Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NA5kx31SCSlAazlNduUUdf6WI9I.roa
File: NA5kx31SCSlAazlNduUUdf6WI9I.roa (raw, json)
Hash identifier: DiyvsP9TdY+6+GSdHpoilFyX6kzJRviQAOTrbZ7LisA=
Subject key identifier: 34:0E:64:C7:7D:52:09:29:40:6B:39:4D:76:E5:14:75:FE:96:23:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01830C800F685BF9D544E5C3B34F1F1E8DD7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NA5kx31SCSlAazlNduUUdf6WI9I.roa
Signing time: Mon 05 Sep 2022 07:14:22 +0000
ROA not before: Mon 05 Sep 2022 07:14:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0c:80:0f:68:5b:f9:d5:44:e5:c3:b3:4f:1f:1e:8d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 5 07:14:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=340e64c77d520929406b394d76e51475fe9623d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:f3:6e:b6:d1:17:55:ca:6b:4d:7d:ec:06:
76:8f:35:63:20:ba:10:70:1b:d5:70:13:fa:69:97:
2f:33:a1:7b:81:6b:fe:82:b3:28:6f:cf:6d:8f:1a:
c9:ef:16:2d:aa:5d:b9:0d:a8:40:8e:39:12:35:39:
20:55:ec:3e:01:28:75:a1:ed:c9:53:ee:d3:9b:be:
88:d3:79:66:0a:29:6b:99:39:6a:78:ed:1b:9b:56:
02:b5:92:35:16:12:72:02:9f:cf:a8:16:d3:67:ab:
08:41:e3:87:76:66:8f:5d:d3:8b:95:2b:c4:96:4a:
bd:ed:d2:93:cc:7a:81:30:6b:9b:b6:ab:30:6c:a8:
0f:6d:f9:33:96:3d:52:70:42:c3:03:b8:d6:37:17:
0f:6e:c8:eb:e4:bc:8f:55:94:16:ff:80:81:ad:d2:
07:9b:34:91:f0:23:5f:5a:c6:3d:f2:2f:66:e9:d0:
1d:ef:fe:5c:cb:d6:93:51:63:d1:77:80:ab:c3:8d:
a0:80:5a:cb:45:3a:fa:28:ca:cd:84:2f:54:d0:79:
dc:3c:d6:f0:a1:cc:27:0f:b7:96:d5:a2:ab:5a:73:
74:38:bc:41:9d:92:d5:6a:aa:4b:3a:04:46:27:27:
36:b7:01:37:3d:68:21:4d:35:78:b5:74:72:46:e2:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0E:64:C7:7D:52:09:29:40:6B:39:4D:76:E5:14:75:FE:96:23:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NA5kx31SCSlAazlNduUUdf6WI9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:3a:7c:53:c8:5c:1e:f2:60:02:75:52:93:79:e7:13:dc:81:
56:81:67:93:b2:6f:f3:14:87:bd:cc:05:31:72:34:40:df:02:
66:4d:00:e0:89:25:f1:f0:68:3f:50:7a:79:2a:03:f4:6d:32:
38:04:1a:e8:16:2c:65:d1:f9:6b:23:e5:e5:38:f6:ef:cd:1f:
a9:e5:d5:b5:9f:81:e8:be:a9:1b:0c:ec:8e:26:c9:e6:c1:fb:
78:d0:2d:2d:71:05:31:0b:74:10:12:e0:d3:da:66:21:7f:fd:
f2:77:55:44:3c:fb:bd:ae:0a:eb:5b:1e:f0:d8:1f:5b:b4:8e:
2d:76:86:bd:4e:95:ac:f3:17:90:77:71:9b:a8:e3:68:cd:c6:
3c:8d:c0:c4:cb:27:a5:04:01:6f:6d:45:e6:6c:2a:e9:e7:47:
5e:1b:86:00:b0:30:14:c3:2f:02:37:5e:0d:e7:e6:69:e4:d5:
29:bc:77:69:cc:8e:c2:93:e3:0d:6a:40:4a:fd:7c:14:5d:a2:
3a:04:6c:01:2c:36:9b:98:bb:f3:a7:76:07:ce:e0:a2:5e:65:
47:8c:77:68:72:2a:c3:c9:45:23:21:82:fd:cf:67:a8:3a:29:
88:5a:e9:09:70:f7:6b:0d:52:83:e6:c8:96:25:32:0c:45:38:
ed:86:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:06 2025 by rpki-client