Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NLoJR1RsYKebmGP4jo-d5--xHCU.roa
File: NLoJR1RsYKebmGP4jo-d5--xHCU.roa (raw, json)
Hash identifier: NQYWj8ogqXO7BnDSZcwygHq5nu3OxyLKNYidaEaCxRk=
Subject key identifier: 34:BA:09:47:54:6C:60:A7:9B:98:63:F8:8E:8F:9D:E7:EF:B1:1C:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 74F92205
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NLoJR1RsYKebmGP4jo-d5--xHCU.roa
Signing time: Wed 23 Mar 2022 07:10:18 +0000
ROA not before: Wed 23 Mar 2022 07:10:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1962484229 (0x74f92205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 07:10:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34ba0947546c60a79b9863f88e8f9de7efb11c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:02:79:fd:0c:41:97:d8:5f:54:d7:3b:61:eb:
5c:be:57:dc:74:4f:bc:75:d3:91:28:af:1e:2e:56:
65:5c:be:c0:96:72:39:6a:e4:54:6e:94:ed:c1:3d:
7e:7f:b3:06:26:6d:33:22:29:46:0b:ac:75:b5:67:
c1:bb:6c:9f:cf:84:fc:74:bf:57:ae:2b:1c:50:66:
c3:ac:a2:65:67:e4:ca:06:50:8e:c6:76:d9:e2:e4:
00:d4:4e:9c:0a:de:3c:de:60:d7:99:a7:42:79:00:
c2:7d:85:bb:27:e5:b4:eb:f8:08:4e:2b:2d:65:32:
b0:27:b6:de:5d:da:82:4d:a8:dc:39:bd:9d:ad:b0:
d7:03:e4:e6:28:95:89:cc:0a:c0:52:42:b1:80:7f:
d9:fd:12:53:5d:90:e4:ce:c7:01:ac:b6:39:b4:38:
d6:85:e1:da:7a:88:df:d3:48:e9:2e:2b:d9:32:0f:
e6:4e:eb:ea:90:2d:91:44:bf:54:13:b2:31:54:f0:
7a:b9:0d:66:89:6c:b0:92:20:ee:2d:91:7c:17:e9:
36:b0:81:9e:56:6b:d4:6d:71:8a:f2:06:a2:b4:30:
e0:50:ca:f2:41:80:e6:00:bf:88:b1:43:24:cb:bd:
55:b9:f7:f5:dd:17:e8:e8:1d:90:fb:12:80:a9:29:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BA:09:47:54:6C:60:A7:9B:98:63:F8:8E:8F:9D:E7:EF:B1:1C:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NLoJR1RsYKebmGP4jo-d5--xHCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:5c:1b:f1:16:cd:f9:eb:47:f0:47:d9:e7:a7:71:29:d5:6d:
37:4a:6b:15:21:79:16:39:eb:af:4e:76:77:9e:41:6c:6c:9c:
f6:6c:f2:7b:01:b7:f7:39:61:b6:79:14:87:5e:e2:61:fc:00:
6b:84:bd:f6:82:a2:d4:92:0d:e3:6b:56:2f:a8:99:3d:dd:be:
bf:86:59:56:10:06:57:62:ea:4f:8a:86:d9:ca:6e:b1:4c:67:
54:0e:74:b2:46:6f:bc:8d:d6:ff:08:b7:88:82:c1:86:6c:db:
27:bf:73:55:bb:a3:1c:c9:be:0e:a9:51:0f:28:af:17:ee:ba:
d9:09:6d:20:7f:b7:da:b7:85:6f:a4:71:15:19:df:e8:73:30:
28:36:75:be:19:fc:21:4d:da:31:a4:4f:a4:19:fd:d2:b2:28:
85:de:99:1a:5d:05:17:3f:c0:35:cd:e0:61:c2:68:97:17:47:
39:ed:3c:fc:a3:d3:11:5a:41:90:2c:f3:27:1d:8e:c8:1b:0a:
76:d9:f4:db:2b:dd:7b:8c:86:f8:f5:d5:99:c1:1c:93:88:de:
7e:5d:ac:d4:a8:4d:56:4a:bf:f7:1d:6e:35:95:67:2f:b9:26:
ef:e4:30:67:53:5c:57:64:54:65:b0:18:69:80:45:e9:ac:88:
d4:6a:82:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:10:30 2025 by rpki-client