Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NtsB3Swd4MggW_t_1_M3ZnzL_vY.roa
File: NtsB3Swd4MggW_t_1_M3ZnzL_vY.roa (raw, json)
Hash identifier: MPhrVbM9V4GNXwT9jUoVJ0L1botF9776AeLPp3NmXPA=
Subject key identifier: 36:DB:01:DD:2C:1D:E0:C8:20:5B:FB:7F:D7:F3:37:66:7C:CB:FE:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E33BD977EBD07806BBEB7B84D0B84DF0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NtsB3Swd4MggW_t_1_M3ZnzL_vY.roa
Signing time: Wed 03 May 2023 20:09:23 +0000
ROA not before: Wed 03 May 2023 20:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e3:3b:d9:77:eb:d0:78:06:bb:eb:7b:84:d0:b8:4d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 20:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36db01dd2c1de0c8205bfb7fd7f337667ccbfef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d8:e7:bc:da:e2:6d:7c:b9:61:c4:0c:5b:58:
a2:f1:91:f9:b5:7c:e7:5e:12:5e:2d:b5:bf:70:05:
81:26:3e:c0:08:93:95:05:25:18:64:3e:1b:db:0b:
38:4a:f4:2f:65:d6:a5:dd:74:76:82:73:18:61:11:
53:d9:ad:53:b8:7b:e0:86:21:e1:46:69:47:3f:4d:
f4:3c:6b:c9:e5:07:ed:ad:81:00:21:06:a2:55:7d:
a4:58:22:75:f7:65:5f:a6:95:59:d0:ce:61:51:1c:
bd:db:9f:a0:49:a5:f8:d8:06:15:08:27:c9:fd:c2:
02:63:49:26:4f:6c:b3:92:98:a7:ae:86:fb:d7:0a:
ec:94:f4:b2:a9:e5:0a:30:0a:57:0b:60:a3:1c:fc:
df:ac:00:62:aa:9f:dc:4b:ab:b6:02:64:64:ce:f2:
45:a9:b0:af:31:8b:85:cb:1b:e3:bb:a8:b4:80:cc:
3d:15:b7:34:44:d2:32:28:01:f9:5d:a8:22:da:80:
ff:f2:62:58:77:95:a5:f5:d4:13:bc:d7:b9:fc:d0:
24:37:3d:a6:6f:c8:55:8f:2c:ce:8f:e9:f3:16:0c:
f8:75:79:52:ee:b5:d9:64:fe:63:aa:16:4d:98:50:
7c:b6:cd:67:f7:ce:a7:50:41:33:67:a9:d7:31:17:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DB:01:DD:2C:1D:E0:C8:20:5B:FB:7F:D7:F3:37:66:7C:CB:FE:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NtsB3Swd4MggW_t_1_M3ZnzL_vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:9a:d1:ab:47:70:f7:04:54:23:17:a0:de:0c:cb:f7:27:37:
7b:1b:9a:c4:86:67:ed:a2:b9:4f:ad:b8:b1:fa:6e:95:4a:61:
71:d8:ed:f7:46:4e:5f:45:2f:a9:12:73:e2:3a:cb:49:69:e3:
9b:08:31:75:bd:19:e8:b8:ed:0e:76:5e:50:bc:cb:0d:f5:e6:
68:ad:90:55:a7:e7:e8:0f:1d:b7:47:e9:ab:9a:34:89:95:eb:
ec:21:95:29:4b:5c:1e:cd:33:99:f6:82:c7:18:72:75:01:44:
67:e3:ed:c6:ef:ee:a6:a4:44:88:ee:f5:4b:ec:73:75:3b:c5:
a2:d9:33:30:a1:67:53:b6:b1:1e:c4:33:f2:ad:90:2c:bf:5a:
94:9e:1a:02:85:69:f3:b7:2b:4b:5b:cd:15:0c:27:6d:ea:5d:
1b:27:63:00:4c:be:9b:6c:5f:f2:24:a5:ca:2f:25:21:43:6f:
53:6b:b6:26:70:6d:00:65:60:03:0d:9b:88:43:93:56:ca:f2:
eb:74:ec:18:33:72:60:12:c5:a0:6a:e5:19:ac:94:03:b3:67:
30:f9:fe:15:59:e8:15:31:19:81:3b:d8:78:34:13:26:7d:1e:
0b:bd:d9:66:79:ac:06:6e:d4:25:da:c4:10:53:61:0b:9d:c7:
1a:45:07:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:12 2025 by rpki-client