Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NBtrrn8MCbTjAVJ6oUemTVFQN1s.roa
File: NBtrrn8MCbTjAVJ6oUemTVFQN1s.roa (raw, json)
Hash identifier: iDrDIRZ8ry23gpw3UTf2K7Oa0gySvXZiviXxh6whVLM=
Subject key identifier: 34:1B:6B:AE:7F:0C:09:B4:E3:01:52:7A:A1:47:A6:4D:51:50:37:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018377FF5FC42A6C63645C5E0887D8D98FF9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NBtrrn8MCbTjAVJ6oUemTVFQN1s.roa
Signing time: Mon 26 Sep 2022 04:12:48 +0000
ROA not before: Mon 26 Sep 2022 04:12:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:77:ff:5f:c4:2a:6c:63:64:5c:5e:08:87:d8:d9:8f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 26 04:12:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=341b6bae7f0c09b4e301527aa147a64d5150375b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8a:e5:af:a3:c9:78:38:08:1d:40:3e:5b:50:
84:77:76:6c:35:ed:fb:c5:4c:2e:5a:e6:d9:2f:38:
26:7a:70:26:f2:25:b5:af:46:e1:f5:76:d8:45:b8:
fb:98:b2:1e:f6:30:5f:0d:42:ce:b2:66:5b:d3:e7:
7a:38:e9:30:30:3b:67:50:84:70:54:de:d3:25:30:
97:ea:e9:95:84:87:69:b8:18:09:cf:24:24:d0:bb:
2a:5e:97:31:d5:c5:80:80:24:7e:ae:00:4c:81:9a:
c3:5b:92:b5:23:96:e4:7d:48:b9:fb:83:32:39:9a:
12:4c:af:b1:8a:68:eb:cc:b6:66:2d:6c:74:83:da:
d7:28:61:d8:ea:92:85:b2:d7:35:55:b5:4d:2c:35:
f0:01:1f:82:81:56:ee:70:5e:88:93:6b:41:32:7b:
d0:86:d6:9b:96:c8:3f:a4:70:b4:e9:05:a0:70:af:
da:f5:d4:19:36:38:64:96:67:78:bd:a9:e6:77:0d:
cc:d8:1d:76:6b:1b:94:e4:f5:92:5d:70:60:b0:0e:
9f:4d:ec:04:c4:7d:ec:f2:9e:1b:4b:b8:b6:b8:8e:
56:29:a3:97:1f:64:04:46:0e:37:af:15:e2:37:af:
fe:ac:0d:ed:1c:8f:0a:8a:f9:1b:df:5e:ab:ad:8f:
38:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1B:6B:AE:7F:0C:09:B4:E3:01:52:7A:A1:47:A6:4D:51:50:37:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NBtrrn8MCbTjAVJ6oUemTVFQN1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:91:b7:e4:47:7c:46:f9:5f:25:7f:05:03:88:7b:5b:6e:11:
0a:a2:90:b9:75:a0:76:6f:47:85:d8:4b:14:b8:cc:2e:1a:a7:
eb:db:52:83:55:fb:2b:54:9b:7b:dc:84:91:9b:8a:e1:4e:db:
84:9b:91:43:5d:74:07:2f:22:61:ca:d8:cf:bd:f8:3f:b7:4b:
23:d2:86:e9:38:dd:c6:c1:e8:c4:ec:c1:a2:fa:bc:c9:c3:51:
9b:78:72:b7:f4:e9:2c:0a:61:3d:8d:a7:68:09:93:9e:3a:12:
3a:74:9d:76:94:7f:43:ab:26:0f:70:d4:b8:68:b8:c0:bb:c7:
97:24:09:92:ac:75:1f:0e:cf:0a:2c:a2:37:0a:db:51:b7:42:
37:c6:fc:45:04:26:ad:ab:43:f0:05:ba:d7:5a:70:4f:91:6c:
6b:3c:63:24:8b:df:99:46:48:64:b5:13:43:0e:da:ee:61:65:
07:f5:62:da:f0:da:8d:8c:0c:02:d8:68:0b:d3:b3:94:be:54:
02:e8:5d:c3:3f:7c:5c:e8:45:21:5a:4b:20:a4:e7:37:d0:07:
ea:c3:d6:40:74:12:28:a3:87:e0:0d:32:16:9b:b8:3b:8d:21:
c2:b6:9b:a2:79:3a:3e:86:7b:40:38:ff:df:ca:80:10:8b:f9:
e2:16:bc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:39 2025 by rpki-client