Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nwbhc876LxMTl2KSojexw-g6eVI.roa
File: Nwbhc876LxMTl2KSojexw-g6eVI.roa (raw, json)
Hash identifier: PO0gQqvWFnwaxZgnU4yIWHPjMOqRk92un9MNV7iTjBc=
Subject key identifier: 37:06:E1:73:CE:FA:2F:13:13:97:62:92:A2:37:B1:C3:E8:3A:79:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8A7BF017
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nwbhc876LxMTl2KSojexw-g6eVI.roa
Signing time: Mon 06 Jun 2022 18:11:20 +0000
ROA not before: Mon 06 Jun 2022 18:11:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2323378199 (0x8a7bf017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 18:11:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3706e173cefa2f1313976292a237b1c3e83a7952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:27:2a:9a:3d:db:08:71:f2:90:98:a2:f1:
35:71:c7:1a:bb:35:9c:c6:0a:e4:09:17:ff:04:8a:
a4:63:6e:28:75:6f:aa:b3:e1:b9:60:0f:de:3c:05:
02:ca:9e:c1:c3:e1:98:09:9a:e6:c9:ea:67:30:d3:
82:07:41:9e:d8:54:c8:51:19:3d:b9:46:ea:6b:01:
7b:92:83:2d:e9:a2:51:10:7b:cf:f0:9f:5c:0b:b2:
c7:77:ff:80:ea:1a:a2:2c:79:21:6b:22:1b:e8:15:
66:40:ed:07:91:a5:6b:10:e4:89:20:3e:fe:2d:c0:
23:3d:92:d7:48:55:7a:42:97:42:b3:45:52:5c:95:
23:0f:e1:61:c9:9f:41:56:a6:11:91:06:fc:c3:f2:
1b:7a:57:31:d2:08:ce:7e:66:97:8b:69:6f:f4:6c:
47:44:91:d9:5e:73:89:40:ef:b5:cb:aa:c8:3e:47:
4d:01:b6:ed:82:36:20:ca:99:7f:79:29:13:ad:4c:
fb:ec:ef:a0:15:b8:e6:69:4f:4e:3f:69:2a:31:40:
df:40:8f:b2:da:5e:72:7e:9f:cd:26:99:fe:53:8b:
7b:9f:fa:8a:f5:65:8d:e3:07:c6:e0:a0:cc:e9:1b:
8c:80:bb:a0:a6:d1:19:9a:25:67:63:24:d9:21:21:
ed:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:06:E1:73:CE:FA:2F:13:13:97:62:92:A2:37:B1:C3:E8:3A:79:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nwbhc876LxMTl2KSojexw-g6eVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:06:19:dc:8b:89:32:f1:8a:50:03:05:56:04:ec:d0:4a:4e:
c0:75:7c:58:8e:64:4b:bc:e4:d0:8c:5f:0c:43:fd:4d:cd:5b:
b8:d1:e0:90:8a:4b:74:dc:46:d3:cc:40:84:71:e9:f1:31:d4:
77:3b:da:ec:bd:84:76:ed:29:dc:03:07:7d:eb:1e:0f:88:e5:
a6:a6:b4:42:9f:e8:bb:16:23:14:6e:36:29:ee:fa:06:d4:e5:
e4:a3:ab:4c:96:fd:96:bd:db:28:53:07:ec:7d:fc:5d:2a:a6:
f9:5a:53:7e:c6:68:4b:a1:3b:a9:0c:af:d3:09:70:24:14:02:
b7:91:ea:87:da:90:eb:f8:df:ca:30:dc:51:84:0a:b1:f4:10:
db:57:56:6f:a4:43:5f:49:70:3d:e0:ab:d0:3f:f2:f9:31:ad:
cc:18:23:19:82:f4:bd:ad:61:5d:d9:a4:af:8e:26:bb:39:f4:
1f:f9:03:a6:cb:74:3e:20:95:7d:e4:b1:7a:2d:da:96:9c:40:
93:8c:ed:87:db:fa:1c:e5:05:3e:85:9a:42:eb:5e:aa:b5:31:
de:6e:bb:bf:ae:f3:a9:4b:98:e4:57:c0:9a:df:ff:25:92:b2:
58:d8:f9:05:be:ec:53:0f:30:9d:59:23:a8:c8:be:6b:7b:d9:
5f:2c:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:49:52 2025 by rpki-client