Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N036WeMv1AmVinidXX6AqSOdxLM.roa
File: N036WeMv1AmVinidXX6AqSOdxLM.roa (raw, json)
Hash identifier: z0UVsOBRkGYmjpwQKKpM15eTxSqoMWebVgiqP7Y1FiE=
Subject key identifier: 37:4D:FA:59:E3:2F:D4:09:95:8A:78:9D:5D:7E:80:A9:23:9D:C4:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E2601F77395F6B8CB16A461ED340F993
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N036WeMv1AmVinidXX6AqSOdxLM.roa
Signing time: Wed 03 May 2023 16:09:23 +0000
ROA not before: Wed 03 May 2023 16:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e2:60:1f:77:39:5f:6b:8c:b1:6a:46:1e:d3:40:f9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 16:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=374dfa59e32fd409958a789d5d7e80a9239dc4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:90:ba:0c:33:e2:d2:34:a4:b6:46:01:d6:
db:de:22:5e:62:02:74:5e:d0:40:af:56:30:88:9b:
bb:be:d0:aa:72:33:a4:0a:af:81:46:c2:b4:1f:42:
78:a3:e6:be:1c:6b:b7:9c:fa:1d:2f:a6:01:10:e3:
b1:45:a0:4c:7e:17:23:fb:78:a9:d1:ce:18:81:dc:
47:3b:39:22:9d:92:87:57:93:cf:6b:c6:70:7b:6f:
d6:e9:c7:bd:9a:f5:53:41:2e:0d:ba:f7:a4:06:ee:
0e:77:90:2a:fd:42:c9:cc:58:ac:e5:30:20:0e:e0:
71:30:54:ef:72:94:4e:96:7a:bf:b7:ad:e5:ba:51:
e4:25:74:9a:5e:bf:3b:55:7a:0a:0e:d8:e8:4e:46:
53:c6:1f:d9:20:ae:07:11:6f:36:48:ce:83:1d:ad:
70:6a:04:e8:52:9b:0b:60:1e:7e:9c:66:32:2e:a1:
5a:e1:30:31:6d:46:75:79:58:bb:27:13:fb:37:b4:
ea:67:51:09:90:1f:4d:01:08:d1:f0:24:d8:c1:d7:
35:50:e3:80:43:07:1e:43:ad:c9:87:6a:72:30:5d:
f5:ae:4f:61:bc:ae:4b:db:24:6c:f2:0e:53:d0:4d:
94:57:69:b4:05:b4:f9:e1:bc:52:8b:00:0c:9a:0d:
2d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4D:FA:59:E3:2F:D4:09:95:8A:78:9D:5D:7E:80:A9:23:9D:C4:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N036WeMv1AmVinidXX6AqSOdxLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:e0:16:95:d0:04:f4:b3:6b:48:c7:00:aa:f3:d6:cd:15:12:
1b:a1:4b:aa:0e:5a:1b:20:f5:86:ac:28:e6:09:f4:bc:24:fe:
ff:0b:39:17:e9:ac:0f:c1:db:f6:43:d8:16:b0:74:ac:2e:9b:
d5:e7:7f:f6:8c:e9:33:9b:91:0c:74:a6:6a:cd:80:29:10:e1:
8a:23:c7:d1:ab:9a:99:6e:2f:70:7d:95:58:c5:4e:17:83:5b:
a7:63:d2:6f:d3:61:fc:01:f8:54:b4:5a:a7:03:91:0b:9c:6b:
b2:7e:3d:9e:5a:6f:89:50:9c:c0:c7:89:49:95:a3:b0:44:04:
83:72:0d:c9:67:04:d2:05:67:4b:a8:ed:b1:bf:be:a0:27:2a:
90:2e:2e:e2:fa:4a:86:4f:b2:8a:07:ec:3f:3e:40:03:a6:67:
e9:2a:87:86:17:e3:be:c1:ed:45:3e:41:59:7d:27:b9:a0:76:
fb:e5:42:9c:cf:23:29:cc:8d:e2:81:bb:0e:5a:b2:f1:a7:81:
e8:3c:e5:04:00:6a:1d:fc:a2:97:55:29:5e:f5:e9:87:55:87:
07:2d:fa:01:01:c1:d1:e9:ff:50:12:c2:75:5f:39:f4:ee:33:
11:c0:0a:64:22:06:4c:30:1d:ec:91:10:39:8a:5e:7b:30:8b:
a6:a1:89:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:12:08 2025 by rpki-client