Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NbktCbBnlN5W8sgDAzNvuydEon0.roa
File: NbktCbBnlN5W8sgDAzNvuydEon0.roa (raw, json)
Hash identifier: trFRYh00m3OedAhxyjGUr2nOtfdmMgZaRgMJ/YkIxLc=
Subject key identifier: 35:B9:2D:09:B0:67:94:DE:56:F2:C8:03:03:33:6F:BB:27:44:A2:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852110EC66410C20EE703FEFFF7BFD9896
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NbktCbBnlN5W8sgDAzNvuydEon0.roa
Signing time: Sat 17 Dec 2022 17:10:35 +0000
ROA not before: Sat 17 Dec 2022 17:10:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:21:10:ec:66:41:0c:20:ee:70:3f:ef:ff:7b:fd:98:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 17:10:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35b92d09b06794de56f2c80303336fbb2744a27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:1a:0a:0a:16:53:31:00:54:5f:82:e5:f1:
18:5e:27:bf:f2:6a:52:95:69:0d:6a:0d:2f:b0:36:
86:95:8c:1a:46:e7:be:90:6a:6f:3d:b1:90:1d:ed:
15:0c:e4:1d:b3:01:3e:ff:c8:33:0e:32:dd:d1:93:
99:44:a8:5f:aa:23:c9:e8:80:1b:a7:37:e3:6c:fd:
db:54:76:53:dc:c3:e9:a4:9c:6d:65:88:ac:d7:63:
c6:f6:06:c5:08:e9:a0:38:93:5e:f3:3b:79:a6:11:
c9:ba:0e:87:5b:bb:eb:a0:3c:a2:08:06:e4:89:6c:
9a:4a:bf:30:a1:f5:d4:f8:99:8f:c6:0f:12:34:ff:
0b:be:ac:89:30:f0:9f:c1:7b:66:65:12:63:26:bc:
65:59:2f:ac:4a:ed:05:15:80:d9:73:1b:48:ab:2f:
f2:99:ce:d8:9b:b9:86:9f:86:32:0d:41:48:5d:41:
84:dc:fb:d6:83:e9:00:09:d4:76:5b:4a:de:30:fe:
00:91:b0:98:45:d1:91:74:57:c1:26:7b:ed:7c:b6:
df:94:cc:c3:1a:28:60:d6:41:05:e7:9a:c2:36:6c:
9f:93:ea:4e:71:2c:e8:79:57:5c:58:78:ae:0e:b3:
ff:03:51:63:b0:dd:40:37:5a:de:5d:64:fa:e7:fa:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B9:2D:09:B0:67:94:DE:56:F2:C8:03:03:33:6F:BB:27:44:A2:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NbktCbBnlN5W8sgDAzNvuydEon0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:10:4c:17:5c:24:3e:7d:06:a7:75:23:6d:b7:e2:e0:6c:0f:
0f:da:8c:54:d4:04:c5:40:73:66:ae:57:16:bd:19:8a:85:71:
2a:16:8e:a2:ab:73:0b:ae:e9:a5:5f:30:7f:a1:74:4f:6f:94:
93:74:86:33:8a:5e:f6:50:63:e4:21:47:d3:9f:92:3e:df:c4:
91:54:cf:8a:71:34:a9:aa:b0:06:fd:32:6e:0b:cb:5b:4f:b9:
dc:2d:63:04:a9:68:9f:12:b6:18:61:bf:bc:93:f1:5c:a9:ea:
2e:bf:06:30:32:de:b2:5d:63:c0:b7:76:d5:b8:d0:1c:d8:dc:
c9:69:14:13:69:e1:f1:92:fa:2e:15:03:7b:df:62:97:42:0e:
3b:ef:a9:ac:a7:01:11:3b:85:d6:7a:48:53:26:2e:98:71:f7:
30:bf:07:8c:e2:13:40:76:6f:0d:ba:61:2f:c7:7b:e0:4f:5c:
1f:cb:ab:d1:6d:f5:b7:17:92:2c:91:e6:7f:2b:f4:5e:2a:0d:
39:55:96:c2:7d:9e:a4:68:d7:5c:1e:9a:6c:13:81:5b:67:f0:
eb:b2:5d:8c:90:e3:6d:47:a4:13:be:99:be:79:7e:8b:20:24:
8f:3c:69:4d:9b:35:97:07:07:d5:34:5e:ea:95:e3:d8:24:1c:
6f:c0:1e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:07 2025 by rpki-client