Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NHqL3TuiK1pgMrcc_DSJStyXEz0.roa
File: NHqL3TuiK1pgMrcc_DSJStyXEz0.roa (raw, json)
Hash identifier: mA4n7zJ0RrBAEHbze012iaNKC/Fuy9iFi0LEPxouuxY=
Subject key identifier: 34:7A:8B:DD:3B:A2:2B:5A:60:32:B7:1C:FC:34:89:4A:DC:97:13:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A183B792C54B185D4E834F7EB7A93A480
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NHqL3TuiK1pgMrcc_DSJStyXEz0.roa
Signing time: Mon 21 Aug 2023 13:14:25 +0000
ROA not before: Mon 21 Aug 2023 13:14:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:3b:79:2c:54:b1:85:d4:e8:34:f7:eb:7a:93:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 13:14:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=347a8bdd3ba22b5a6032b71cfc34894adc97133d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:32:28:a6:9e:7d:91:ee:e3:4e:08:69:aa:
3a:71:16:95:24:af:85:94:8b:f0:ba:5d:f9:d5:a4:
6d:9f:47:ef:f9:77:6b:7d:69:da:83:c2:74:d0:43:
2e:df:95:69:b8:95:82:9d:8c:ae:fa:96:2a:ca:1a:
ea:b3:e2:3f:03:ea:1d:45:eb:f0:ce:dc:3a:cc:e3:
0e:92:4a:6e:5d:94:03:f2:4c:7c:d5:90:c8:b1:7f:
4b:c4:c7:d6:c2:c2:b7:4d:8a:97:74:f2:af:45:fc:
ac:34:78:77:01:da:1b:81:6c:89:68:2f:75:8c:bd:
fb:15:b0:ea:df:12:e7:58:91:80:a2:75:2e:15:18:
34:4c:d3:71:d1:c8:a0:e7:5e:96:59:b7:9c:65:77:
65:4d:44:21:1c:d2:ca:1a:c1:42:bb:5e:04:e9:ed:
1a:50:02:35:cb:b3:a2:79:48:db:f1:ba:0b:3d:c5:
e1:69:f2:9d:9b:29:46:b1:6b:2e:c7:36:6f:97:7b:
73:52:88:da:f3:16:b8:b9:80:34:48:88:3a:10:c8:
87:8f:9b:83:77:4d:5d:75:2d:27:16:e7:5d:84:e9:
ca:f0:9a:bc:d4:d7:6e:58:9e:18:8a:ac:3e:a4:24:
5b:e2:b2:b1:ab:88:d8:6b:f7:f5:37:83:4b:7d:c0:
b2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7A:8B:DD:3B:A2:2B:5A:60:32:B7:1C:FC:34:89:4A:DC:97:13:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NHqL3TuiK1pgMrcc_DSJStyXEz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:88:97:43:39:d0:d9:52:40:2a:c0:37:a2:0a:51:79:05:bd:
b0:0a:21:02:e4:45:2b:41:64:ca:d7:0d:89:20:cf:e4:80:8b:
ee:c0:f1:57:76:52:fd:8a:40:13:5a:78:bb:3e:b1:e0:f4:d7:
fb:da:34:60:3f:7c:3a:d5:61:ec:5e:1a:bb:86:d8:48:43:de:
2d:a5:24:7f:b5:58:1f:ac:0b:af:54:74:d2:fe:b9:70:e8:88:
ba:24:12:fb:3d:f6:a4:df:c8:9a:f9:71:91:13:cb:81:50:d1:
72:f3:d4:42:d7:22:f7:b0:d1:bf:bf:58:f3:e9:60:e8:d0:3f:
c3:e8:b1:db:bb:5f:cd:2c:51:9d:09:11:bd:61:0b:a7:f6:a8:
20:69:77:5b:15:82:91:ad:b3:59:b7:55:31:dd:ae:63:e8:00:
e9:ee:c5:2e:74:2f:b1:49:dd:0e:d7:10:9a:d8:b4:b7:a8:f5:
87:6d:ac:71:e8:ad:ec:0c:7a:d7:ff:1c:58:34:c4:cb:c9:58:
db:d6:02:8b:92:29:86:bc:f2:f2:e2:a2:25:76:ec:69:c1:78:
2f:81:e4:a0:d1:f9:15:9a:c4:55:07:bf:d8:00:3b:02:82:5f:
d0:09:b0:81:fb:45:c4:38:df:f9:26:a5:3b:83:88:e6:e3:3e:
53:92:48:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:59 2025 by rpki-client