Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NoojIo7WnHNfO8cNkR4GTGcdl_8.roa
File: NoojIo7WnHNfO8cNkR4GTGcdl_8.roa (raw, json)
Hash identifier: Eb8Nrte4hcbIHc9K+i9RRawWns/FXVb10g158TDf+8E=
Subject key identifier: 36:8A:23:22:8E:D6:9C:73:5F:3B:C7:0D:91:1E:06:4C:67:1D:97:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8D432EE0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NoojIo7WnHNfO8cNkR4GTGcdl_8.roa
Signing time: Thu 16 Jun 2022 16:09:44 +0000
ROA not before: Thu 16 Jun 2022 16:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2369990368 (0x8d432ee0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 16:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=368a23228ed69c735f3bc70d911e064c671d97ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:4e:2b:ef:a9:0b:a4:9f:2e:e7:5c:36:de:
51:ab:e6:d6:00:c5:fd:18:86:41:38:61:33:2f:5d:
41:f7:1a:33:80:67:96:d5:01:b8:55:81:c1:39:bc:
f9:b6:00:d4:c2:a3:ca:28:22:28:5f:f6:71:11:29:
f4:bc:36:b5:58:29:7d:ce:9e:1d:37:6b:71:fe:a4:
24:c5:1c:f3:ac:19:45:ea:c6:3d:3e:fe:76:a6:e7:
e7:7a:11:04:c5:15:60:80:98:06:9d:24:51:40:f3:
ae:13:62:13:5c:c0:80:b9:77:3d:1a:5f:b5:de:66:
e0:b6:b7:a6:7d:c6:e3:a1:e9:92:f9:8f:32:62:80:
62:17:c4:a0:32:c1:0e:7a:e0:41:fc:a2:7c:22:e8:
62:a6:73:a6:e4:44:ae:45:e8:e4:a2:b7:b3:43:ad:
10:c6:c6:26:9c:2a:7d:e1:53:d0:38:69:03:49:fe:
b6:20:da:f8:83:b3:30:64:96:18:4b:cd:be:cc:af:
a4:31:7b:23:c6:17:81:b4:2c:52:a6:ba:27:ba:c0:
0c:73:37:22:28:f5:da:af:c7:97:f2:60:30:4e:c1:
9a:6b:ca:3e:f2:7d:e2:a4:23:00:8f:ca:8c:bf:77:
63:e5:1e:42:83:48:a0:e6:18:d7:1c:d1:33:7f:58:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8A:23:22:8E:D6:9C:73:5F:3B:C7:0D:91:1E:06:4C:67:1D:97:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NoojIo7WnHNfO8cNkR4GTGcdl_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:8d:12:ee:01:f9:8c:30:2c:f2:ac:25:bd:b0:9c:d8:79:1a:
04:79:c5:4b:cd:d0:0b:0d:be:93:1e:62:a1:c7:d9:33:64:a9:
e5:af:95:13:c7:6f:dd:01:c9:c5:f3:9a:90:c4:ae:5d:e1:6f:
ba:3b:74:cc:fd:14:0b:9d:1a:05:d3:94:2d:46:27:a8:61:9c:
1d:0a:bc:6f:8f:b7:11:e2:46:93:25:f2:dc:30:b7:1a:51:b8:
ff:ea:12:1f:e6:a9:49:d4:e4:10:32:49:00:27:90:c5:ff:3f:
9a:65:83:cd:39:65:2b:64:d4:19:a1:69:37:c1:b7:a5:45:1e:
89:c8:ae:4d:8b:ae:91:ca:f4:75:fb:54:4e:ec:83:81:01:a1:
30:87:e8:ed:6a:35:5d:db:95:47:87:69:b1:28:68:bb:55:95:
5d:cc:49:50:1a:74:c8:25:65:46:45:36:a1:cb:45:64:53:76:
64:91:50:27:4a:3c:96:83:04:d7:73:cd:0d:34:ea:9c:20:30:
10:ab:22:c8:c3:35:15:8f:e3:75:63:2d:9b:7a:52:4b:56:59:
e2:ee:e9:3d:a4:fd:21:c9:53:ed:c7:93:46:ab:17:59:d4:6a:
79:cc:5e:87:21:67:d7:88:65:27:c2:93:bf:9e:6a:14:7b:a0:
f2:0b:aa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:28:51 2025 by rpki-client