Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NtEQg7DRLPLhgk1Ki9Hw_SrQMfE.roa
File: NtEQg7DRLPLhgk1Ki9Hw_SrQMfE.roa (raw, json)
Hash identifier: 0lVnQcUF8sDSWcPKqbXetz+jdW8j34xR2xPSUtfW+yY=
Subject key identifier: 36:D1:10:83:B0:D1:2C:F2:E1:82:4D:4A:8B:D1:F0:FD:2A:D0:31:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E269B8CD9C1B29820E94CAF4189DF320
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NtEQg7DRLPLhgk1Ki9Hw_SrQMfE.roa
Signing time: Mon 05 Dec 2022 13:11:29 +0000
ROA not before: Mon 05 Dec 2022 13:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:69:b8:cd:9c:1b:29:82:0e:94:ca:f4:18:9d:f3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 13:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36d11083b0d12cf2e1824d4a8bd1f0fd2ad031f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:48:f3:14:05:09:bc:d4:1d:01:35:d2:9d:
39:ae:86:2f:33:b8:41:84:6a:1f:f5:a0:16:41:35:
50:31:9f:5f:90:9a:02:ad:93:c5:a4:14:7a:ad:8a:
df:c9:61:81:8c:ce:be:e7:12:65:51:1c:8e:2e:39:
fb:b5:16:ab:9d:1a:ed:4a:dc:ce:e2:a1:36:34:e9:
5f:ab:10:ee:6b:69:68:cb:c6:9e:9c:d7:58:82:00:
2c:bb:5c:b0:c0:99:98:bb:81:21:0d:5d:31:8a:3c:
78:d9:f8:6e:13:d6:28:da:b4:89:d7:d5:a6:54:3b:
c5:3f:36:5a:d8:9a:39:d9:63:0d:25:fb:0c:88:d4:
45:2c:6f:7f:d2:a9:2a:b8:64:98:47:47:62:52:85:
79:ce:3d:ef:ae:40:20:fe:08:ae:73:23:32:d4:08:
f6:49:97:6c:19:db:0c:37:d0:fe:6c:34:19:ed:85:
0a:78:da:42:6c:b2:36:cb:0a:b1:1b:24:88:e2:dd:
87:8d:37:58:d6:2c:4d:68:fd:79:7f:12:b2:e0:db:
2a:d2:4f:28:b7:34:96:b2:77:23:77:7c:84:4a:05:
41:91:c5:85:77:17:be:cd:34:8c:91:c3:de:de:d2:
4b:aa:35:95:5e:76:0c:70:db:9e:c5:9e:bc:a0:63:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D1:10:83:B0:D1:2C:F2:E1:82:4D:4A:8B:D1:F0:FD:2A:D0:31:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NtEQg7DRLPLhgk1Ki9Hw_SrQMfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:95:f9:f4:cb:31:df:95:9e:4e:9a:f6:49:c6:c7:b0:a1:a8:
17:0a:c6:2c:40:02:e8:59:e9:cd:92:ae:87:00:1d:00:37:d0:
00:46:6a:40:3a:c0:17:04:17:fb:0c:1a:1d:ec:dd:8c:5d:4a:
dc:52:b6:a4:86:78:8d:db:10:ac:38:08:32:ec:e6:f0:32:64:
81:8e:9c:4e:da:3b:ea:93:b2:13:88:1c:f3:c0:33:94:12:b8:
79:00:65:ae:a8:fe:c7:fd:b5:66:75:a3:0b:ce:33:5f:35:ca:
90:90:b1:27:8d:1e:04:2d:30:e4:75:d9:f6:5f:f7:06:7e:e3:
99:3f:63:ec:0c:5c:b1:dd:d4:9d:c5:dd:68:54:ec:97:1a:80:
df:35:21:85:0c:14:6f:f5:82:df:b0:b7:0f:ce:61:cb:90:4b:
51:76:e1:07:94:38:07:d0:80:07:92:85:d6:70:ea:00:ba:8a:
95:17:5c:33:cb:3c:bb:44:3d:51:02:34:ec:57:ff:41:72:87:
8c:30:36:24:3a:e1:76:19:cd:2e:08:da:56:22:ae:66:91:da:
af:0b:95:bc:fe:52:34:e6:22:fe:06:ed:e2:f3:b4:ec:46:80:
e9:f7:73:40:57:50:7e:9f:1f:16:57:ca:ab:22:5f:56:70:dd:
ff:a2:99:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:10:04 2025 by rpki-client