Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NgqJPAzsninn5Ea3rRZ1zOwKo3g.roa
File: NgqJPAzsninn5Ea3rRZ1zOwKo3g.roa (raw, json)
Hash identifier: j68Y7eKqexlEsdf9VLqc6saJYOnAuxf3ut1bHMWgKYM=
Subject key identifier: 36:0A:89:3C:0C:EC:9E:29:E7:E4:46:B7:AD:16:75:CC:EC:0A:A3:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A12396312BF010538212DE76117B09206
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NgqJPAzsninn5Ea3rRZ1zOwKo3g.roa
Signing time: Sun 20 Aug 2023 09:14:25 +0000
ROA not before: Sun 20 Aug 2023 09:14:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:12:39:63:12:bf:01:05:38:21:2d:e7:61:17:b0:92:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 09:14:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=360a893c0cec9e29e7e446b7ad1675ccec0aa378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f0:31:db:12:d9:9c:22:aa:bd:1f:e8:1f:16:
c6:ab:fc:9a:2c:6d:d3:d3:83:6f:5e:65:15:db:87:
1d:70:c6:95:93:42:0e:21:a9:ec:42:aa:8b:8f:83:
58:6f:d7:e9:d8:e7:9d:1d:a7:d7:93:38:34:35:b7:
2a:af:25:52:f4:34:c4:6f:b6:70:4b:7a:8f:4f:8c:
84:d9:3d:f2:87:b8:e8:b8:2d:6b:14:33:77:d5:54:
58:ef:d4:63:6b:5c:00:8d:8c:cc:f0:36:ef:d3:ef:
5b:46:08:63:7e:4b:ad:53:61:2c:00:0a:12:cc:bf:
54:ce:48:c9:68:3e:e5:f3:8f:bf:39:14:83:63:aa:
a5:2c:f8:60:11:ea:8c:e1:09:2c:78:42:19:7a:26:
1b:24:d5:dc:d2:c4:56:a3:45:3d:f8:0c:25:af:00:
14:9b:18:93:8d:ac:6f:89:55:44:e6:78:d6:42:99:
93:75:0c:08:b0:ef:be:b5:85:48:fa:de:e7:5e:fd:
1a:1d:73:20:ee:74:fb:e2:52:e5:d4:82:bd:e7:1f:
c2:2f:a8:b5:cc:65:86:b9:bd:95:de:9e:a8:07:c6:
e9:8d:5e:31:7d:9b:92:9f:c6:01:df:a1:05:70:e3:
ac:86:09:e7:df:db:56:a7:32:0d:f7:8a:92:fa:d3:
a5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0A:89:3C:0C:EC:9E:29:E7:E4:46:B7:AD:16:75:CC:EC:0A:A3:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NgqJPAzsninn5Ea3rRZ1zOwKo3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:75:34:d7:b7:41:32:40:4d:38:07:c8:f6:35:14:12:fd:e6:
28:51:12:63:74:47:fd:12:05:d6:1d:6e:e9:ff:65:99:47:63:
8a:0f:01:25:33:f2:21:75:2e:8f:77:bf:fb:4f:24:32:e7:8c:
59:13:e5:05:04:11:9a:05:d7:16:87:53:ad:c2:5e:bf:64:d0:
89:64:ef:16:42:92:07:a0:8b:e3:80:64:60:bb:9d:ea:d2:64:
47:47:76:59:41:18:4b:40:26:24:7c:93:cc:ab:03:1e:9d:83:
dc:a6:56:e4:c6:d0:5b:f7:9b:b5:32:5a:86:77:78:a7:83:4f:
c0:26:e9:8e:67:e3:21:db:95:a8:59:14:5f:71:21:c5:ed:cb:
91:05:94:01:e8:3e:c6:ee:e4:0a:57:fc:26:40:ff:ea:06:fd:
b0:be:14:b2:21:3a:1e:9d:19:a3:e9:83:1e:f2:f5:23:74:8d:
c8:b4:52:53:04:d3:a0:b5:0f:1b:c3:14:ba:86:c4:12:b5:60:
64:f9:7d:4d:b8:a7:59:8f:fd:c2:3b:c1:bf:7a:37:3a:ae:b7:
be:26:f2:b9:d2:1b:d4:2e:62:84:c5:27:c7:d9:3a:18:d1:57:
e7:a2:09:24:0f:5a:ba:63:28:c0:ed:12:9b:b4:db:cb:1b:9f:
e9:09:79:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:13:17 2025 by rpki-client