Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NWy_h9n9ql6wXtf1Kr2pYOGwFys.roa
File: NWy_h9n9ql6wXtf1Kr2pYOGwFys.roa (raw, json)
Hash identifier: RwqkKeMrYk1Z1DsIVN5ayGm+LSWoPNjXoa7M44LjN+A=
Subject key identifier: 35:6C:BF:87:D9:FD:AA:5E:B0:5E:D7:F5:2A:BD:A9:60:E1:B0:17:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882BFCE7769EE934D306FC177EC52CD64E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NWy_h9n9ql6wXtf1Kr2pYOGwFys.roa
Signing time: Wed 17 May 2023 23:12:54 +0000
ROA not before: Wed 17 May 2023 23:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2b:fc:e7:76:9e:e9:34:d3:06:fc:17:7e:c5:2c:d6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 23:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=356cbf87d9fdaa5eb05ed7f52abda960e1b0172b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:76:ad:6a:ce:be:9a:c1:dd:73:36:9f:b6:49:
fe:ac:10:98:34:b5:93:ef:5d:b9:9e:4f:5e:9d:02:
ce:9a:8d:34:79:09:51:6b:1a:89:0e:1e:74:50:0e:
82:bb:b0:ee:4e:1b:18:40:ad:f1:2a:a9:ce:de:62:
9c:62:07:7a:86:63:cb:94:7c:ff:b4:8d:0c:21:0a:
1f:2e:bd:20:dc:c1:40:15:66:3e:86:b8:54:a7:66:
f7:7b:b8:0f:58:5c:71:7c:57:81:be:f3:b0:c5:46:
fe:96:98:e8:28:ca:bf:77:02:9c:7a:4b:fc:4e:9c:
dd:54:d9:36:66:9d:c7:d6:67:44:a3:09:e1:f3:97:
0e:d7:d7:31:eb:6b:50:a8:3a:14:4c:43:3b:25:a2:
2c:ed:6a:25:cf:a0:26:88:8a:85:0d:ad:b4:47:9a:
72:a9:01:ee:b4:56:74:6d:3a:4e:27:57:b3:77:3a:
e6:62:0a:7b:eb:a4:da:ba:94:48:3e:70:a9:d3:6e:
a3:fd:b0:5e:8b:9e:9b:04:5f:b2:15:85:80:82:52:
da:83:2f:9c:0a:75:95:86:e1:83:8d:59:63:e6:74:
c7:4b:77:3b:61:dd:48:bc:64:86:2b:4b:6e:c9:56:
54:8c:b1:51:37:ca:9c:ea:c5:dc:3c:6b:be:26:4b:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6C:BF:87:D9:FD:AA:5E:B0:5E:D7:F5:2A:BD:A9:60:E1:B0:17:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NWy_h9n9ql6wXtf1Kr2pYOGwFys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:77:35:9c:d7:de:7c:fc:ff:4d:1b:6a:82:5c:5f:1d:0d:79:
fd:61:d3:00:d2:28:e9:f0:81:56:fa:78:21:6d:3e:53:9a:61:
3e:10:b9:64:4f:fe:5b:dd:4a:a5:7b:b7:33:5e:ed:39:d7:88:
38:b7:43:8e:b4:f6:59:f8:7f:10:2c:fc:59:2e:d8:0f:e4:e5:
77:6d:d5:0b:f8:39:3d:1b:e9:86:67:bd:da:02:0f:07:a0:3f:
69:cc:93:7b:c5:d5:b2:ae:4e:4a:26:50:08:a9:03:aa:60:ae:
6a:91:4d:a7:b0:47:b8:3a:09:86:14:c7:60:6a:22:a2:73:3d:
a4:6c:36:f8:22:d8:b7:02:c6:6a:18:e0:c1:25:25:38:7c:63:
88:4a:a2:22:22:8a:75:1a:7f:2b:61:18:15:a1:81:34:be:1d:
a8:02:3b:43:83:6e:a3:ab:12:c3:af:54:3a:ba:d0:06:6e:6a:
b7:72:81:b7:35:48:34:3f:34:b8:05:02:a4:b3:2b:67:88:8b:
31:c3:b5:e5:db:a2:b8:31:00:77:c3:ca:2e:b3:05:fc:06:44:
a0:4f:c8:da:b3:41:05:f6:04:5c:d7:d7:74:be:47:62:f4:52:
f5:b2:6e:0f:b3:7c:c3:82:2a:2e:8b:9e:e0:be:ba:b9:0e:21:
ad:60:8f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:23:05 2025 by rpki-client