Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NOZ-g1xrAkYE4n3p_vXtSin04Hc.roa
File: NOZ-g1xrAkYE4n3p_vXtSin04Hc.roa (raw, json)
Hash identifier: 6DkcT23oRv5lcoCsxA2RkmHLOgsWa34vrin+4XwZi8I=
Subject key identifier: 34:E6:7E:83:5C:6B:02:46:04:E2:7D:E9:FE:F5:ED:4A:29:F4:E0:77
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018528FF90F06D388ED4DB4F79140B4C2608
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NOZ-g1xrAkYE4n3p_vXtSin04Hc.roa
Signing time: Mon 19 Dec 2022 06:08:35 +0000
ROA not before: Mon 19 Dec 2022 06:08:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:28:ff:90:f0:6d:38:8e:d4:db:4f:79:14:0b:4c:26:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 06:08:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34e67e835c6b024604e27de9fef5ed4a29f4e077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:88:ab:43:9f:80:13:07:48:dd:c4:14:d4:ee:
96:6d:e5:ca:20:a0:69:9a:4b:5a:4b:09:57:6d:72:
0f:ec:7c:7d:14:6d:0f:ec:3c:49:b4:3d:ce:f7:ee:
5e:cf:5e:9d:5a:15:b4:1f:06:ab:34:25:46:8f:e8:
2f:df:ad:20:b9:af:c8:e9:46:c7:98:31:c7:47:d9:
58:9e:84:05:c4:bb:c5:f1:08:2b:5d:55:5d:68:4f:
fb:85:77:48:c1:47:a2:44:25:a0:6a:b8:0d:b8:88:
2c:49:49:57:b3:70:23:ba:c6:00:5e:7c:6b:31:fb:
05:f9:62:12:9e:72:9f:4c:bb:ec:3f:ef:24:ee:68:
ab:75:e2:60:4c:8c:21:5f:da:f1:45:9f:36:9f:b9:
f8:39:a3:0f:43:44:32:82:08:5e:a5:2c:50:1c:62:
6a:03:0e:ab:27:63:ba:fb:43:59:b0:f8:74:e4:2c:
b3:61:2c:75:69:62:03:58:38:c9:2d:ce:15:0a:71:
91:18:a3:0a:81:81:26:ea:b8:c4:a3:85:3a:56:42:
59:28:d6:ac:91:22:a3:b8:97:51:ca:7f:0a:61:7d:
65:48:90:48:d0:1f:b7:ab:24:96:c2:d8:19:46:29:
4f:8e:0a:3e:65:ed:5f:4f:14:2f:ec:3a:73:c4:c0:
a2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E6:7E:83:5C:6B:02:46:04:E2:7D:E9:FE:F5:ED:4A:29:F4:E0:77
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NOZ-g1xrAkYE4n3p_vXtSin04Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:b6:c2:b7:51:e7:02:5d:66:eb:65:c2:02:fb:d9:8b:3a:ec:
2c:37:77:0f:b2:19:8b:cd:e5:1a:36:43:a2:7f:07:ea:8c:35:
f3:91:b9:f8:a1:dd:84:e0:90:77:48:ea:34:ff:a3:bb:fd:d2:
9c:f7:8c:ed:4b:46:5e:de:8e:22:d0:48:59:c6:51:73:0f:82:
b1:02:66:1f:9b:0b:bd:18:1d:4d:66:9c:06:99:5d:cd:6e:34:
37:3c:cc:a6:d0:1b:a7:22:13:cd:05:13:24:9e:e1:81:e8:2e:
8f:95:06:58:3d:ae:df:81:37:ef:2c:e3:d1:79:79:02:89:ed:
37:0c:ec:d1:fc:34:c1:15:0b:87:38:05:86:20:02:2c:83:f2:
3f:48:f4:87:1c:74:51:80:29:3a:c8:27:75:22:51:38:a8:24:
ce:1b:d4:a2:d4:a5:af:dc:37:6b:52:60:6b:80:d1:ce:a8:38:
72:1f:f2:97:f7:91:14:92:48:92:a6:a5:68:49:19:7c:e0:a9:
00:0c:f0:82:bc:f6:18:66:28:c9:bb:67:31:ad:f5:10:4f:12:
cf:74:08:72:8e:28:4b:0b:11:06:a5:90:37:f4:df:d1:a7:08:
a3:89:d5:0b:c9:5a:4f:f5:af:d6:e2:e8:4f:63:ea:79:68:31:
bd:59:0e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:37:51 2025 by rpki-client