Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NuL9VYKcVKeP27IR8WN6uPK49f4.roa
File: NuL9VYKcVKeP27IR8WN6uPK49f4.roa (raw, json)
Hash identifier: Mqdnh4CK9pPFinTVYufDbRRKZqLqqHRJnGQcBJUCN+g=
Subject key identifier: 36:E2:FD:55:82:9C:54:A7:8F:DB:B2:11:F1:63:7A:B8:F2:B8:F5:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184A3C60CCD1BDD4711059238F4E05B24B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NuL9VYKcVKeP27IR8WN6uPK49f4.roa
Signing time: Wed 23 Nov 2022 09:16:16 +0000
ROA not before: Wed 23 Nov 2022 09:16:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:c6:0c:cd:1b:dd:47:11:05:92:38:f4:e0:5b:24:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 23 09:16:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36e2fd55829c54a78fdbb211f1637ab8f2b8f5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:c1:40:6c:33:44:d8:f6:09:ec:4b:92:0f:
63:67:32:f2:db:42:29:17:e6:27:38:42:1c:65:20:
fe:d1:e3:35:ac:00:4e:40:c5:4e:84:cf:fb:17:0c:
c3:2f:1d:63:b0:4c:ac:ad:ea:5f:f9:c8:99:74:3c:
b7:7e:84:e6:f0:d1:31:cc:6c:b8:bc:e9:64:ee:10:
d1:32:25:20:3d:a0:97:1a:ca:fc:ec:fa:e3:ea:40:
1c:4c:e2:2d:99:05:61:0b:1e:77:df:3a:c4:77:95:
7c:b0:7a:2e:fd:bc:b6:79:12:10:11:55:a0:9b:45:
31:b0:9a:ab:d1:37:d5:7d:ac:d0:6d:ee:0f:d7:94:
3a:24:4a:7e:3c:8a:7e:8b:8e:3a:27:4c:b5:bd:c6:
36:29:df:2f:fa:69:d0:16:34:34:e9:c3:26:db:97:
01:6f:e3:30:7f:6d:fb:5d:b4:96:0f:cf:dc:83:1a:
8d:d7:7e:aa:91:89:c1:48:ec:93:78:13:82:24:fe:
0e:0e:2d:12:b7:1b:88:7c:82:15:e1:b6:49:5b:e6:
3f:96:27:d1:f5:d3:02:4b:b7:c6:fa:85:11:e5:77:
fb:2a:78:c0:89:42:1d:00:83:a9:b0:17:3c:5f:84:
db:f4:26:e3:41:2f:d8:03:7b:fb:dd:81:b6:1f:e8:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E2:FD:55:82:9C:54:A7:8F:DB:B2:11:F1:63:7A:B8:F2:B8:F5:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NuL9VYKcVKeP27IR8WN6uPK49f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:32:99:8a:44:5d:a5:44:11:f4:db:e7:fb:71:50:68:44:24:
6f:81:cb:d7:8d:f9:b1:79:79:b1:4f:1e:02:50:e2:17:7b:7e:
84:be:f1:57:bf:4d:43:82:86:a3:2d:d8:30:a0:66:31:17:59:
f6:80:19:9e:2f:bb:f5:ec:b0:d3:64:f1:f7:59:9b:e3:fd:c9:
dc:ac:93:b3:cc:e6:e0:8e:a5:bd:79:fc:ca:8d:9b:2d:a8:89:
8e:26:e1:d6:a9:30:91:7d:dd:fe:f4:23:3a:60:fc:4c:a0:35:
52:df:5f:34:64:53:57:8d:e8:5b:96:e9:b2:77:37:d3:3c:31:
6d:2e:13:79:85:0b:dd:5a:7c:76:e1:6a:cd:83:95:19:3a:29:
20:45:16:c2:0d:dc:8b:24:b3:65:d2:2d:6e:4b:a7:a9:38:e5:
b2:3b:6b:96:e3:b4:72:05:65:8b:9f:6f:23:fd:cc:00:b4:5f:
ef:21:12:d1:f4:e5:3e:4e:c3:55:02:cc:d1:c3:a9:25:84:c7:
52:6a:f1:b6:6f:ce:cd:93:8a:d1:da:70:2d:ae:14:5a:07:9e:
ac:a9:6c:68:47:b5:fc:38:b4:58:c3:eb:1b:96:6c:f5:39:cc:
60:22:23:cb:30:c7:2e:eb:7f:fe:72:74:d2:a5:f2:00:03:b4:
cd:0f:a0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:26:55 2025 by rpki-client