Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NVFaNaJ3p2ylYgORqMF-IpnvoZE.roa
File: NVFaNaJ3p2ylYgORqMF-IpnvoZE.roa (raw, json)
Hash identifier: 2UqTTs5jKujLfAoGac9yjPNz50YZIFCbflhdHgYkCVA=
Subject key identifier: 35:51:5A:35:A2:77:A7:6C:A5:62:03:91:A8:C1:7E:22:99:EF:A1:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E075D16B22E4DB4CA099236959E6611E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NVFaNaJ3p2ylYgORqMF-IpnvoZE.roa
Signing time: Mon 05 Dec 2022 04:05:28 +0000
ROA not before: Mon 05 Dec 2022 04:05:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:e075:6f92/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e0:75:d1:6b:22:e4:db:4c:a0:99:23:69:59:e6:61:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 04:05:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35515a35a277a76ca5620391a8c17e2299efa191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:1c:10:d0:e4:d8:d9:6b:09:95:db:77:47:
51:12:34:e7:6f:4c:44:d7:70:32:5d:98:0d:d3:f4:
79:d1:25:a8:93:71:0a:cc:e5:91:a6:a5:ef:c1:24:
01:78:b0:c6:56:04:f9:ac:75:37:ba:d8:b9:0d:20:
32:d2:1a:ac:2a:0f:e4:a2:d4:48:27:86:81:28:50:
e7:e0:13:dc:9e:07:10:6d:c3:fc:b5:82:0e:79:4e:
13:8b:d1:c5:ec:27:ea:ff:b3:2e:d5:6c:84:7b:bb:
d6:23:31:7b:41:11:2a:3c:11:1a:c8:e7:a0:60:ed:
fe:2a:fe:02:5d:af:fe:b3:e6:d4:66:e4:65:44:fb:
bc:0c:d7:7e:f5:e1:e8:f8:63:6a:1a:b6:0b:65:bd:
44:40:84:aa:cf:0c:a5:56:83:c8:73:93:fc:62:ef:
69:cc:91:fa:10:cb:0d:d5:c8:a9:3d:44:93:2f:c8:
90:8c:b4:07:ff:a8:64:98:08:0e:de:e5:c7:9c:be:
bb:5a:5e:b1:e2:52:09:09:df:9c:0b:0f:38:a6:1d:
c8:60:1c:46:8e:3f:25:ad:da:b2:77:d1:5e:54:84:
a9:94:1a:8e:dd:60:58:c9:75:1c:e5:90:39:fc:59:
60:e3:a5:15:2c:87:f9:e9:36:05:63:ab:1f:63:52:
b7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:51:5A:35:A2:77:A7:6C:A5:62:03:91:A8:C1:7E:22:99:EF:A1:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NVFaNaJ3p2ylYgORqMF-IpnvoZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:1d:06:dc:5c:b5:f2:a2:e2:81:fc:70:3e:e0:09:c1:4e:ff:
b3:10:31:05:70:40:4d:55:f4:4a:b2:68:f7:fb:94:4e:e3:56:
d6:3d:a4:26:2f:a0:51:5e:9f:f7:84:53:57:a5:f0:07:87:ee:
84:4a:e9:48:ff:a3:b1:51:2d:c2:29:08:05:e9:0e:54:46:29:
be:e4:12:7e:c7:03:04:70:5b:00:82:e1:af:24:d6:5e:06:77:
9d:02:6b:71:e3:56:14:77:a5:09:56:ff:c1:4d:a2:9f:9e:b7:
26:52:f7:41:af:14:88:cb:1f:02:8f:51:31:7b:27:ad:af:ef:
85:39:8a:d5:53:4a:5c:e0:f7:a9:6c:e2:e9:4a:a2:d7:aa:d6:
0d:aa:83:8e:5e:44:31:f7:29:12:2b:74:31:ae:0a:a8:d9:fa:
e5:17:81:e3:02:d1:f2:b4:75:a9:c0:f0:49:28:f9:c6:59:60:
56:ac:a2:fa:98:f4:fc:01:09:64:64:d9:67:c9:6b:81:78:a6:
12:4d:09:ec:7e:9e:67:c6:5c:4f:0d:05:90:c0:ff:82:8f:a3:
73:b0:54:0a:2a:73:c2:28:e4:53:71:2f:06:10:61:30:bd:11:
9d:ab:96:6b:b5:13:2e:ef:7d:ae:de:fd:1e:68:c9:06:0e:e3:
18:2d:22:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:10:48 2025 by rpki-client