Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NsTKZ8Ovfgi6vtpL6M3USJcbMzY.roa
File: NsTKZ8Ovfgi6vtpL6M3USJcbMzY.roa (raw, json)
Hash identifier: OjlqW8VQPyjVw5JKCr5kLuaHGXWIlW/F62Rdw5dZg38=
Subject key identifier: 36:C4:CA:67:C3:AF:7E:08:BA:BE:DA:4B:E8:CD:D4:48:97:1B:33:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6AA997F5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NsTKZ8Ovfgi6vtpL6M3USJcbMzY.roa
Signing time: Tue 15 Feb 2022 01:09:46 +0000
ROA not before: Tue 15 Feb 2022 01:09:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1789499381 (0x6aa997f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 01:09:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36c4ca67c3af7e08babeda4be8cdd448971b3336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:6d:27:58:1c:66:38:95:eb:a9:f9:57:02:
10:f6:c1:f6:58:1e:5e:c7:50:76:bd:45:bc:00:c2:
fa:8d:c5:29:5b:bf:a3:52:72:66:bb:5a:b1:60:3d:
ae:76:5c:ea:90:89:80:db:f9:42:e7:90:9a:a0:a5:
68:3c:2e:34:10:45:68:b7:e7:31:36:20:8b:9e:e0:
c9:72:68:4d:f9:df:a4:c0:16:cb:c0:f2:86:e7:88:
93:a1:2f:37:20:ee:37:b6:08:ae:33:06:70:e7:07:
dc:0b:31:37:fd:78:db:7b:eb:f5:12:49:ae:1c:85:
92:10:b6:20:c3:3c:dc:8b:7e:f8:03:dc:6c:c6:02:
14:e8:fa:4f:1f:36:9f:60:3a:e9:1b:24:f2:15:0a:
d3:db:5f:e4:36:da:0b:65:45:db:d3:24:00:0a:b2:
4a:8d:64:10:aa:58:1a:8e:60:61:4e:f3:9a:56:2c:
bf:fb:d9:51:cc:a3:35:15:e0:10:90:c7:27:7c:1c:
23:ae:93:bd:94:52:5c:fb:bf:72:1c:2e:ed:eb:43:
20:cd:0a:0a:46:d1:24:d3:bb:23:98:5d:eb:ad:c2:
26:96:df:98:25:8f:52:5e:7e:55:1c:cb:a9:8b:10:
33:b2:a4:c0:8f:43:59:40:41:8e:47:fd:41:84:bd:
02:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C4:CA:67:C3:AF:7E:08:BA:BE:DA:4B:E8:CD:D4:48:97:1B:33:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NsTKZ8Ovfgi6vtpL6M3USJcbMzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:b5:63:84:63:63:1a:46:1d:28:3f:04:85:f3:95:49:89:0e:
d9:ac:13:15:1e:34:d1:a3:c3:8f:7b:47:bf:a1:ff:de:93:33:
05:39:86:24:d6:4d:62:61:dc:2e:ae:2d:b0:e4:11:1b:33:11:
32:5d:a6:31:db:e1:66:29:d8:3d:8e:af:f2:9e:6c:4f:3a:19:
19:99:17:84:4d:97:62:67:e1:1d:9d:0b:33:3b:46:4a:23:f0:
42:eb:9d:67:05:dc:6b:52:e1:97:e4:83:e1:ca:98:5d:5b:f6:
fb:95:9d:38:dd:29:21:40:59:61:74:84:e6:17:16:4a:18:b6:
58:c9:fa:ee:29:56:26:e6:d8:8b:f1:06:4d:14:98:a8:81:ba:
55:82:3a:f3:e3:de:09:af:13:30:93:34:31:5a:55:74:e6:29:
7b:cd:7d:68:42:a0:92:30:1c:ec:6d:98:6c:ae:3f:84:94:60:
83:af:43:54:ae:c1:bc:06:a9:2e:57:d6:82:c4:7c:6f:15:cc:
cc:32:2b:76:9a:26:fc:e4:eb:0f:be:8d:d2:b4:41:47:0e:f0:
07:d0:14:1b:b0:73:88:40:b4:27:92:af:be:b8:1f:b7:69:a3:
51:ef:92:bf:8f:03:45:13:ca:15:e3:1b:a9:14:01:ee:5d:d4:
af:80:13:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:20:26 2025 by rpki-client