Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nq-26-mYHbnoGuZWbkuAY2IeRAg.roa
File: Nq-26-mYHbnoGuZWbkuAY2IeRAg.roa (raw, json)
Hash identifier: iUrIRTLLUodWNjw3nHqcGW7Rd4MN79pOD9nRnN+NNFI=
Subject key identifier: 36:AF:B6:EB:E9:98:1D:B9:E8:1A:E6:56:6E:4B:80:63:62:1E:44:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01862B928B88D5493DC5A3087FDA24660472
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nq-26-mYHbnoGuZWbkuAY2IeRAg.roa
Signing time: Tue 07 Feb 2023 11:11:09 +0000
ROA not before: Tue 07 Feb 2023 11:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:92:8b:88:d5:49:3d:c5:a3:08:7f:da:24:66:04:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 11:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36afb6ebe9981db9e81ae6566e4b8063621e4408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:c1:bb:6d:b7:70:76:dd:3c:50:1e:c2:d7:
87:ba:af:2d:c5:45:39:b5:2c:ce:5d:f4:0f:03:77:
f6:32:81:9c:10:22:c1:a6:f1:94:b0:df:28:b1:e0:
23:08:0a:6f:c6:93:e2:7f:8a:bd:dc:d4:f5:fd:b1:
a9:c6:a8:57:d1:53:bb:8f:c7:b9:93:05:3a:fd:c5:
2a:87:2f:1a:5f:ff:43:49:2a:f4:3e:49:cc:82:2f:
39:bd:e4:92:22:0b:64:85:01:44:f2:bc:74:fe:77:
cc:07:99:4f:0a:4e:47:0f:56:6d:07:1c:05:54:c5:
69:04:10:71:35:f4:ae:f9:70:08:3f:47:81:2e:f6:
33:51:85:68:da:a2:d4:03:c3:bf:3f:44:ad:c8:a9:
4a:8f:08:5f:ca:29:77:a3:04:94:7b:b9:b5:9d:e7:
87:a3:7b:62:93:b8:96:9e:71:5a:07:18:cf:23:cd:
85:f3:81:00:f4:16:ff:0c:18:be:8c:3f:c6:33:bd:
73:cc:38:1f:6d:53:31:b2:54:b5:55:d2:ea:11:23:
fd:bb:bd:de:4e:1a:1e:55:08:29:e9:b7:d6:43:fe:
9e:5e:de:a0:6d:55:aa:5a:4c:df:89:92:ba:eb:7f:
54:18:e2:35:ac:45:29:91:bd:62:d9:29:c6:3a:11:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AF:B6:EB:E9:98:1D:B9:E8:1A:E6:56:6E:4B:80:63:62:1E:44:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nq-26-mYHbnoGuZWbkuAY2IeRAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:d1:b4:17:f9:c9:9b:64:68:82:9f:2b:4f:f5:b4:97:4e:ee:
7c:58:7f:92:3e:db:7d:42:e1:25:e8:17:04:36:e5:b7:c4:b9:
6f:a7:e2:0b:fc:fa:df:2f:40:9f:92:76:98:db:28:2c:3d:e0:
4a:96:1e:f6:69:04:7f:99:4f:2a:a0:10:21:0b:93:9a:6b:51:
65:e2:00:d9:82:15:c8:29:83:85:1b:fc:18:bb:5c:6e:1d:a5:
d8:ec:6f:50:6d:d3:a0:a5:3c:76:16:d2:f3:3e:6d:64:58:9d:
4c:4e:f6:a6:a3:64:88:2d:4c:39:cf:c7:73:7d:3c:ef:18:31:
50:0e:26:51:a2:c4:dd:5a:35:e0:d7:b0:56:14:60:6b:43:3b:
c8:e3:47:8e:2b:b3:74:a6:41:90:28:60:1b:f0:32:54:97:3d:
ef:8a:68:a7:00:0e:a2:6d:f3:78:4d:0e:93:37:12:99:2b:df:
67:81:89:09:8f:c5:06:e5:d7:8d:75:02:0b:a6:56:8a:30:44:
fa:c6:be:e3:24:9c:c3:60:34:dd:4e:e4:c2:6c:5c:c4:81:e7:
a1:dd:79:e0:70:0c:85:eb:d9:dc:c3:25:72:59:6f:eb:9f:1b:
4b:5c:44:9d:e4:c1:99:2a:fd:48:35:98:86:e0:35:aa:92:9f:
e2:e4:14:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:32 2025 by rpki-client