Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NEBEVX4UciN-uW_5tOq3MnFKKSc.roa
File: NEBEVX4UciN-uW_5tOq3MnFKKSc.roa (raw, json)
Hash identifier: Ad/d/HGd0/3bV2gcVDRG1YDFVqBf+7dHZ4OF34EdJL8=
Subject key identifier: 34:40:44:55:7E:14:72:23:7E:B9:6F:F9:B4:EA:B7:32:71:4A:29:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184639335F09B4DD9E412BDD8EB16EC2FA3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NEBEVX4UciN-uW_5tOq3MnFKKSc.roa
Signing time: Thu 10 Nov 2022 22:05:02 +0000
ROA not before: Thu 10 Nov 2022 22:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:6392:b894/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:63:93:35:f0:9b:4d:d9:e4:12:bd:d8:eb:16:ec:2f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 10 22:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=344044557e1472237eb96ff9b4eab732714a2927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3e:aa:bb:c7:e6:03:fc:d6:d8:3d:68:64:05:
f5:70:4e:53:67:f3:a0:0f:5d:27:e2:9d:27:9e:d5:
2e:e4:40:d2:d0:0f:00:7e:da:6a:a2:91:07:ad:f1:
15:f7:d7:a7:97:db:bb:96:8d:05:b4:21:cc:ca:2c:
3d:9a:c5:c2:97:5b:f5:18:8a:48:be:51:e0:0e:e2:
0d:22:9f:5c:93:e3:d4:1b:bc:99:13:8a:b8:ca:3a:
a9:64:91:51:7a:ce:89:bc:37:41:eb:d2:1b:da:b5:
26:e2:92:da:7f:75:d0:d9:e1:0e:12:57:af:ad:86:
5f:4d:b2:a2:87:1e:38:84:57:b7:85:19:00:2c:21:
b0:0e:3b:98:16:0a:82:a4:82:e7:73:66:85:8a:93:
f4:33:fd:b3:07:6f:94:70:c9:51:38:f4:68:67:04:
47:24:b4:17:72:fc:ce:45:bc:de:1f:07:d7:16:93:
6c:29:fd:7d:da:29:43:c5:dc:33:25:cb:2e:d8:f7:
7a:a8:91:f0:8b:69:72:71:cf:1f:2c:b7:cd:5c:c8:
4a:03:dd:db:91:af:bb:0d:c2:de:fb:51:67:b5:e6:
1b:52:bb:20:59:c5:92:46:d9:18:77:ec:4f:42:d8:
aa:61:99:56:32:88:31:e7:df:94:34:82:bb:40:5c:
07:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:40:44:55:7E:14:72:23:7E:B9:6F:F9:B4:EA:B7:32:71:4A:29:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NEBEVX4UciN-uW_5tOq3MnFKKSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:ed:b4:ac:6a:b1:62:08:e9:9a:6f:84:f5:ee:b7:35:c8:47:
11:6b:64:b7:0c:77:29:16:c8:6e:df:a5:e5:c1:9f:5b:ea:a0:
53:d0:77:bb:e1:ff:b7:b0:ec:a6:7b:91:e1:58:88:a3:2c:ff:
91:fa:3b:b5:c2:9c:92:f7:ea:da:74:6d:81:7e:03:eb:5b:20:
b7:ce:07:db:69:d7:b4:2d:cd:0c:67:ab:af:86:22:3a:aa:e0:
7b:6c:97:4b:55:45:2a:ae:f7:c3:27:61:82:42:77:4a:3c:ce:
ca:1f:53:be:e5:25:98:22:41:69:c2:67:99:e8:8f:b6:ce:cd:
50:2e:ee:a6:91:ca:2f:e6:e6:3f:41:de:53:fd:8c:84:d2:19:
6f:8a:b1:8f:46:8a:8d:2e:df:a3:00:75:e4:ac:94:0f:c9:18:
60:f3:16:d0:95:79:68:a8:bb:bd:c5:26:a5:d9:4b:cb:de:bf:
48:85:60:85:75:a2:3d:88:92:50:25:d4:7e:2d:ab:bb:06:fd:
db:0d:f4:8b:2e:7c:d9:f8:f1:eb:c8:d7:4f:98:e1:0a:2f:c0:
a7:db:79:25:18:a2:06:54:38:9e:9c:16:5a:c2:75:51:4b:fa:
ab:f4:da:b6:da:a5:89:a3:02:ae:b1:0b:77:cc:69:bb:cf:12:
91:37:2a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:07:14 2025 by rpki-client