Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NoWOhomTdcMsJrOn-KOiE0tYxTA.roa
File: NoWOhomTdcMsJrOn-KOiE0tYxTA.roa (raw, json)
Hash identifier: m3xvKDU2Fs+Iijmqi6QS276Pa1P3rRI0Wo/I0pR6MOg=
Subject key identifier: 36:85:8E:86:89:93:75:C3:2C:26:B3:A7:F8:A3:A2:13:4B:58:C5:30
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018648F2A9FA5BF8BAD87A9AA9D2AD4EEEB0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NoWOhomTdcMsJrOn-KOiE0tYxTA.roa
Signing time: Mon 13 Feb 2023 04:05:08 +0000
ROA not before: Mon 13 Feb 2023 04:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:48f2:500a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:48:f2:a9:fa:5b:f8:ba:d8:7a:9a:a9:d2:ad:4e:ee:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 04:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36858e86899375c32c26b3a7f8a3a2134b58c530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cd:6a:61:b3:e1:e5:c8:60:cc:b6:64:cb:dd:
5b:20:09:eb:bd:af:e4:6a:d4:15:a6:2d:e3:cc:56:
e0:9d:b3:a6:bf:9a:d4:ac:3b:ee:9c:2b:20:9f:b8:
04:05:44:10:fb:af:5d:f7:eb:51:68:64:b2:2e:a3:
9a:f0:ea:a5:e2:f8:42:a8:88:c7:b3:57:a1:d5:ab:
5e:22:19:62:24:f3:c1:0e:c7:54:92:1a:e9:b3:a6:
73:aa:69:2d:96:50:8e:95:01:41:fa:f8:fb:79:bf:
de:c5:7c:fa:bf:6a:ac:7a:fa:e9:e1:cd:93:e7:59:
9e:9a:2b:0e:d7:ee:61:37:28:e6:59:0e:51:4c:9e:
f8:a8:85:04:b5:cb:dd:13:9c:ed:86:c3:6c:f7:88:
a8:52:96:3b:de:f1:21:ed:e1:bf:22:aa:81:39:ca:
c4:ad:f8:67:ac:be:72:e0:74:c2:7d:de:35:75:71:
98:3c:4f:9e:59:9a:ba:5c:5d:61:cb:f1:3e:9b:fe:
96:d7:7c:05:82:33:72:10:ba:71:fe:a4:ce:0b:b7:
a3:8e:de:db:43:73:c8:a7:0e:5a:06:eb:40:79:d5:
9f:29:2a:2c:50:a0:d7:3c:a6:98:b4:ac:09:9a:d4:
6a:8d:b6:9f:e1:50:db:ec:f0:a5:ce:59:5e:24:83:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:85:8E:86:89:93:75:C3:2C:26:B3:A7:F8:A3:A2:13:4B:58:C5:30
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NoWOhomTdcMsJrOn-KOiE0tYxTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:00:f6:de:8b:d0:db:fd:c8:7d:d1:ab:e0:be:55:1e:6d:d4:
db:11:b7:ed:a3:27:e4:98:2d:bc:59:db:56:9d:31:85:00:bb:
87:ec:df:44:58:27:71:e4:2c:b6:1e:bf:82:7e:6d:8b:2b:d8:
36:68:c7:91:df:3b:b8:ab:d6:11:88:44:01:c6:b3:d4:1d:a2:
ce:00:b9:f4:ad:fc:ac:bf:52:79:14:d8:b0:bb:32:42:15:cd:
22:ec:d8:53:62:73:92:cf:17:32:b5:47:e7:20:d5:5d:2d:1e:
ce:c4:08:7c:28:fc:69:5f:e4:eb:39:0e:4d:3b:ab:d3:03:15:
49:1e:59:1d:bb:bd:93:e2:41:89:c5:d8:fd:c5:8b:fb:e2:d4:
59:c9:b5:35:c0:83:a0:a8:d9:d0:95:bc:73:f8:6e:5c:25:82:
4a:10:39:6f:b2:ff:f8:a4:88:ea:35:f8:16:81:85:f5:0b:ec:
bf:a7:ee:b5:4b:08:1d:c3:dc:a4:d2:70:a9:cb:d5:83:fb:48:
31:38:bf:2d:95:ae:63:7c:49:36:c7:4f:aa:4b:39:81:f6:c2:
38:32:ce:b9:43:9a:06:25:6b:14:ba:98:09:fa:ae:4d:36:e4:
09:2a:c3:f1:f8:22:b4:08:dc:01:c5:38:8a:dc:4d:5b:85:ac:
79:44:c8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:23:25 2025 by rpki-client