Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NTcyqqWkwCQwU6JJa5VOtwGgWBk.roa
File: NTcyqqWkwCQwU6JJa5VOtwGgWBk.roa (raw, json)
Hash identifier: mQ+WdwmAZN13VbwdI6zrluo5D/HN7EV/oHzr54gGRf8=
Subject key identifier: 35:37:32:AA:A5:A4:C0:24:30:53:A2:49:6B:95:4E:B7:01:A0:58:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B3D08C66A50EDBED6A35798F4486FE76
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NTcyqqWkwCQwU6JJa5VOtwGgWBk.roa
Signing time: Wed 02 Aug 2023 01:15:36 +0000
ROA not before: Wed 02 Aug 2023 01:15:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b3:d0:8c:66:a5:0e:db:ed:6a:35:79:8f:44:86:fe:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 01:15:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=353732aaa5a4c0243053a2496b954eb701a05819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:07:bd:9c:61:e1:d3:5e:53:18:71:19:84:
06:0e:2d:43:ab:43:5a:66:42:5c:62:53:0e:6f:60:
b8:3b:09:ff:25:77:b7:7e:3f:3a:06:f1:79:55:28:
2d:e6:9d:09:d7:93:10:b0:a6:39:f9:0b:c4:ab:98:
ac:99:64:ac:42:6c:9f:5e:de:75:49:3a:fd:59:11:
6b:79:da:64:17:87:2e:20:a5:fb:1d:8c:9a:6b:b8:
32:f7:b5:4f:70:11:3c:d6:e9:ee:a8:ba:d2:f9:89:
72:45:14:21:6c:cd:ae:66:74:eb:0d:8b:09:11:17:
97:fc:53:83:b8:ff:6f:f2:8d:4e:d7:af:39:3c:ea:
28:aa:97:70:35:1b:c5:61:2c:60:b8:0e:fc:35:0b:
f3:af:41:e5:ce:d8:1c:8a:36:10:31:ba:5c:26:05:
dd:60:45:0f:78:7c:58:3a:c4:07:b6:7b:e5:ba:04:
46:c8:2d:64:8a:ff:79:8e:0d:ab:09:5c:b8:8a:c8:
df:30:12:17:9a:28:c8:72:10:fd:d9:58:7f:cd:16:
7b:36:25:64:05:e5:20:3d:1e:e6:bf:e4:0b:53:37:
ab:3c:66:68:63:9d:16:f6:6d:68:06:c6:7a:99:54:
af:f3:0d:14:81:92:35:a7:9b:4f:bf:f7:bd:d8:5d:
f9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:37:32:AA:A5:A4:C0:24:30:53:A2:49:6B:95:4E:B7:01:A0:58:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NTcyqqWkwCQwU6JJa5VOtwGgWBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:22:05:1f:8b:06:8b:48:ed:8b:d0:c8:47:30:a0:4e:9a:0f:
01:d1:47:fa:ef:7c:24:92:f8:2f:8a:cf:01:53:ac:d2:02:d8:
7c:3a:97:80:27:09:f8:20:bc:49:26:15:6f:42:79:2a:ed:91:
68:52:ea:9f:89:f9:8a:50:f1:43:b2:e7:32:98:ea:99:5d:7b:
47:2d:f1:d5:02:b2:e3:88:85:d2:c7:30:8b:0e:ce:11:96:e5:
45:c7:4e:60:d7:c9:ee:fd:79:d5:a5:54:71:be:32:d4:d4:f3:
b2:64:38:b3:de:38:e7:0c:f4:94:0a:2b:3b:ef:e6:b6:85:9e:
36:d9:1d:b9:02:79:59:de:d3:5d:4c:d6:1b:66:9f:00:9e:dc:
39:18:ff:2a:19:32:f5:94:e7:39:62:61:e4:ff:81:be:07:77:
3c:1a:a4:9e:7d:ed:1d:a1:12:31:ae:35:ec:70:1b:61:a8:14:
3a:f3:78:3b:24:f4:a0:1d:8d:de:06:43:89:8e:b5:e0:60:9d:
89:47:06:94:25:e5:26:20:65:b9:8f:df:ba:9a:17:38:94:14:
f5:1d:90:a8:26:54:1c:84:30:0d:72:9e:db:23:d0:23:b2:08:
58:40:6d:05:bd:d8:c3:cc:d6:36:37:ca:82:83:de:b2:5a:e4:
78:85:d9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:16:51 2025 by rpki-client