Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nhguw892Vt7NZ0mp42rCQ4Ypw3U.roa
File: Nhguw892Vt7NZ0mp42rCQ4Ypw3U.roa (raw, json)
Hash identifier: lJ0Gu13ZDRsxMS1EPwnzYNYN7av6A2fzK46UmA6MP4s=
Subject key identifier: 36:18:2E:C3:CF:76:56:DE:CD:67:49:A9:E3:6A:C2:43:86:29:C3:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185CFF327E3447886235103A236FC83A9B5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nhguw892Vt7NZ0mp42rCQ4Ypw3U.roa
Signing time: Fri 20 Jan 2023 16:11:37 +0000
ROA not before: Fri 20 Jan 2023 16:11:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cf:f3:27:e3:44:78:86:23:51:03:a2:36:fc:83:a9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 20 16:11:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36182ec3cf7656decd6749a9e36ac2438629c375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:1b:86:2b:d4:bf:3d:19:50:04:a5:a0:e9:
5c:f2:76:6f:a4:a0:46:ac:ae:f3:38:87:db:5e:17:
bb:8f:71:06:be:e2:63:c5:ba:2d:a4:b5:c8:17:06:
e0:8d:db:25:6c:dd:21:e6:6f:2e:51:8a:eb:34:26:
e3:c4:d3:0e:dd:9a:b4:b9:23:45:31:88:1d:43:e7:
11:9f:ad:42:05:4d:e0:f3:de:2d:e6:82:33:ba:c1:
f9:a2:0b:03:c0:23:50:f8:38:65:2b:fd:d8:45:07:
f9:22:44:f8:e6:55:36:63:b9:4d:64:2f:fc:48:aa:
78:14:1f:b3:d2:4c:fa:a5:f1:98:3d:8c:36:fd:ba:
c5:50:02:a6:cc:73:69:64:34:63:3b:3a:f3:94:44:
47:68:d9:d0:bb:89:9f:82:6c:a4:30:3b:07:9a:17:
d5:5d:27:85:e0:7f:bc:3e:ca:0d:d4:bb:69:a1:53:
b3:be:00:ab:c9:ab:d5:ab:11:ca:52:05:ff:19:9b:
37:eb:e3:fa:7a:0d:02:e5:37:ab:9e:4e:a2:d1:75:
3a:41:87:12:43:51:e8:d0:41:1c:16:4f:1f:dd:cc:
70:46:a6:9d:b2:9e:a3:2b:6c:33:1b:21:84:9d:26:
62:fc:f2:a6:87:e3:b8:49:4c:62:02:40:6d:ef:8e:
03:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:18:2E:C3:CF:76:56:DE:CD:67:49:A9:E3:6A:C2:43:86:29:C3:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nhguw892Vt7NZ0mp42rCQ4Ypw3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:da:4f:65:f6:67:7e:05:41:3e:32:66:c9:04:6f:05:04:e2:
c0:07:f0:ca:a4:41:f8:fc:dd:8e:d1:8d:a2:ba:fb:a7:3a:9e:
01:8e:76:94:25:e2:b5:25:31:00:7e:f1:c5:14:82:d9:0c:19:
5a:6f:bd:5b:51:3e:a6:f3:0c:00:0f:ad:44:70:69:d9:37:7a:
ce:e0:8f:f0:b5:be:01:83:3f:e8:81:f9:42:0c:ad:81:6f:5a:
c2:48:0c:a8:54:d9:50:4a:2c:e0:88:87:5f:bd:1a:af:97:8a:
77:c4:d1:57:6a:2b:fb:1f:a9:70:ce:af:d4:5f:a7:02:34:d8:
41:20:ba:78:27:ba:91:4d:4a:34:db:1b:c4:dc:e1:c2:3c:7f:
bf:89:d5:27:6f:71:4a:dd:89:a4:22:cb:87:07:3e:d7:41:4a:
f7:a9:84:64:6d:01:69:93:d5:1a:6f:60:48:c1:83:60:b2:f4:
f4:fd:1d:61:dc:5d:ef:28:68:fa:f8:f5:ad:34:e8:66:41:16:
17:ca:8c:30:d4:99:bf:7c:30:46:36:a4:83:35:da:45:96:fa:
bd:bd:9b:95:5a:2b:03:6f:08:b8:d2:93:5e:c7:a7:a1:37:36:
3b:e6:3e:df:92:a2:a3:35:a4:8b:1b:69:34:85:0f:9d:a3:17:
0a:d8:50:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:07:05 2025 by rpki-client