Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nuroep1yDJlG9OpBWfzdorrVLW4.roa
File: Nuroep1yDJlG9OpBWfzdorrVLW4.roa (raw, json)
Hash identifier: dLjk2EKRUwZmGBehCQLBBXl0SjghiU9PI3oy5DLsv50=
Subject key identifier: 36:EA:E8:7A:9D:72:0C:99:46:F4:EA:41:59:FC:DD:A2:BA:D5:2D:6E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8EBCC56D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nuroep1yDJlG9OpBWfzdorrVLW4.roa
Signing time: Tue 21 Jun 2022 17:10:44 +0000
ROA not before: Tue 21 Jun 2022 17:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2394735981 (0x8ebcc56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 17:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36eae87a9d720c9946f4ea4159fcdda2bad52d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0a:84:1d:f4:02:53:e8:f6:28:b8:bc:c0:1d:
ca:36:1f:d3:b1:88:06:3e:6d:45:01:26:6b:48:ae:
17:9f:76:e0:d4:b3:aa:41:b3:fc:42:b1:38:50:ce:
d3:76:e5:9b:a4:2d:d8:b7:fb:9f:aa:1c:59:72:e5:
7b:06:b6:12:73:a5:38:f3:e1:6e:52:f7:db:1b:29:
f6:e5:8d:be:60:b9:92:fa:97:5e:55:27:1d:a4:59:
84:2d:a7:84:97:50:aa:cc:e2:2c:fb:14:1e:de:1c:
f9:ee:6f:69:af:ea:7b:2c:24:31:e1:74:b9:c2:d6:
2d:f4:a6:f0:f6:4c:91:ef:c5:82:cc:c5:11:b6:64:
e4:b4:7a:3a:e7:66:0c:82:3a:fa:e0:0e:1c:4f:65:
28:00:84:0f:76:3c:74:7b:82:98:4c:25:71:82:e4:
de:11:8e:47:4e:1e:71:28:64:c9:2b:b7:b3:da:bd:
31:0c:33:dd:bf:20:d7:0e:9a:61:88:a2:fc:74:b9:
a6:46:7d:53:98:31:9a:ec:7f:ff:79:bc:e4:78:63:
3d:c3:ad:b4:bb:e2:6c:9b:68:e0:8f:5a:79:16:7f:
10:f8:5c:78:3c:14:a0:82:a8:af:1e:29:c6:45:18:
14:b8:cf:00:3a:55:7a:65:4b:01:81:1a:0e:c8:47:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EA:E8:7A:9D:72:0C:99:46:F4:EA:41:59:FC:DD:A2:BA:D5:2D:6E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nuroep1yDJlG9OpBWfzdorrVLW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:2a:b5:fd:4e:98:fe:cf:f3:50:ca:b8:70:7a:7c:88:ee:9d:
d8:62:1b:50:26:a3:b2:ef:1d:6a:d8:1f:15:4c:52:2f:66:cf:
07:30:a9:36:da:e6:dd:ae:31:f3:13:1e:b2:79:95:1f:87:d1:
0d:e2:cf:0a:ea:6b:8d:8b:35:4f:60:d6:3a:d3:32:3a:09:6d:
a3:33:05:29:a6:99:85:c3:58:74:36:3e:bc:4e:b0:62:32:a8:
51:72:48:42:62:e0:43:02:0a:fd:59:c1:fe:2f:c3:89:11:57:
4d:a1:62:10:79:33:90:b1:71:b4:c1:7c:22:e7:c2:e0:44:77:
cb:f5:ba:9d:fd:21:09:b8:5e:b2:c0:f7:f7:1a:d9:70:b3:a8:
ae:19:c6:37:c5:7b:3c:06:7d:c2:e7:05:a1:d9:47:ef:f1:13:
75:f9:f9:41:74:e3:40:d4:f2:db:31:35:f1:17:18:d7:d8:29:
59:4f:46:16:a4:51:89:e1:63:4d:7c:d7:01:58:05:69:2f:a3:
45:d5:af:07:48:8a:65:c4:eb:4f:96:17:26:40:ff:37:24:ed:
14:5d:b5:ae:cc:ea:1c:b4:88:bc:9b:73:0e:4b:92:d9:32:d8:
1e:69:96:9c:f3:56:2c:8f:11:9e:39:76:88:27:34:85:f6:58:
49:4d:ad:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:16:48 2025 by rpki-client