Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NdM5gONcq50Pl66qCFzj2QuI47w.roa
File: NdM5gONcq50Pl66qCFzj2QuI47w.roa (raw, json)
Hash identifier: +HjQYJ2V5PThdZLL34Tu1U1nADFYwZTAQ/vgl+xaSug=
Subject key identifier: 35:D3:39:80:E3:5C:AB:9D:0F:97:AE:AA:08:5C:E3:D9:0B:88:E3:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873456769DB41555FCDADFEF98F81C2BB2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NdM5gONcq50Pl66qCFzj2QuI47w.roa
Signing time: Thu 30 Mar 2023 21:04:54 +0000
ROA not before: Thu 30 Mar 2023 21:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:3455:d144/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:34:56:76:9d:b4:15:55:fc:da:df:ef:98:f8:1c:2b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 21:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35d33980e35cab9d0f97aeaa085ce3d90b88e3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a0:a4:1f:e2:5b:76:b4:53:a2:95:95:45:f4:
52:eb:aa:81:d2:43:6c:65:85:63:c6:12:b1:c0:7b:
97:f9:e9:4f:46:39:d9:11:af:91:08:0d:ce:e0:84:
42:25:4d:c4:ec:e6:ee:1c:c5:3c:26:06:ed:05:26:
d1:9c:59:f5:bf:3c:15:4d:3b:d5:15:cf:d8:96:4a:
36:c1:fa:d9:d2:c5:41:55:39:6c:4e:d1:67:16:53:
a6:44:52:79:ff:56:1d:4c:14:40:2b:02:1a:fa:09:
0f:28:77:67:b4:20:e0:1b:5e:9f:c0:b5:48:5f:c4:
e0:a0:1d:a5:86:68:ca:be:8c:f6:ad:63:16:4d:8b:
1a:07:e4:19:d8:b3:86:cf:04:d5:7a:05:4b:b1:6d:
91:fa:57:38:db:6a:24:fc:5f:59:5b:2d:b8:67:de:
1a:80:30:14:c0:d0:3c:0d:27:a1:46:0c:ac:fd:94:
b2:a4:6e:07:f0:7a:58:64:48:15:41:30:64:ae:76:
7a:c7:e1:f9:22:b3:3d:75:df:93:57:5e:88:e5:e1:
08:63:ec:45:c6:d6:42:d2:9c:92:58:74:1e:e5:68:
d2:16:f4:46:b9:b0:86:82:bb:f8:d2:96:08:4e:a9:
0e:b9:a0:88:f2:64:85:58:6a:f6:ec:8d:75:b3:60:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D3:39:80:E3:5C:AB:9D:0F:97:AE:AA:08:5C:E3:D9:0B:88:E3:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NdM5gONcq50Pl66qCFzj2QuI47w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:16:fc:e1:56:10:01:fa:e1:8f:8d:1c:21:c4:52:eb:ab:b8:
c0:b5:1d:96:8f:82:ea:34:16:61:c0:14:fc:c5:fa:fb:21:74:
64:20:05:ca:1b:63:be:0c:c9:a5:dc:b2:46:f2:11:ad:41:71:
aa:b0:9a:8d:27:30:b5:fb:6c:54:8a:4a:32:d0:68:c3:92:e4:
d9:2c:84:c9:6f:09:ec:71:9d:5f:c0:a4:4f:d1:1b:8f:01:10:
46:dd:42:a2:a1:93:ad:fa:aa:60:cd:ff:cb:69:45:d5:6f:63:
1e:b6:05:53:05:eb:81:1d:41:1f:81:fc:7f:2a:65:0f:48:e1:
20:f2:5a:47:19:bb:7b:4c:1b:cc:d7:ba:7d:a4:55:77:63:6c:
e8:2f:1f:5d:72:b9:76:fc:8d:e5:15:4b:17:20:c3:53:eb:83:
74:2d:43:f0:2a:fe:84:f3:ce:22:99:0e:2b:b4:97:98:55:9c:
47:a9:15:e6:b7:53:7f:28:2f:a5:ee:31:36:3a:a7:53:c4:a4:
b9:06:ea:27:4a:ae:09:46:4c:c3:9a:aa:a8:39:79:79:62:f2:
ae:3f:c5:b2:5d:95:39:6f:27:01:a1:15:c8:45:f9:86:6e:59:
38:d1:f3:ca:74:22:1d:77:84:2b:73:65:12:ca:45:30:b2:54:
49:82:fb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:32:15 2025 by rpki-client