Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NJ8CQv97Fx-STfswR-JRLmonuGE.roa
File: NJ8CQv97Fx-STfswR-JRLmonuGE.roa (raw, json)
Hash identifier: 5MQirDALzcd5IVOz7rbyGcx+DpDHhHstCNWq1Sdi/qw=
Subject key identifier: 34:9F:02:42:FF:7B:17:1F:92:4D:FB:30:47:E2:51:2E:6A:27:B8:61
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BBC0702375653ACEA9A6AEFF86C372AF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NJ8CQv97Fx-STfswR-JRLmonuGE.roa
Signing time: Thu 03 Aug 2023 14:14:58 +0000
ROA not before: Thu 03 Aug 2023 14:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:c0:70:23:75:65:3a:ce:a9:a6:ae:ff:86:c3:72:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 14:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=349f0242ff7b171f924dfb3047e2512e6a27b861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f5:03:38:14:74:83:fd:ea:d8:8e:c5:92:09:
3b:c1:39:ab:7e:d0:ac:fd:1a:d1:cf:7c:50:85:d6:
1e:7f:d9:2e:2f:69:7c:4f:7c:88:77:17:07:b4:66:
51:e5:b5:2f:68:b6:45:c2:4e:6d:6b:64:17:5f:15:
25:76:91:6a:04:36:39:ac:e3:d1:e1:8c:02:fa:1f:
e1:17:4e:6a:e1:3e:64:77:c6:9a:7d:95:4c:97:98:
c0:01:f0:0e:7e:2b:d5:2f:11:cc:82:8f:df:a5:a5:
ef:49:59:12:93:34:38:b9:d3:3c:96:76:84:22:f3:
3b:0a:ec:ed:2f:5b:a7:36:d7:3c:38:e6:25:f6:b2:
3f:35:05:4c:15:c5:20:d8:ff:37:e9:8b:09:62:2d:
3f:31:9a:66:bd:49:a1:87:2d:35:29:ba:87:3f:bd:
4e:7a:90:aa:e1:83:44:84:b1:8e:b9:d4:1b:72:8c:
54:01:18:28:e6:a3:61:0a:b3:ac:fd:82:82:dc:48:
de:37:b6:fc:28:75:66:df:b9:94:a2:57:31:75:07:
86:41:7c:a5:74:ee:ac:7b:c8:96:8d:ba:5e:43:ab:
d0:17:e3:25:47:1f:79:3a:8a:d4:bc:2b:79:83:30:
fa:98:c6:0c:7a:df:64:57:df:86:5e:d6:aa:34:b4:
26:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9F:02:42:FF:7B:17:1F:92:4D:FB:30:47:E2:51:2E:6A:27:B8:61
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NJ8CQv97Fx-STfswR-JRLmonuGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:4e:e6:46:8e:1e:94:e4:3a:5a:cf:b0:6e:93:c1:ad:17:b0:
31:f5:72:98:eb:1a:8b:20:d1:6e:29:80:97:88:8a:ea:43:25:
15:c5:c7:56:34:05:38:12:1c:91:bd:28:89:86:2b:79:77:51:
dc:21:2a:bd:c2:0e:c8:67:e0:ef:c2:05:e3:45:82:38:a0:90:
d4:60:63:fa:4f:fc:d6:a1:7d:3a:e4:f9:ac:24:2d:11:4b:f1:
9b:59:b5:5c:e9:22:46:1c:d0:47:7b:8b:a5:5b:34:62:06:2c:
a9:53:ab:8f:1c:b6:f3:3f:4c:ce:d7:0b:98:0c:14:4d:55:8f:
f3:18:b7:02:a8:43:6f:ad:9b:a4:5a:95:bd:b6:cc:fc:5d:eb:
56:39:40:7a:bb:7a:72:9e:33:66:9d:4c:10:a5:ca:f2:05:ea:
df:6d:10:f0:54:75:0c:6c:62:aa:54:90:5c:51:c9:f8:0f:d4:
96:e1:09:71:69:56:6d:2c:bd:2a:76:0f:ae:96:56:34:44:2e:
c9:12:08:70:e8:9e:04:39:71:cb:f8:f6:bf:05:98:ff:b2:ac:
f3:72:6c:5f:ab:b7:64:42:31:27:a7:94:64:7b:49:6b:0d:42:
d5:bf:d5:6d:69:b4:de:ce:53:30:3b:55:8c:64:47:64:d8:9f:
37:59:82:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:19 2025 by rpki-client