Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NYGIJw9j6U51j4EdDB6d4CkRxxg.roa
File: NYGIJw9j6U51j4EdDB6d4CkRxxg.roa (raw, json)
Hash identifier: skcpzOX9StvRi1PgSkLjYX+mUl5aRHeNpBZ0YGSZ/jU=
Subject key identifier: 35:81:88:27:0F:63:E9:4E:75:8F:81:1D:0C:1E:9D:E0:29:11:C7:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AF0EC05DE6383EDB0D539AC2EE8BCF2E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NYGIJw9j6U51j4EdDB6d4CkRxxg.roa
Signing time: Tue 01 Aug 2023 03:05:26 +0000
ROA not before: Tue 01 Aug 2023 03:05:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:af0e:3231/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:af:0e:c0:5d:e6:38:3e:db:0d:53:9a:c2:ee:8b:cf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 03:05:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=358188270f63e94e758f811d0c1e9de02911c718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:1c:a8:e5:2e:a7:22:85:9b:8c:ce:e4:9b:
e7:94:7b:2a:68:b6:7d:9e:5c:72:3f:bc:18:5c:55:
f4:e2:2e:9f:48:cc:6d:b2:6d:be:c8:7c:bd:b0:91:
df:fd:8d:62:c8:73:87:d7:40:93:ec:95:bd:fd:e6:
fd:46:9f:71:59:b1:1c:9a:0e:0b:25:29:2a:78:93:
e1:8b:0f:3f:df:49:c7:b8:0d:ec:a0:56:1c:c6:8d:
79:df:a5:c5:0e:5e:6c:1f:dd:cd:e5:39:45:eb:db:
dd:70:2d:a2:81:e4:0d:86:fe:bd:e2:a7:df:33:a8:
5a:e9:c1:51:4b:36:8b:4d:c4:2b:95:ce:8e:8a:fd:
4f:5a:b5:05:2e:b9:1b:7f:43:98:75:33:20:3e:27:
9b:e0:26:91:f2:0c:f3:d1:f3:35:64:04:4b:cf:61:
26:2f:22:45:38:a8:be:b1:2d:9b:22:ac:5c:48:8b:
4a:a2:b3:ea:5e:a1:10:c5:14:df:8b:8b:98:19:ea:
9f:d0:c4:fb:95:72:c4:05:03:0d:96:f1:74:6d:9d:
04:a9:a3:cc:07:a6:f2:bd:6c:73:3a:78:fd:c7:4a:
94:e1:20:7e:be:72:51:13:0f:c2:9f:62:ee:3e:0e:
d1:da:f7:96:4e:97:12:b3:40:37:d6:8c:7c:cd:d8:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:81:88:27:0F:63:E9:4E:75:8F:81:1D:0C:1E:9D:E0:29:11:C7:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NYGIJw9j6U51j4EdDB6d4CkRxxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:6a:4c:75:35:2f:c8:66:c4:e2:ca:76:09:3b:79:12:5e:21:
0b:67:44:87:15:47:5e:1e:f8:58:16:02:66:ef:24:a5:e1:dc:
4c:3a:cb:0f:b8:38:d6:9a:25:20:ee:02:60:e3:45:a9:e4:89:
41:62:e4:f4:c5:23:f0:9d:df:7f:cd:90:0c:05:47:76:88:91:
fe:ee:6d:aa:8b:18:77:5f:a4:12:a0:ea:92:81:81:b2:d4:b8:
3c:9a:a7:ba:38:c3:8e:18:d8:2e:a8:f7:2b:67:78:22:d4:51:
e8:ce:8d:3f:ce:95:39:8b:74:1f:c4:20:f5:c2:95:aa:15:40:
c1:04:1a:b7:02:97:85:1a:bc:e9:62:d3:cd:11:ca:43:c3:cd:
e6:66:f8:5d:7b:cf:d2:d5:20:48:a2:25:96:ee:24:91:b3:d3:
29:02:f0:10:44:34:02:b3:4f:bd:6c:95:0b:b7:76:70:3c:bf:
82:e9:1b:5e:ad:cc:b7:ee:05:4a:0e:c4:18:c5:0d:bf:e5:03:
ab:bb:19:5b:1d:c0:33:b0:28:50:84:c9:b5:1d:49:47:1c:df:
48:2d:1c:f6:4b:a1:f9:b6:08:aa:ba:c5:04:d0:36:95:31:37:
57:11:42:3c:21:f3:06:3f:32:d0:da:96:d7:d8:75:1c:9f:69:
01:d0:af:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:42:44 2025 by rpki-client