Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NtTL-xROjmLS6l4lgOOWMvRcx6c.roa
File: NtTL-xROjmLS6l4lgOOWMvRcx6c.roa (raw, json)
Hash identifier: M9QLNXJEWTw2HMG5nrzrKE/4hl6PFqfuYl76fOvOVbE=
Subject key identifier: 36:D4:CB:FB:14:4E:8E:62:D2:EA:5E:25:80:E3:96:32:F4:5C:C7:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018262C2B43CD20F085CE4DEFC782A83B06F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NtTL-xROjmLS6l4lgOOWMvRcx6c.roa
Signing time: Wed 03 Aug 2022 08:11:43 +0000
ROA not before: Wed 03 Aug 2022 08:11:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:c2:b4:3c:d2:0f:08:5c:e4:de:fc:78:2a:83:b0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 08:11:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36d4cbfb144e8e62d2ea5e2580e39632f45cc7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:a5:e4:e5:e7:2f:a6:7f:f8:00:ea:c3:84:
b2:de:d4:e8:03:ab:ad:61:92:a8:d3:7f:d9:ef:11:
39:42:09:9c:32:62:7f:10:c7:8c:35:e2:ef:88:02:
57:b2:2f:e0:ff:80:a5:b0:fd:ec:60:7f:4e:c2:d2:
10:1e:d8:69:95:29:bd:a2:18:18:96:60:2f:44:54:
61:ac:3d:56:99:13:7c:22:5b:14:54:cf:57:9e:a8:
3f:9b:2f:36:07:9e:67:cf:51:51:54:77:94:82:31:
da:bf:99:f4:6c:0b:b2:07:6f:fb:98:2d:88:2b:d4:
b7:d4:f4:22:3b:9f:a8:67:54:2e:aa:a0:37:36:5c:
ce:37:c4:41:53:e3:15:69:5a:f3:bb:8d:1e:07:15:
44:89:f4:f2:1c:6c:a7:bb:40:e9:89:29:17:34:9a:
bd:9b:ba:a1:ba:68:ee:7f:6b:db:1d:63:74:5e:c4:
ff:24:d1:70:29:3f:74:8b:0b:b2:b4:d4:5d:de:40:
e1:87:06:a0:c3:a2:db:dd:cd:ed:bd:82:b1:fd:66:
68:48:39:bc:6a:a4:8a:16:f7:8c:9f:23:cb:88:3d:
52:1b:43:94:fe:92:8d:fe:01:d3:8c:28:52:ea:04:
2b:67:7a:17:e1:5f:69:c9:7b:5c:58:3c:b7:1e:55:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D4:CB:FB:14:4E:8E:62:D2:EA:5E:25:80:E3:96:32:F4:5C:C7:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NtTL-xROjmLS6l4lgOOWMvRcx6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:2a:66:7e:d7:03:65:60:05:8a:d1:39:ed:43:fc:6b:a7:9a:
0a:b8:9c:e1:59:08:85:38:47:f3:2b:07:0b:af:59:29:d9:70:
6e:8f:e0:39:74:b5:b0:91:a6:06:bd:b0:ec:98:9b:fe:83:56:
0e:5c:cf:14:b0:0f:6c:0c:a4:9e:6e:d4:55:d9:bb:54:c7:ff:
60:47:30:a7:98:10:5f:fa:2d:41:da:27:ec:49:e8:6b:26:5a:
ad:7d:0b:c2:7d:c0:0e:8b:27:e0:69:19:3b:b1:17:47:72:f1:
8e:60:8c:19:df:60:ea:8f:9d:4e:21:7b:05:a2:80:30:b4:62:
81:06:f6:a8:09:b5:90:94:cd:82:c3:53:7e:95:04:9f:a7:c1:
9e:bb:06:d3:7d:f6:ba:f3:b3:e7:d6:e0:e4:86:13:c6:d4:c8:
f4:a0:cc:49:93:4b:c7:bc:55:bd:19:9c:94:55:38:55:f4:fe:
7b:65:a6:63:91:77:7c:82:57:4e:6f:4b:bb:47:08:c7:ed:a5:
22:3f:b3:84:bd:4a:0a:2b:df:cb:52:66:7d:ac:2c:2d:f2:a1:
c4:ed:a0:68:22:0f:51:13:c9:d9:b3:be:a8:3c:31:0e:30:7a:
f1:32:9e:04:26:e2:ba:1f:0e:f7:72:3f:51:1e:64:96:fd:be:
17:2e:44:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:33:07 2025 by rpki-client