Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NqS5VUS7dbVyOCZBBgFoFxgU0Hg.roa
File: NqS5VUS7dbVyOCZBBgFoFxgU0Hg.roa (raw, json)
Hash identifier: x6secXIyk351FgljD7rstn+kz214FC4N/OssAt1RWwE=
Subject key identifier: 36:A4:B9:55:44:BB:75:B5:72:38:26:41:06:01:68:17:18:14:D0:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188337E24551DAC180A9E4C0D0DC3408FB0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NqS5VUS7dbVyOCZBBgFoFxgU0Hg.roa
Signing time: Fri 19 May 2023 10:11:24 +0000
ROA not before: Fri 19 May 2023 10:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:7e:24:55:1d:ac:18:0a:9e:4c:0d:0d:c3:40:8f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 10:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36a4b95544bb75b572382641060168171814d078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:8c:f4:65:34:89:1b:9e:8a:7b:ea:e0:68:
be:75:44:9b:60:77:55:15:d3:34:e5:e0:d3:09:16:
5c:c6:0e:bb:49:55:e0:a5:d2:07:87:0c:aa:b8:c4:
ce:73:fd:23:d5:5d:4a:de:35:44:91:76:91:af:ff:
50:ff:14:04:fa:0a:aa:49:51:b6:96:1a:72:a6:a1:
54:63:cf:d2:1b:fe:65:7a:f7:ff:34:64:9d:4c:36:
ab:fc:78:33:66:0e:1f:54:2c:e1:79:99:22:f9:08:
3e:12:77:8d:48:ae:f6:56:d3:55:df:75:f1:ac:4b:
be:f9:c3:ed:24:9a:b7:e7:1b:a2:fb:8e:14:fd:50:
80:3f:8e:94:f7:f3:b2:d4:b0:6e:d2:ca:42:7f:80:
19:fa:cc:77:ed:34:11:09:e8:f6:fe:f8:79:84:51:
4f:01:1b:f8:8d:00:7d:c0:5f:69:d9:b1:19:4f:50:
f5:fd:c1:d6:b0:72:05:54:47:93:90:e1:e6:59:a5:
a5:77:12:17:80:f0:2a:cd:b2:b0:d8:52:11:4d:f3:
56:97:6b:00:fe:d7:bd:da:c9:2c:22:67:7b:a6:57:
bf:2c:cb:f5:80:a6:6b:9c:f3:39:5c:96:d7:34:6e:
3c:a8:5f:c4:61:51:1d:83:a0:a5:05:d4:15:7d:f9:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A4:B9:55:44:BB:75:B5:72:38:26:41:06:01:68:17:18:14:D0:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NqS5VUS7dbVyOCZBBgFoFxgU0Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:fe:38:62:87:da:5b:97:4f:12:1b:e4:2a:b2:0c:1b:48:6c:
8a:17:f6:5e:a6:b2:f4:dd:c8:63:ff:ee:bf:67:a2:bb:86:44:
cb:ea:24:0c:77:df:6d:45:a9:41:59:47:22:be:a9:76:c2:3f:
e8:cb:46:6a:14:9e:85:2b:8a:3f:10:28:b5:c4:99:32:45:aa:
8b:c8:b7:9d:81:db:37:56:fb:3b:96:05:a4:57:f7:5e:b8:8f:
cd:fe:7f:87:e5:53:50:39:40:92:53:46:30:79:d4:d5:2a:17:
60:69:c9:33:59:2c:4a:db:67:b6:63:da:54:13:80:2e:18:0d:
65:c9:35:da:8f:55:25:62:fe:c0:86:af:87:16:81:fe:80:fd:
96:65:8e:f9:1f:b3:63:cc:1f:b3:77:31:d5:f1:ff:34:86:88:
5b:43:9f:42:54:1c:6c:b8:28:4f:cf:ea:8a:aa:13:83:83:ec:
71:1f:98:53:93:19:65:c8:ed:6f:67:45:ee:e8:54:0d:06:28:
bb:70:29:7d:2d:86:e9:a4:11:c2:f1:42:b4:fb:50:c0:ec:a3:
64:93:1e:e1:17:eb:67:04:f0:16:a9:25:6a:6d:20:d8:6a:7a:
02:8e:9a:98:78:fc:83:0f:80:65:18:b8:01:48:c9:c0:0e:d0:
65:68:d4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:12:09 2025 by rpki-client