Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N58szKManx-p4-ohkS1vv89w32g.roa
File: N58szKManx-p4-ohkS1vv89w32g.roa (raw, json)
Hash identifier: ZqVzycbmKYoRqm3pjuQbTIJYSiTOet4oYv05gizA6IU=
Subject key identifier: 37:9F:2C:CC:A3:1A:9F:1F:A9:E3:EA:21:91:2D:6F:BF:CF:70:DF:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018550E54909B841D5B784472EC0A4EA81AC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N58szKManx-p4-ohkS1vv89w32g.roa
Signing time: Tue 27 Dec 2022 00:04:41 +0000
ROA not before: Tue 27 Dec 2022 00:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:50e4:dcea/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:50:e5:49:09:b8:41:d5:b7:84:47:2e:c0:a4:ea:81:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 00:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=379f2ccca31a9f1fa9e3ea21912d6fbfcf70df68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:03:26:99:53:de:4d:11:65:d6:21:99:8f:
17:c8:92:2f:16:d8:41:9a:91:3e:c5:fe:bd:36:6a:
7e:a9:5f:67:aa:59:77:d1:7f:54:5c:81:3c:a0:d4:
6a:55:1f:1c:cb:b3:f4:41:dd:39:86:34:fb:05:87:
10:78:6a:69:31:be:70:d8:2a:fb:cc:a3:a3:e3:1d:
60:7e:c8:43:8d:f1:b2:ca:dd:d7:c2:fe:ef:96:22:
ef:de:6b:3f:3a:65:8f:e4:ea:e6:d7:07:d2:c1:df:
11:36:aa:fd:e1:b2:8d:b2:b2:85:a6:95:b8:38:cb:
f5:0e:b7:93:50:36:c6:39:a6:01:38:cf:1d:b9:df:
42:a0:59:70:7c:a8:9d:7e:59:98:02:4d:3e:92:63:
4b:76:75:96:36:7b:89:cb:e1:8c:78:21:f0:77:e5:
73:cb:17:73:c8:af:af:15:a5:ef:8e:39:99:b1:7e:
7a:a9:a7:80:36:e5:69:4f:f4:dc:31:ba:d7:88:f6:
10:31:24:cd:cf:75:2a:35:a7:9f:b4:1f:19:b4:2d:
42:09:1a:8f:c8:f7:e9:46:58:da:00:f4:47:27:de:
39:ae:c0:0c:8f:29:4f:94:ff:d1:d8:f5:7a:b5:cc:
71:33:a5:f0:0e:35:2e:35:50:68:1a:42:2d:77:84:
3f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9F:2C:CC:A3:1A:9F:1F:A9:E3:EA:21:91:2D:6F:BF:CF:70:DF:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N58szKManx-p4-ohkS1vv89w32g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:50:20:ef:47:54:2a:16:e7:28:01:19:81:9a:c1:aa:6b:52:
d7:8c:e7:ab:69:b9:48:3d:9b:44:ef:0a:36:8e:a2:a8:22:84:
4c:ce:cb:fa:51:33:2a:04:b7:5f:ef:9b:5f:9c:32:70:f4:a0:
3a:2c:66:ef:84:f8:3d:de:cd:03:ea:34:89:79:09:88:c3:b6:
6f:30:40:b5:93:f5:89:ef:72:1f:f0:02:3f:8e:3f:41:c0:71:
14:e9:79:75:0b:fa:fe:f6:b2:8e:89:b3:e8:7a:58:6c:aa:26:
aa:94:f5:5f:21:35:f3:b7:b2:69:a7:0a:21:ac:22:f7:88:7f:
4f:6d:0f:91:03:c3:7b:f8:cf:38:47:86:cf:a3:14:b2:78:b0:
f2:36:52:f1:94:fc:7a:10:a8:56:28:e8:b1:e7:26:b9:59:de:
ac:ac:4e:b9:a8:11:77:82:79:47:cd:49:b6:c2:69:32:a5:a6:
26:32:59:f3:f1:08:d2:0b:df:8a:ba:5c:79:91:07:5a:08:26:
e9:9d:53:35:f2:b4:cf:30:93:81:b3:01:08:c7:9d:1b:5a:f3:
64:0c:62:e5:73:50:96:42:87:a1:6e:04:de:5f:75:9e:aa:21:
85:29:fe:a5:d0:fb:af:45:f3:33:ac:f8:31:e3:8c:d6:d6:21:
b8:21:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:05:59 2025 by rpki-client