Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NMzUA4ci7cKk90hLLEBZ3Ymjskk.roa
File: NMzUA4ci7cKk90hLLEBZ3Ymjskk.roa (raw, json)
Hash identifier: syLcdwPUz7li6GIRI0jo3u5jEanG4P3BRSv7BjIlyIs=
Subject key identifier: 34:CC:D4:03:87:22:ED:C2:A4:F7:48:4B:2C:40:59:DD:89:A3:B2:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8C863590
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NMzUA4ci7cKk90hLLEBZ3Ymjskk.roa
Signing time: Tue 14 Jun 2022 01:10:44 +0000
ROA not before: Tue 14 Jun 2022 01:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2357605776 (0x8c863590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 01:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34ccd4038722edc2a4f7484b2c4059dd89a3b249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:f3:22:0a:8b:6b:ec:69:a9:23:86:3a:e1:
9a:38:41:47:57:2a:04:4c:b0:51:5d:dd:d6:b5:e6:
e3:9b:28:65:2a:4c:ed:f9:6e:87:54:58:80:9e:35:
c6:10:e5:8a:42:49:26:b1:24:81:f5:e5:22:b8:81:
1f:d8:f8:f1:96:ed:53:d1:44:15:4c:3d:fb:38:d6:
21:eb:5e:68:5a:52:06:7c:a7:50:a8:63:56:3c:2b:
72:a3:c5:b5:b5:67:b9:9a:95:3e:90:b3:28:76:65:
99:1d:59:53:62:60:02:2c:3e:b2:d5:c2:90:ea:81:
ba:be:8f:94:5a:f2:13:cb:08:a9:cc:7d:9f:f4:87:
a2:a7:71:da:1e:76:1a:41:85:b2:21:a9:c0:a3:ce:
4a:27:53:d3:ae:c8:7b:fc:46:01:90:bf:5b:86:1f:
1f:36:a2:31:11:7b:89:9b:a1:02:6c:ca:fa:6d:6a:
3a:78:7e:dd:b0:c4:bb:85:7c:46:f2:a7:06:da:86:
14:54:88:99:a2:68:91:a2:25:f5:00:94:23:b2:e3:
9a:8c:e9:73:45:86:e1:af:67:01:0d:d1:51:35:0e:
7a:27:eb:02:6d:20:5a:ed:3c:58:c2:7e:96:62:d9:
fd:59:50:34:da:40:f5:af:92:dd:f1:bb:ec:c9:3c:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CC:D4:03:87:22:ED:C2:A4:F7:48:4B:2C:40:59:DD:89:A3:B2:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NMzUA4ci7cKk90hLLEBZ3Ymjskk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:cc:3b:f3:38:c7:dd:b5:16:c8:8e:8f:32:ea:1c:88:9c:ed:
dc:2c:e9:a8:42:8a:72:3e:e2:0f:1c:3f:2f:40:eb:bd:28:7a:
f9:47:5a:ea:a9:e8:66:2e:66:be:36:e8:67:0a:f6:fd:10:b5:
c1:b1:e6:5b:08:52:07:c5:5e:9f:1c:d1:c4:08:59:2c:95:55:
fd:53:5a:dc:48:ef:df:79:59:d3:ea:e4:1d:49:1d:84:7c:3c:
bf:d7:e6:b1:4b:cd:8a:64:7b:85:a4:75:47:d2:4d:ca:2a:1c:
62:8a:9e:0f:20:19:3c:b4:95:81:11:de:0c:6f:06:b4:09:42:
0d:a6:8f:fe:cf:e3:28:2b:46:34:2c:22:8f:07:c5:f3:7a:ad:
96:f0:5e:4d:f6:ae:f7:95:9e:66:81:09:b0:45:ce:c6:6c:20:
d4:53:c2:e9:8f:46:ae:55:69:88:f5:e8:a0:86:a0:5b:03:d4:
d2:0b:48:0c:26:38:75:4a:b5:f9:05:fa:4c:58:17:4f:4e:27:
65:c3:0e:38:30:1a:0d:62:8b:a0:41:df:2c:81:2f:0b:45:88:
86:0a:2b:71:a5:bd:76:17:2b:eb:f7:54:2f:2b:0f:3e:62:d5:
e7:6c:b2:0c:c7:d2:d4:25:c7:e5:59:d7:4b:f7:65:4b:57:5c:
59:02:ef:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:43:28 2025 by rpki-client