Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Np461DAmNhY5iS-izp5WUBnU6aw.roa
File: Np461DAmNhY5iS-izp5WUBnU6aw.roa (raw, json)
Hash identifier: EmzeXdOuOrATwg0IetftU996SZsIk7TBRbsE/3hmbyg=
Subject key identifier: 36:9E:3A:D4:30:26:36:16:39:89:2F:A2:CE:9E:56:50:19:D4:E9:AC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A3B55C985DAF51D059CE1E476AEB8B99
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Np461DAmNhY5iS-izp5WUBnU6aw.roa
Signing time: Sat 10 Jun 2023 05:09:11 +0000
ROA not before: Sat 10 Jun 2023 05:09:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a3:b5:5c:98:5d:af:51:d0:59:ce:1e:47:6a:eb:8b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 05:09:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=369e3ad43026361639892fa2ce9e565019d4e9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:2b:5b:b7:67:87:6a:31:7a:67:39:8a:fe:
d7:bd:1f:a1:b8:b0:fb:79:a4:19:69:1c:51:f7:2a:
63:8f:78:cd:81:d0:f2:c5:ec:e1:da:1c:8f:33:b3:
a8:81:eb:e0:05:5d:52:09:9b:af:38:a2:aa:c3:49:
65:a8:9c:12:9d:e5:6a:27:1b:9d:1c:f1:4b:52:25:
47:22:73:41:89:d1:86:37:77:40:82:03:f5:b6:a1:
37:20:48:29:44:67:75:a3:03:a4:be:71:3f:da:d0:
59:67:bd:3d:1a:db:cf:98:cd:32:f5:25:2a:4a:58:
9c:9c:2d:bd:40:e7:93:30:94:80:88:31:a7:6e:0b:
3f:c6:56:54:a1:96:cb:c2:67:78:39:f8:3f:90:f2:
7b:a4:f6:2a:23:c0:90:73:4b:20:ad:30:25:89:50:
03:16:7c:c1:89:e3:db:6b:9d:e7:b7:89:85:92:99:
4a:a8:6b:90:0b:c0:db:7e:a4:94:72:08:a4:40:f7:
57:89:3d:4d:fc:df:6f:fb:92:cc:43:ce:0b:a5:7f:
93:39:de:4f:5d:be:3b:7e:c7:da:10:3c:f2:c7:ba:
8a:5f:32:a8:0c:1b:7c:0b:16:11:0f:05:9f:fc:41:
a6:e8:e9:45:a4:16:46:8b:bb:1e:cd:38:1a:13:98:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9E:3A:D4:30:26:36:16:39:89:2F:A2:CE:9E:56:50:19:D4:E9:AC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Np461DAmNhY5iS-izp5WUBnU6aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:4c:d5:43:65:9c:56:e9:4e:2c:86:89:8d:45:ac:1b:f0:26:
59:b7:43:40:a8:e8:4d:2c:fc:3a:21:53:05:ce:ba:9d:3d:4e:
9f:15:8f:4d:7b:9b:d8:63:4f:ca:8d:03:6b:bd:a0:eb:23:07:
d8:f1:ce:04:99:34:78:34:b7:d2:6c:a2:20:bd:9d:97:a4:bc:
1f:f8:a6:cb:4e:8e:7c:af:d9:b5:95:81:36:c9:5d:cb:f4:f3:
89:af:84:2d:9b:95:10:6c:68:47:a8:3b:e9:91:0d:f5:9e:59:
41:1a:e1:e8:7f:83:f8:cc:21:3c:a3:a8:48:88:7f:0e:40:22:
89:d1:88:2e:bb:c0:f9:2e:ad:39:01:2b:7d:c1:f6:80:55:70:
3f:b0:56:36:a6:08:d2:be:d8:5c:c3:c9:6b:07:9a:80:f1:72:
a6:5c:66:60:b6:27:48:4f:31:64:13:47:d7:fd:c8:04:5d:f6:
a0:12:a4:ac:9a:96:0e:cb:aa:34:d3:c6:26:6a:4c:65:50:eb:
b2:99:48:82:71:9e:63:38:20:f9:96:be:1b:e1:db:c9:89:cc:
51:71:17:7f:3e:85:ea:df:3a:e3:12:0f:66:15:c6:72:01:9f:
a0:fd:07:d5:3e:01:a5:d2:41:df:4f:21:c7:96:5f:db:55:e0:
15:b2:da:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:12 2025 by rpki-client