Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NhluQTFbds9Ze5owvg-7KPos9rU.roa
File: NhluQTFbds9Ze5owvg-7KPos9rU.roa (raw, json)
Hash identifier: JcVJlNq1BSVt1hnJtI7Mo86mX5eFcTsy3E0/l7enbyo=
Subject key identifier: 36:19:6E:41:31:5B:76:CF:59:7B:9A:30:BE:0F:BB:28:FA:2C:F6:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018837F94BDB4D6F23AD041ED703AA3FF08B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NhluQTFbds9Ze5owvg-7KPos9rU.roa
Signing time: Sat 20 May 2023 07:04:24 +0000
ROA not before: Sat 20 May 2023 07:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:37f9:3a5/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:37:f9:4b:db:4d:6f:23:ad:04:1e:d7:03:aa:3f:f0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 07:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36196e41315b76cf597b9a30be0fbb28fa2cf6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:5c:28:39:da:96:23:79:df:62:79:f0:04:
16:c7:a2:56:ca:3c:09:34:7b:a1:2f:99:9c:0e:86:
dd:be:0c:9a:db:5e:cf:ae:0a:d7:c8:d8:3b:86:cd:
d7:7f:29:6d:9e:58:d1:d8:23:7c:58:26:74:52:f8:
69:2c:56:f7:c8:75:a2:65:94:d2:88:15:62:5c:2b:
48:48:79:58:f8:cc:50:66:70:25:90:a9:3c:ff:66:
2f:48:65:e1:44:b4:0d:fd:f8:9c:8f:3f:91:61:14:
cd:14:da:d1:a1:65:bb:de:49:f9:9b:b9:37:33:f6:
00:75:11:02:f8:8b:1b:04:22:ab:ef:4c:ed:de:86:
8d:eb:d4:a8:b2:01:5f:8d:aa:53:af:87:91:02:0a:
2a:60:b8:c9:46:43:fc:06:d0:cd:87:06:99:11:10:
dd:a4:f7:02:e6:2a:30:7a:e8:af:9d:1c:18:e5:68:
e4:ec:06:08:ae:45:86:e1:a3:38:61:02:81:87:a6:
18:ec:64:f0:cc:82:ae:21:9b:c7:c7:10:bc:22:9c:
c3:0a:5f:2b:03:b7:86:bd:4a:86:4e:b1:25:e6:47:
ae:8a:9d:97:16:20:0b:65:73:5f:05:b5:26:f6:ef:
74:5c:72:05:06:8d:6e:e8:80:82:67:c5:ae:35:db:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:19:6E:41:31:5B:76:CF:59:7B:9A:30:BE:0F:BB:28:FA:2C:F6:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NhluQTFbds9Ze5owvg-7KPos9rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:a0:a6:7d:be:64:ab:1d:b1:1b:ee:fa:ab:78:78:6b:d5:9c:
48:68:ab:c2:04:f6:5c:7b:44:d1:2e:b3:ee:95:2c:ba:33:c4:
8d:5c:74:b5:08:7b:e6:40:c4:e5:00:41:a8:fe:d2:3c:40:f0:
00:3a:6e:7d:f3:8c:e3:6f:da:26:96:6c:f2:68:c5:25:41:f9:
b4:dd:33:f2:27:64:04:6c:94:03:4f:01:96:4f:33:7f:0e:7f:
f7:c0:00:54:4a:4a:24:f8:e7:0c:06:b0:ef:db:24:ec:bf:04:
2a:fe:a7:4a:5b:be:91:59:2a:17:71:7e:5f:19:3f:1a:2f:78:
60:aa:e5:a4:92:e2:a6:b1:f7:43:83:af:bd:7d:87:7e:10:b6:
e2:19:04:a4:76:4d:e3:b3:7c:a4:6d:68:f1:86:cd:cb:e8:f7:
77:f6:da:88:b4:37:d4:7a:6c:3d:3b:51:e1:2c:60:be:36:65:
08:e2:f5:75:0c:36:89:7b:ea:3e:6c:3c:4f:b3:32:67:0f:98:
ad:d8:eb:f1:34:8b:61:fa:96:18:04:71:b4:ff:04:48:a3:69:
03:9a:39:47:cf:84:96:08:03:9c:e2:c7:cb:d1:e7:f4:ca:5c:
e8:0a:f6:4d:24:db:12:51:f0:84:db:ea:66:e4:88:ca:d2:e0:
b0:4f:26:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:08 2025 by rpki-client