Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NGT9y-ZWvXZxhuRIxcsedb3QzdM.roa
File: NGT9y-ZWvXZxhuRIxcsedb3QzdM.roa (raw, json)
Hash identifier: haqPgDA7SODvrCMPjtGpPR4eZ2YKFIZ6b1mDPK537TE=
Subject key identifier: 34:64:FD:CB:E6:56:BD:76:71:86:E4:48:C5:CB:1E:75:BD:D0:CD:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1FEC6223CAF510142111927B36A0E62A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NGT9y-ZWvXZxhuRIxcsedb3QzdM.roa
Signing time: Wed 23 Aug 2023 01:04:59 +0000
ROA not before: Wed 23 Aug 2023 01:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:18a:1feb:b87f/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1f:ec:62:23:ca:f5:10:14:21:11:92:7b:36:a0:e6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 01:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3464fdcbe656bd767186e448c5cb1e75bdd0cdd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:05:80:6c:79:15:c9:6f:ba:b1:7b:35:f7:1b:
38:c2:21:e5:d3:8a:88:e9:50:39:87:07:a6:b4:bf:
a3:46:1e:2f:df:75:08:0d:33:e6:0f:e8:0c:62:4e:
90:c2:27:64:11:04:f9:47:cb:46:cf:6b:db:29:38:
e4:42:41:d1:cd:e5:3c:14:39:c6:7c:7c:cf:80:2a:
82:f5:39:94:1b:71:cb:ae:12:d8:04:cc:fa:2c:80:
6e:95:3f:70:51:6b:bf:4d:6a:d6:b9:4d:7e:31:6d:
10:3b:56:82:11:96:2c:fc:c4:76:68:43:38:ac:c0:
28:ef:56:06:b3:35:85:19:69:ca:56:ea:3d:d3:2b:
2e:69:f0:d8:a5:cc:ca:b0:80:2e:f0:0a:3c:97:6a:
b2:eb:c0:18:70:1b:31:7f:d0:a2:ee:ec:fb:63:39:
79:b8:bc:77:c7:6c:f6:9f:c5:4b:f3:c5:f6:f2:11:
c9:bd:9b:0a:e3:88:cb:05:15:2d:58:db:1a:e3:27:
bf:21:db:4f:a8:0a:00:3e:d7:cf:dd:26:38:a7:84:
2f:26:82:99:1c:4f:0c:aa:9a:35:26:55:1d:5e:3e:
dc:54:d8:88:df:94:ea:9c:23:89:7b:2c:0a:e3:ea:
0e:46:e4:db:38:99:53:98:5f:14:bd:5b:bc:71:d7:
93:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:64:FD:CB:E6:56:BD:76:71:86:E4:48:C5:CB:1E:75:BD:D0:CD:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NGT9y-ZWvXZxhuRIxcsedb3QzdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:9f:eb:92:25:33:a0:82:77:d8:a6:02:3c:5f:55:5e:3e:7f:
6e:75:2f:13:b7:08:50:5a:66:9d:1f:80:6b:ef:8b:4a:3f:57:
bf:22:f1:38:19:d7:02:0b:00:58:ad:f3:5b:a4:db:87:9d:7c:
02:af:3c:83:db:40:46:ec:65:1f:4c:b5:24:40:94:34:dc:b9:
69:a9:45:75:5f:b2:3e:e5:8e:0e:43:83:1e:03:dc:45:7a:c3:
f4:09:82:b3:f1:51:96:5a:4b:67:af:4f:2b:a5:0b:8e:bc:f7:
e8:83:7e:46:ed:cd:87:c9:ff:48:f2:dd:f2:c6:b7:a8:76:36:
02:2f:96:fc:29:bf:ea:08:cd:a3:fe:78:f6:10:f9:9a:fe:34:
08:47:3c:9c:ff:42:b3:86:9f:39:a9:7f:b1:e2:c4:41:28:af:
dd:82:59:78:dd:d7:45:3d:a3:ea:4f:23:9a:5b:2e:4e:ee:f3:
b5:5f:42:d2:1c:52:6b:d1:71:c3:bc:ef:3a:e2:b6:12:1e:a5:
93:dd:f8:26:13:c2:90:c0:ba:50:4e:70:0a:b4:b5:9e:9c:8b:
42:94:65:cc:65:d6:50:0b:4a:2d:75:e5:98:4d:8c:85:bf:50:
0d:57:cf:ee:53:70:14:18:b0:c2:3b:f8:47:41:ab:59:bc:58:
0b:72:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:15:11 2025 by rpki-client