Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NCRHko9pvIEV1vTC3sGED-jKrcE.roa
File: NCRHko9pvIEV1vTC3sGED-jKrcE.roa (raw, json)
Hash identifier: gQmJA8N76jOf+MByuMw14eSPGTUZCY6b4iU58HG05uQ=
Subject key identifier: 34:24:47:92:8F:69:BC:81:15:D6:F4:C2:DE:C1:84:0F:E8:CA:AD:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 881293BC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NCRHko9pvIEV1vTC3sGED-jKrcE.roa
Signing time: Sun 29 May 2022 03:10:13 +0000
ROA not before: Sun 29 May 2022 03:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2282918844 (0x881293bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 29 03:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=342447928f69bc8115d6f4c2dec1840fe8caadc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:50:32:e1:ce:12:2a:f6:52:45:30:57:38:
92:04:d0:f0:27:d0:8b:78:4d:8e:1b:62:42:94:00:
9f:da:8c:ff:fa:d4:9f:e6:b6:60:db:bb:5a:5f:55:
8b:40:82:7b:f8:d4:9d:65:fc:95:41:a3:03:1b:7f:
fd:49:b0:0c:89:92:a8:44:c9:79:49:ac:c7:8a:3c:
59:7e:41:17:82:ae:e4:92:ce:18:fd:bc:d0:01:23:
31:c5:4e:18:0b:2c:46:64:53:6e:bd:15:aa:97:23:
88:6f:2b:f5:d5:c2:ba:75:3a:50:cc:5b:ff:50:8a:
a2:e4:b8:73:41:37:c0:50:4d:15:77:d8:e3:92:76:
f8:05:3d:f1:be:36:40:1a:cb:c9:60:62:8d:e8:51:
44:d6:cd:d9:a5:a7:d1:62:79:95:4a:99:6d:d9:41:
81:d0:69:8a:9f:4a:be:9b:1e:9a:1a:44:34:25:67:
8c:3e:71:7d:3b:f2:b2:84:9a:66:b0:7f:c0:8e:4a:
34:37:fe:40:e7:81:88:ba:9a:3f:c9:e2:31:82:6f:
bc:e7:10:51:60:a2:1f:3b:11:2a:3f:db:c5:53:0f:
99:4d:bf:33:1f:10:08:10:99:ca:e1:fb:1a:f1:d4:
03:bf:ef:a9:29:f9:c6:69:08:16:2b:ad:6e:34:94:
2f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:24:47:92:8F:69:BC:81:15:D6:F4:C2:DE:C1:84:0F:E8:CA:AD:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NCRHko9pvIEV1vTC3sGED-jKrcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:6f:70:87:6c:7f:c1:3e:c8:74:2d:45:e8:6f:c0:0b:1b:7c:
02:36:57:57:fd:e8:80:8e:e4:c5:90:f2:d2:c4:c6:55:5a:07:
8c:b8:02:6f:47:ac:a9:d7:78:0f:11:17:43:77:1a:16:bd:e3:
57:c5:52:31:87:da:c9:15:8b:fd:b6:c7:90:d2:4b:2a:c1:3c:
39:e5:58:c1:0e:a8:8c:05:5d:97:f2:4a:b7:7a:87:c5:0c:86:
0f:0a:37:39:9a:99:1b:48:ca:a8:60:1d:47:fc:cb:f2:74:98:
df:be:25:25:30:e9:93:c2:4f:1f:4f:6e:46:4e:3f:2f:7d:4d:
2b:44:6a:d1:e6:ea:ca:88:9e:2d:21:63:a6:b2:bd:2d:86:92:
0e:3b:22:97:5d:f3:36:07:5a:16:cb:d3:36:e9:27:53:1c:f4:
55:2f:ef:45:2b:32:bc:0e:45:24:3c:29:ae:e5:42:07:99:86:
c9:14:64:97:90:cf:c9:2f:87:8b:72:64:27:fa:40:90:bd:a4:
12:d9:97:46:6a:b9:40:2b:24:de:01:ec:ac:e7:7c:28:f1:c6:
f5:22:1f:b9:c2:f4:56:53:1d:4a:bc:a6:c9:ed:d7:e2:ac:c9:
54:54:49:6c:7b:87:1e:a6:49:f5:7f:06:dd:64:ed:90:dc:25:
72:45:b3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:09 2025 by rpki-client