Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NtynzpjrGARcFeHCeWnXqQSPGtw.roa
File: NtynzpjrGARcFeHCeWnXqQSPGtw.roa (raw, json)
Hash identifier: aog0mBhORNVWzyS8cS9g4ZheQjL97BcoSqS8p5B+SXc=
Subject key identifier: 36:DC:A7:CE:98:EB:18:04:5C:15:E1:C2:79:69:D7:A9:04:8F:1A:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018639BB180E74BD9CF7BDC37EC339524A1F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NtynzpjrGARcFeHCeWnXqQSPGtw.roa
Signing time: Fri 10 Feb 2023 05:10:07 +0000
ROA not before: Fri 10 Feb 2023 05:10:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:39:bb:18:0e:74:bd:9c:f7:bd:c3:7e:c3:39:52:4a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 05:10:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36dca7ce98eb18045c15e1c27969d7a9048f1adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:9a:9b:84:e1:44:68:8e:a4:a1:f4:27:c6:
5a:3f:b8:5c:f3:67:49:c4:d3:d9:ea:2b:a2:cb:0c:
bd:58:37:07:b5:2b:a5:f4:ce:cd:1e:e7:5a:c6:2c:
50:c2:79:ff:0b:08:7e:f5:7c:f0:21:bc:8f:72:5d:
99:74:47:8d:8c:a4:33:5a:2f:6d:37:02:60:d0:b4:
81:65:d1:0c:76:e7:0a:d9:6c:c1:11:f5:64:4e:92:
73:49:66:a0:c7:17:5d:9d:da:36:eb:14:c8:9d:c0:
3f:4d:41:53:a6:7c:6d:38:50:3c:5c:ec:0b:52:95:
c3:ac:30:3f:d3:f2:4c:4e:f9:ef:89:9f:0a:4f:75:
2b:c6:1b:f0:68:c4:b9:1e:16:a8:4b:6e:8a:5c:b1:
5b:94:b3:8b:7e:41:70:eb:b7:cd:72:8f:10:92:1f:
cd:05:fe:bd:91:57:1a:26:ee:b0:9f:10:0b:11:6c:
98:49:3b:ae:bc:3f:38:e0:d5:57:55:ee:c7:88:6a:
1a:13:69:d7:85:41:0c:c6:40:ce:a0:4c:42:95:62:
cf:b5:d0:99:10:a7:21:87:16:25:f4:25:69:65:76:
07:d9:26:51:a8:97:02:4d:3a:e3:20:17:62:95:58:
0f:b4:91:26:09:6b:6b:b6:c5:44:21:5e:f9:56:a7:
7c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DC:A7:CE:98:EB:18:04:5C:15:E1:C2:79:69:D7:A9:04:8F:1A:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NtynzpjrGARcFeHCeWnXqQSPGtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:89:0e:f2:7e:b8:f7:42:a9:19:eb:38:03:eb:84:b4:7a:c5:
29:03:59:d4:4b:b6:6e:ae:8f:ae:25:c4:75:3d:af:d2:e1:77:
41:f9:a3:aa:17:37:47:cb:42:82:e5:c9:58:91:08:da:96:39:
5c:b6:ce:b0:5e:0c:c1:37:73:c7:5e:ed:b6:5e:8b:7d:81:0b:
11:6b:02:43:52:e8:7e:5c:f1:1b:03:f8:d4:b6:d9:74:a2:09:
4a:09:41:06:48:1e:4f:65:30:91:59:37:24:76:25:30:a0:b3:
5d:af:ae:6d:a0:d5:66:20:f0:e0:8d:c7:fc:39:84:01:66:92:
07:e1:04:3e:c4:28:14:7d:6b:49:40:bb:01:50:88:10:78:0e:
7e:7a:6b:01:12:5f:6c:50:49:28:41:1c:54:a3:7a:86:94:3a:
de:01:55:0a:28:3e:a2:97:29:a8:89:46:c9:57:93:42:b2:3e:
34:19:f9:c4:6f:d1:01:75:82:d8:c3:db:c1:af:58:be:eb:e1:
01:2d:57:d7:a3:6f:11:0f:7d:3a:c1:62:b2:06:a5:20:be:ad:
cb:e9:7a:49:b1:b3:a4:4a:44:6b:a4:07:7b:c8:f1:d5:56:62:
e8:8c:bb:9e:9d:ba:f7:23:8b:5d:d5:46:8c:7f:26:6a:3d:f2:
79:45:7c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:04:50 2025 by rpki-client