Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NEVwLzRZ2ZGtjnD0jL-Eq9azYXw.roa
File: NEVwLzRZ2ZGtjnD0jL-Eq9azYXw.roa (raw, json)
Hash identifier: 6WS5+BfplJF8QR6QT4t74qyPqn+nu8/gf/VEUNS9UMc=
Subject key identifier: 34:45:70:2F:34:59:D9:91:AD:8E:70:F4:8C:BF:84:AB:D6:B3:61:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BC627D0B9A134EF12959A26A1E1B9DE8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NEVwLzRZ2ZGtjnD0jL-Eq9azYXw.roa
Signing time: Thu 03 Aug 2023 17:11:58 +0000
ROA not before: Thu 03 Aug 2023 17:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bc:62:7d:0b:9a:13:4e:f1:29:59:a2:6a:1e:1b:9d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 17:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3445702f3459d991ad8e70f48cbf84abd6b3617c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:d7:ea:69:42:0d:ec:a8:99:b6:bd:7d:4f:
2b:c9:77:0c:52:22:4e:e2:54:60:49:00:50:4f:37:
e1:17:1f:e3:e6:aa:9a:40:c8:b5:51:d1:52:4e:01:
46:2b:ba:9a:c4:df:56:1e:61:b1:8b:d7:a1:c1:9c:
b3:69:eb:67:fb:6f:01:b3:fa:ae:fd:a0:46:33:11:
6d:19:48:44:fa:a7:6e:11:fb:36:55:a7:0d:9b:39:
40:40:e6:f8:d8:23:5b:77:56:71:45:cc:55:c1:a9:
46:c8:f8:86:a2:46:c8:0a:9f:f2:67:1a:4d:4c:c1:
76:67:54:d5:f6:1d:d5:5d:4f:61:6c:44:50:ba:a3:
2a:f2:8e:24:f9:8a:a3:22:7e:10:83:0b:86:30:65:
12:fe:e3:ae:ca:dd:83:7c:90:4b:31:4e:b7:e0:3b:
41:1d:df:a6:f4:4c:8a:72:77:1f:45:68:a7:a5:98:
d5:0a:c9:3e:60:33:a4:50:e8:5f:7f:8c:a5:8c:20:
89:6e:17:d4:1d:b4:d8:ea:e6:37:26:76:36:e7:b5:
fd:a8:7f:b8:b6:d3:0c:92:fb:9a:0e:f0:d6:cb:94:
12:66:27:28:14:f2:24:f6:21:80:44:af:ab:89:81:
cd:72:6f:ca:60:c8:b6:27:06:8b:89:a6:2d:25:99:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:45:70:2F:34:59:D9:91:AD:8E:70:F4:8C:BF:84:AB:D6:B3:61:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NEVwLzRZ2ZGtjnD0jL-Eq9azYXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:ad:b0:08:bf:21:b8:6c:f7:a7:26:a1:3d:ea:48:34:38:65:
19:5d:d5:07:74:10:b4:a7:5d:4a:c8:79:9d:e3:6f:7f:ba:ac:
ca:fc:fa:31:a9:e2:f4:41:e4:0d:bb:1c:45:7d:a1:5b:82:a9:
19:a5:22:e3:f7:94:db:5c:d7:25:0d:f7:49:de:f9:9f:25:97:
88:55:1f:11:42:bd:e4:54:f8:3d:3e:48:7d:15:8e:a4:e0:c0:
0d:97:e0:6c:57:3c:dd:b9:8c:41:b6:a6:b9:de:c4:3b:56:dd:
60:0e:ea:d1:41:fe:5a:c9:2b:b9:07:cc:c6:2f:c0:6f:20:02:
00:d3:f0:6e:b0:b1:7b:33:7b:5e:52:0c:0e:81:b1:55:66:c1:
35:67:88:3a:fe:9a:3d:b1:52:55:81:28:e3:93:49:83:86:16:
d2:99:85:50:da:37:a9:aa:e5:80:c8:03:74:e2:84:a6:2c:af:
80:e4:bd:10:05:ab:69:56:20:24:a7:4e:b7:15:e2:14:f8:f4:
19:7a:61:88:33:cd:fb:23:95:b5:c6:bb:57:03:ae:ca:4e:c2:
2e:00:2d:bd:90:25:0a:20:a0:54:71:e6:cd:38:59:93:9c:72:
fa:db:d4:ab:bd:fb:25:e5:25:1f:23:89:ff:c6:b5:f0:c4:f4:
75:2e:0d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:02:19 2025 by rpki-client