Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NQhmHCt05uwMvMlbA3Un0pBN8_I.roa
File: NQhmHCt05uwMvMlbA3Un0pBN8_I.roa (raw, json)
Hash identifier: ilPsQU7KlJqtz2WfnW9YgpeLc2cjQLfMlHfOY5dvIEg=
Subject key identifier: 35:08:66:1C:2B:74:E6:EC:0C:BC:C9:5B:03:75:27:D2:90:4D:F3:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A31164C1A490387898FC07C2FF2DD8135
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NQhmHCt05uwMvMlbA3Un0pBN8_I.roa
Signing time: Sat 26 Aug 2023 09:04:19 +0000
ROA not before: Sat 26 Aug 2023 09:04:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:3116:1f9b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:31:16:4c:1a:49:03:87:89:8f:c0:7c:2f:f2:dd:81:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 09:04:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3508661c2b74e6ec0cbcc95b037527d2904df3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:79:fc:9a:cc:b5:3f:c0:7a:15:34:08:d2:
be:34:e4:96:b1:06:73:a5:e7:a9:07:bf:d9:4a:49:
6a:42:56:9c:a4:14:79:74:16:9c:57:dc:42:14:84:
d4:3d:34:0b:21:8c:74:71:f9:8e:22:bb:fc:59:c1:
cb:d2:71:5d:96:23:42:f9:66:2d:38:b6:b8:37:e2:
61:c5:87:4a:a1:5b:1e:4f:29:7a:8a:dd:ba:8a:07:
0c:a2:74:ef:eb:d9:76:4d:dc:de:da:1b:e3:27:c8:
76:5a:f3:f6:a3:d9:d3:f6:de:17:20:8f:1b:b1:52:
15:8e:a5:5c:8b:8e:80:39:2c:d1:46:7b:dc:7b:ed:
a6:b6:16:b7:f1:90:fb:3d:47:12:6d:08:25:05:3e:
d2:39:a8:0e:64:47:ff:ff:67:f9:a3:00:68:c2:be:
09:1d:4f:dd:5b:c2:dd:7f:b0:ea:d3:c1:99:d8:71:
b4:81:88:41:1f:1a:10:00:a5:3c:5e:17:be:9a:b5:
f6:54:12:08:d1:95:e8:31:c6:7b:4c:ad:45:b5:96:
bf:9a:fc:4b:8a:7e:ea:7c:c6:bd:b4:b8:49:77:17:
81:56:09:3e:5d:1e:6e:a9:ee:b3:0e:bc:ee:62:38:
89:70:db:2a:3b:3e:a3:be:ad:1c:1b:44:7f:1e:7e:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:08:66:1C:2B:74:E6:EC:0C:BC:C9:5B:03:75:27:D2:90:4D:F3:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NQhmHCt05uwMvMlbA3Un0pBN8_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:1c:56:15:a4:71:b9:0b:13:95:05:cf:3f:14:f2:51:e0:07:
b6:80:51:97:71:d2:1e:14:dd:e5:51:4a:b3:2b:b1:4e:9f:6f:
41:a1:04:2b:41:4a:76:1f:3a:bb:19:bc:6a:07:a4:d3:ad:94:
24:ad:68:b8:92:59:ff:4b:a3:4c:b5:2e:11:8f:02:33:07:7c:
88:6f:5a:db:30:4e:ef:04:fa:82:fd:c8:06:73:46:9d:a5:77:
08:c7:d2:b8:cd:72:66:9b:92:4d:4c:df:39:8d:11:11:96:4e:
1d:94:08:84:34:04:a2:1f:6a:15:70:76:bf:18:9a:b2:54:75:
e0:1d:2f:3a:84:ed:33:df:f7:de:8c:eb:42:05:98:ae:5a:5e:
3f:21:a3:fd:ef:ae:65:c6:60:bf:6a:71:bb:20:2e:e2:f4:c2:
dd:30:67:e5:4e:b4:60:02:1e:aa:0a:ba:c1:18:bb:4b:7e:c7:
35:c4:46:8b:5c:c4:e7:00:16:6f:57:b1:8c:a2:f0:72:7a:09:
dc:87:80:7c:e3:75:87:b9:f9:5b:84:fa:b6:e6:bd:9c:ec:0f:
3e:20:06:78:04:fa:e5:32:43:73:1c:8d:9d:70:fb:27:3a:f5:
9d:c2:f0:3a:f1:d8:0a:8b:16:c7:f0:53:4f:ff:74:57:d1:e3:
57:e0:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:35:59 2025 by rpki-client