:96:3b:0a:bb:f9:12:69:cf:88:6a:e7:9b:1f:42:
bd:30:2f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:47:31 2025 by rpki-client