Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NNW-0C0ivLsxaHMzvLmNsByLdS8.roa
File: NNW-0C0ivLsxaHMzvLmNsByLdS8.roa (raw, json)
Hash identifier: CADVT46QF2bRstwr4A1Vli72QHzl9t9Q/KwMqdJdNfs=
Subject key identifier: 34:D5:BE:D0:2D:22:BC:BB:31:68:73:33:BC:B9:8D:B0:1C:8B:75:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A309AF48A5BACE3E8D796D2C0152CC0C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NNW-0C0ivLsxaHMzvLmNsByLdS8.roa
Signing time: Sat 29 Jul 2023 19:04:28 +0000
ROA not before: Sat 29 Jul 2023 19:04:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:a309:71f8/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a3:09:af:48:a5:ba:ce:3e:8d:79:6d:2c:01:52:cc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 19:04:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34d5bed02d22bcbb31687333bcb98db01c8b752f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d2:ee:5b:d8:3d:cc:64:7f:1d:2a:63:c4:b2:
71:15:6a:4b:ac:74:16:fa:29:b9:10:d4:60:cd:26:
73:d0:2a:32:92:fa:e5:86:c2:49:2a:59:91:06:c3:
14:bf:55:6e:2c:82:9f:d0:f0:50:ac:02:cd:c8:56:
a1:76:7a:71:68:ef:8d:32:33:e7:bf:4f:aa:b5:5d:
27:e0:ea:89:d2:9f:3c:a8:36:e6:e9:b3:9b:83:31:
53:c7:3d:a8:10:32:cc:c9:6f:85:17:a6:73:e0:df:
cc:3c:b1:94:66:1d:01:8b:09:8e:a1:97:e5:1c:55:
4c:cb:f1:93:a9:c4:f7:47:60:10:cc:08:38:27:ea:
5d:f6:f6:f2:72:bb:d5:91:e6:5f:1a:69:ad:ae:ae:
0b:92:a8:b6:32:7e:03:7c:8e:7d:2e:35:e7:53:a5:
ba:3a:2b:03:f8:92:56:7d:66:44:ed:a4:c7:b8:14:
d6:26:eb:e5:ed:73:a5:cc:14:00:c7:c7:e6:35:b0:
2d:c2:82:c9:7f:4e:3e:1f:25:92:ea:96:44:2f:a4:
99:b4:1e:40:30:76:d7:d2:22:33:a4:c6:56:9f:4c:
58:ba:3e:47:5f:e8:85:dc:13:a9:de:ce:35:5f:2b:
2c:bd:31:b9:7a:92:0b:cb:3a:24:04:f9:9b:32:81:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D5:BE:D0:2D:22:BC:BB:31:68:73:33:BC:B9:8D:B0:1C:8B:75:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NNW-0C0ivLsxaHMzvLmNsByLdS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:3d:a3:a2:66:64:8a:09:27:9d:21:3b:60:9d:cd:5d:55:09:
26:da:00:d4:3c:01:b9:3f:ad:21:49:84:62:33:7f:62:82:3c:
d8:06:24:3a:96:39:9e:ac:30:95:1a:a7:a5:8d:06:1a:2d:3a:
d4:b3:65:ab:71:6a:ed:80:6c:e4:8a:a3:ab:dc:92:33:76:f8:
93:5b:1f:ed:5d:a9:df:42:10:c7:71:0a:24:b3:1c:d4:ac:24:
7b:76:50:9b:db:91:c0:78:89:23:66:a6:61:f7:64:09:89:27:
65:6a:15:7c:48:10:73:54:f6:1c:50:3a:20:3c:96:5a:4c:d0:
6b:e7:6f:f8:b8:a8:e0:d1:57:ca:0b:5e:29:0b:dc:60:85:84:
e0:f6:43:8e:30:94:6a:87:13:f7:9d:96:72:bd:7a:4e:33:06:
5b:e7:bc:35:02:7e:92:2b:9e:c5:6b:fc:2c:7d:0c:20:91:55:
4a:32:f6:74:33:6e:34:f3:61:f9:5b:e0:26:ba:d8:de:c4:80:
fe:fa:c8:e7:da:03:d5:0a:30:3a:90:6f:1a:93:b2:20:72:e4:
eb:50:21:38:70:ff:ea:10:01:78:23:c6:1c:62:42:b0:ea:de:
38:44:08:20:92:58:b3:06:61:1b:7a:88:e8:2e:6b:d3:cf:d3:
70:ae:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:38:06 2025 by rpki-client