Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Num-xaUobhuoZ2NmaxqPrXr3Nr8.roa
File: Num-xaUobhuoZ2NmaxqPrXr3Nr8.roa (raw, json)
Hash identifier: 6gJ4AZZEU8UMcdq/i3esQOFlb6cZWRPr6uE7OCoW1FY=
Subject key identifier: 36:E9:BE:C5:A5:28:6E:1B:A8:67:63:66:6B:1A:8F:AD:7A:F7:36:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DEF83605AB178EA30D2AA1E19AAC213A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Num-xaUobhuoZ2NmaxqPrXr3Nr8.roa
Signing time: Tue 14 Mar 2023 07:14:14 +0000
ROA not before: Tue 14 Mar 2023 07:14:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:de:f8:36:05:ab:17:8e:a3:0d:2a:a1:e1:9a:ac:21:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 07:14:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36e9bec5a5286e1ba86763666b1a8fad7af736bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:60:1d:ff:fd:8f:98:bf:93:15:39:d7:e5:03:
07:72:8c:8c:46:78:b5:ac:82:56:ee:4b:7a:68:33:
66:1f:ec:1d:4f:44:9c:f1:1f:4b:1f:c3:5f:82:64:
2a:7e:05:fc:81:4d:39:72:b0:76:6a:48:ab:bc:60:
11:93:20:a3:dd:02:7e:c7:62:d7:5f:34:62:5f:bf:
05:c2:35:40:d7:e7:ec:c9:43:cb:3e:10:18:dc:02:
8a:39:cd:d6:ae:f5:d7:39:c3:99:40:72:7c:7b:a5:
6a:52:03:c8:c0:26:48:8e:cc:dc:ab:59:90:44:58:
5e:e7:e2:36:46:32:b5:be:78:26:f7:d9:64:5b:3d:
f7:48:05:a5:8f:29:45:00:b0:c4:49:73:7b:b0:ac:
4c:9f:f1:19:68:29:94:d6:11:1b:03:b7:fa:3f:d4:
93:8f:97:5c:f2:9b:77:91:45:45:7a:8f:69:dc:3a:
d6:17:7c:d7:15:3e:bb:2f:80:d9:c5:36:22:43:b3:
d1:44:f8:e7:b2:2f:f2:a1:26:66:ef:e7:96:9c:c0:
ac:fa:86:bb:a6:4a:75:e2:d4:61:76:d4:5c:39:f1:
6d:75:ac:45:83:a3:4d:b0:b5:8d:40:3e:a3:3a:e6:
ad:a1:98:05:09:56:40:cb:5a:04:37:26:6a:5d:97:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E9:BE:C5:A5:28:6E:1B:A8:67:63:66:6B:1A:8F:AD:7A:F7:36:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Num-xaUobhuoZ2NmaxqPrXr3Nr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:86:31:dc:12:08:0f:cd:b4:94:1d:af:2e:14:64:51:62:5f:
1e:03:0e:76:eb:44:b7:84:34:af:67:94:df:3f:f1:a7:38:87:
ff:ca:6e:d4:21:bd:2a:08:ab:e5:95:88:d1:89:c5:9d:12:56:
77:32:78:f6:b8:0f:6d:b8:d0:e7:81:33:01:f5:c5:48:57:4e:
e3:f1:7a:30:ac:e2:63:36:32:3b:ec:c6:80:63:d3:ac:c0:53:
84:22:ef:36:24:fe:f7:84:52:e5:29:fc:18:9a:e6:2a:fc:0e:
58:ad:8d:78:74:44:0e:a3:97:2c:07:1a:ee:af:4a:e5:d4:09:
2f:11:9b:4b:e7:60:d3:40:a4:60:13:7d:0a:55:86:f7:93:a2:
fb:bb:af:5f:ab:45:e5:ac:51:25:a3:d7:7e:aa:24:c9:98:37:
73:41:2b:b2:ba:fd:a7:ca:1f:08:d5:80:71:25:d4:2e:34:02:
f8:5a:28:c6:44:58:59:d3:97:88:26:55:5a:fa:51:b7:79:72:
96:e4:cd:27:0c:9e:77:b8:bc:16:22:97:a1:1e:81:9f:47:2f:
43:df:af:b3:98:a2:55:18:eb:30:81:35:74:09:90:bc:41:75:
c5:19:da:49:47:a7:59:b9:a3:ee:d0:5e:3f:f6:44:8a:b2:49:
f5:7d:68:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:10:52 2025 by rpki-client