Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NHsPua1MuODCP3G5RqeeISaxVRc.roa
File: NHsPua1MuODCP3G5RqeeISaxVRc.roa (raw, json)
Hash identifier: CPDB4yioof6hALuIVGDdBVDn2HtALm+30ypQYeYlLJ4=
Subject key identifier: 34:7B:0F:B9:AD:4C:B8:E0:C2:3F:71:B9:46:A7:9E:21:26:B1:55:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 79EC7C31
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NHsPua1MuODCP3G5RqeeISaxVRc.roa
Signing time: Sat 09 Apr 2022 19:13:42 +0000
ROA not before: Sat 09 Apr 2022 19:13:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2045541425 (0x79ec7c31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 19:13:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=347b0fb9ad4cb8e0c23f71b946a79e2126b15517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:99:25:9a:e7:b0:de:7c:9d:1a:05:4a:21:
53:6f:d0:89:d6:61:e5:d9:07:58:73:a2:a2:cd:2c:
c3:b2:15:c7:79:52:6f:68:09:2f:e1:76:ef:bf:03:
7c:b3:a1:ec:7d:10:bc:ae:11:78:07:d9:e8:bc:ee:
5c:dd:b1:5c:88:71:f2:a7:62:8d:12:c3:a7:a4:f8:
23:88:c7:83:aa:3a:ba:eb:2b:c8:cf:ef:bb:e5:fb:
06:95:89:a5:fa:1f:53:93:ef:79:5b:c9:99:dc:4a:
30:fd:99:de:29:da:08:44:05:23:4b:6c:bf:4a:c9:
d6:88:18:40:9d:30:cc:22:d3:4b:19:c0:ea:fa:e9:
09:86:f8:7f:66:85:e7:42:2e:39:40:84:7f:e9:4b:
87:e0:81:d5:38:06:ab:e7:18:d1:1b:aa:4a:34:f8:
6c:43:65:5b:94:4a:b5:fa:a5:26:5e:3d:98:98:68:
7c:6f:85:03:ec:90:2d:ee:f3:bc:df:b2:36:7b:83:
8d:8d:16:e9:86:c3:43:05:69:5d:4a:5b:be:d6:c2:
fe:2e:0e:0a:6b:66:52:04:0f:4e:db:38:96:24:fe:
66:6a:ee:8a:7c:60:7b:97:1e:b3:da:7a:e0:56:c1:
27:24:1d:42:16:37:c5:ec:59:6f:3a:e5:fa:d2:a2:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7B:0F:B9:AD:4C:B8:E0:C2:3F:71:B9:46:A7:9E:21:26:B1:55:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NHsPua1MuODCP3G5RqeeISaxVRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:03:aa:20:20:c6:66:0e:30:65:c8:c5:cc:53:e2:33:b9:2a:
01:2e:64:1d:6c:76:fb:f1:9a:e0:76:b0:57:da:5f:20:00:5d:
3d:ae:55:c4:44:a0:23:62:15:8a:32:eb:f9:ac:94:96:59:09:
c4:94:e5:04:f1:35:cb:6e:57:34:7b:cf:45:06:2e:3b:a2:50:
e1:e4:5b:3e:8a:0b:e0:89:c4:c8:62:1f:7d:33:38:e4:fc:13:
f3:c2:7f:52:af:55:dc:88:8c:8a:26:16:3e:4c:32:c4:6d:d2:
84:14:54:c4:81:14:0b:37:6f:06:bf:75:a2:aa:1f:1b:56:60:
9c:8a:74:02:c8:cb:ca:bf:b1:0b:4b:b5:50:a2:56:98:66:8a:
81:f6:ee:b5:9f:52:78:cd:2b:a2:be:55:34:d8:b7:3c:c9:23:
5d:cc:22:a9:2e:73:88:90:d3:62:00:a4:75:da:86:2a:b9:17:
02:82:ac:a3:50:95:2f:2d:17:63:3b:0b:c9:d6:58:db:25:29:
ba:10:b9:06:d1:c2:bc:e7:78:b0:2d:d3:ca:0f:fe:9e:d6:15:
9c:93:98:17:8e:7e:34:27:b8:56:91:52:da:2e:a2:b1:c7:e4:
06:a5:10:65:6e:49:ed:b9:02:4d:8e:54:7e:30:25:1b:7a:97:
df:c3:e7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:29 2025 by rpki-client