Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NTirvJns0R7zcR9xnuWOdEo3Yw0.roa
File: NTirvJns0R7zcR9xnuWOdEo3Yw0.roa (raw, json)
Hash identifier: J0RbVv9QLs6iE+wwh8ndXox1VZvvm7dr+T0/JcNZTMI=
Subject key identifier: 35:38:AB:BC:99:EC:D1:1E:F3:71:1F:71:9E:E5:8E:74:4A:37:63:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 90A46162
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NTirvJns0R7zcR9xnuWOdEo3Yw0.roa
Signing time: Tue 28 Jun 2022 17:12:02 +0000
ROA not before: Tue 28 Jun 2022 17:12:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2426691938 (0x90a46162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 28 17:12:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3538abbc99ecd11ef3711f719ee58e744a37630d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:c1:d8:cb:b4:9b:44:7f:5b:e6:0f:35:da:
54:5e:63:5c:f8:ee:8d:17:54:b9:27:d8:a3:d8:5c:
1a:f1:86:30:15:c6:42:57:26:e9:41:49:96:44:41:
c4:c2:f4:0a:40:49:3f:1e:a1:c4:79:58:1f:8a:42:
1e:ba:13:94:a7:ab:49:f4:32:e2:8e:aa:6f:85:40:
14:6f:f6:b5:d7:f8:80:3e:e1:30:b9:fc:9d:da:ef:
78:3f:c2:9d:fd:6d:59:69:38:c6:dc:0e:76:27:97:
53:81:e5:c3:bd:62:ec:fc:d3:d7:e6:6a:96:91:3b:
c5:e2:70:cf:54:37:ea:05:b1:1c:9c:3a:09:18:78:
5a:22:d6:28:18:5f:e2:03:54:97:64:69:e9:c8:69:
d8:f7:a5:c7:39:37:02:87:65:16:8d:9f:21:6a:71:
d9:c7:c8:58:e0:27:8e:4c:90:3c:2f:a5:d6:31:cb:
1f:d0:73:fc:11:44:4a:f6:73:e6:ea:78:e6:24:e7:
a5:08:09:bd:5d:6f:ec:e3:e7:95:65:00:9d:46:9f:
02:11:06:42:2b:53:e8:aa:c1:35:89:81:d1:37:18:
8f:34:94:a3:1f:6c:3f:72:32:7f:c3:47:41:91:cd:
90:d2:be:10:dd:7b:f8:74:60:f6:81:36:b7:db:73:
2a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:38:AB:BC:99:EC:D1:1E:F3:71:1F:71:9E:E5:8E:74:4A:37:63:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NTirvJns0R7zcR9xnuWOdEo3Yw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:1b:36:59:45:47:d8:d3:d5:a3:c5:cd:4c:ad:f3:39:1c:e1:
b1:33:98:bf:18:e0:31:01:1d:5f:0a:7c:7f:83:d6:79:4b:e9:
1f:45:29:3e:a0:2c:9c:4b:cf:72:aa:b6:8b:b6:8c:64:8e:1c:
a1:03:b8:90:29:56:c0:98:b5:34:39:5d:2d:dd:7e:0d:6f:bd:
d9:0f:69:b0:bd:60:70:5d:44:7a:d3:c2:0a:fb:b2:06:69:fe:
7a:1b:eb:4e:96:58:9c:75:74:93:fa:37:e9:17:df:dd:fb:f1:
c1:b1:63:11:07:ee:48:76:b2:b4:80:0e:36:f7:a3:1e:4a:3e:
d7:c5:cb:24:23:d7:63:a6:0c:48:01:15:ed:10:9e:b5:2a:5b:
c0:f3:e9:c3:98:79:14:18:9e:80:5d:ce:f9:d6:76:ad:f8:9b:
2a:ad:47:d3:6c:91:8c:82:6c:14:77:f6:c8:f1:59:b6:4f:41:
2c:5d:7c:dd:ba:4d:96:f1:39:6d:86:98:d9:04:65:e8:1c:37:
56:d3:f5:8e:53:c0:c5:fe:9d:af:3d:90:30:dc:0a:38:8f:1c:
ec:e7:08:16:24:54:71:68:71:01:ad:10:15:fa:ef:fc:a5:00:
70:3c:44:af:dd:2a:a7:57:4d:c5:d3:ca:bf:4a:1f:c9:49:de:
86:27:86:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:00 2025 by rpki-client