Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NObs__h8GVGokN9LayhJ5sZ3RNY.roa
File: NObs__h8GVGokN9LayhJ5sZ3RNY.roa (raw, json)
Hash identifier: ajcCnDRHdK/l1pUaG/Q+Kj93y9FFP9n7ns7XLO6jaXo=
Subject key identifier: 34:E6:EC:FF:F8:7C:19:51:A8:90:DF:4B:6B:28:49:E6:C6:77:44:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8C196CA9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NObs__h8GVGokN9LayhJ5sZ3RNY.roa
Signing time: Sun 12 Jun 2022 12:10:02 +0000
ROA not before: Sun 12 Jun 2022 12:10:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2350476457 (0x8c196ca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 12 12:10:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34e6ecfff87c1951a890df4b6b2849e6c67744d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:19:1a:bd:66:1a:83:f9:12:03:7a:d4:6a:
5d:10:58:fb:3c:fb:59:88:dd:c9:79:04:6b:b9:36:
a8:ec:3a:70:3c:c3:1a:2a:2c:63:bd:0f:98:2d:ed:
bf:a6:75:c7:6c:8b:f0:70:09:bb:74:cb:ca:4c:84:
7d:f0:7a:f9:84:30:e6:f0:83:58:3b:08:e9:fc:f3:
87:3e:22:3f:bf:fc:12:92:7a:12:c9:c5:a9:0b:09:
a7:2a:63:72:d6:d4:e3:20:47:82:01:d4:9b:28:35:
0a:46:26:51:7d:b4:51:8e:33:01:7e:13:0b:0f:1a:
2c:05:41:e8:7f:25:7f:e2:e6:e6:f6:8d:bd:e3:90:
1b:65:9d:de:a7:1a:8f:a6:4f:54:6c:ae:df:4e:14:
9e:02:05:06:4d:72:f0:87:4d:ee:2f:fe:9b:7f:ee:
66:4b:9d:77:d5:58:de:30:ff:c1:3a:78:72:7d:08:
da:d7:85:cb:16:76:b8:ac:23:22:17:c3:e4:f7:e1:
d0:ee:c7:bc:e2:1c:eb:f7:75:c2:98:d7:97:00:5d:
a2:56:8c:45:94:51:79:8f:39:a3:81:5a:4f:3a:a3:
42:2c:78:82:8d:93:c6:07:6f:11:2c:77:84:09:aa:
c5:5b:60:0d:5d:95:3e:24:71:1c:19:0e:56:24:01:
5a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E6:EC:FF:F8:7C:19:51:A8:90:DF:4B:6B:28:49:E6:C6:77:44:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NObs__h8GVGokN9LayhJ5sZ3RNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:b1:68:65:83:2e:f9:d5:6d:65:c5:20:5c:55:c0:31:9d:3b:
a1:ae:b6:ab:59:fc:5f:97:e2:6f:e5:5b:a7:88:cc:57:86:f7:
c3:cb:86:ed:29:72:4e:25:63:34:c3:59:6b:16:9a:c2:18:fa:
24:8c:e9:b0:3e:45:c7:ca:65:d7:da:a7:6e:e8:fe:44:18:88:
01:59:d9:0f:81:a1:4e:7b:8f:5b:3a:d3:aa:dd:2a:98:69:ef:
0b:0f:36:2e:97:5f:76:d2:8c:f7:7a:9a:7e:5b:9c:f5:7b:e8:
fc:d9:c3:09:72:5e:ad:6b:04:a0:c2:7e:d7:74:9d:92:c1:7d:
9b:e1:d2:75:c2:04:9b:3f:72:1e:dd:11:49:4a:5d:9d:f4:39:
3a:e1:df:d5:de:bc:34:1e:ce:34:97:27:12:20:47:dd:fc:96:
40:da:44:ad:9d:d9:48:29:01:f6:45:4a:2e:f0:4b:eb:ee:ec:
51:a5:3e:83:7a:ca:c1:27:3f:32:7d:41:5c:4d:3b:1e:e0:50:
47:4a:a0:96:e4:ac:46:69:0b:e3:83:c8:1d:6a:5c:d4:01:06:
ff:aa:98:b9:d5:45:f3:fb:0c:66:d3:1f:b8:8e:d4:e3:c5:90:
0d:66:cb:c5:de:81:e8:9d:11:97:e1:d0:84:51:c5:08:04:35:
2b:38:76:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:21:21 2025 by rpki-client