Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NxOt1P1c18VFnQUD-ipnScFtsjI.roa
File: NxOt1P1c18VFnQUD-ipnScFtsjI.roa (raw, json)
Hash identifier: mGOAuhpjYt5uQ5aitVcWHRMDU74zM7LfuvU5SlCOEF4=
Subject key identifier: 37:13:AD:D4:FD:5C:D7:C5:45:9D:05:03:FA:2A:67:49:C1:6D:B2:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F2B8FF4642E45A4267C2C3F8F25C36E5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NxOt1P1c18VFnQUD-ipnScFtsjI.roa
Signing time: Thu 08 Dec 2022 17:12:00 +0000
ROA not before: Thu 08 Dec 2022 17:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f2:b8:ff:46:42:e4:5a:42:67:c2:c3:f8:f2:5c:36:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 8 17:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3713add4fd5cd7c5459d0503fa2a6749c16db232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:01:34:ff:17:7f:a3:81:2a:9d:cf:c4:57:b1:
62:79:8b:75:73:0a:cb:fe:ab:0a:bb:63:6d:5b:5f:
84:82:e1:18:2a:47:ad:1c:9c:67:29:ce:19:4c:a9:
96:de:19:1a:a6:90:48:15:53:68:8e:80:c4:e0:e8:
6a:72:54:66:05:ed:41:5e:14:a1:8c:99:f1:cc:4a:
e9:b0:9b:fc:44:1e:37:11:dd:ff:2d:32:98:e7:1c:
35:b5:1c:57:52:9a:48:32:47:17:5f:a5:68:05:0a:
ca:a8:2d:80:a0:c8:28:cf:a6:83:76:f9:51:60:73:
c2:78:aa:ae:c4:08:34:3a:06:4f:8c:66:98:47:f6:
8f:2c:f9:cd:45:05:53:89:ca:37:12:e9:4c:5b:27:
01:5c:86:75:08:b8:9f:fb:1b:43:af:4a:60:8c:96:
43:c7:e2:15:d3:39:1c:09:a7:40:29:7d:a9:88:58:
ac:d0:4b:36:d8:12:22:8d:7d:7a:f4:87:c5:92:0f:
a1:01:5c:33:70:25:04:a0:70:5a:e6:73:e5:19:a7:
5c:b4:31:fb:cd:d1:86:a5:98:15:87:5e:e2:cc:21:
4b:13:1d:0a:e5:f9:b5:2e:08:36:e3:60:63:77:ba:
de:d6:8e:92:4a:03:7f:6e:04:29:26:b1:c2:cf:79:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:13:AD:D4:FD:5C:D7:C5:45:9D:05:03:FA:2A:67:49:C1:6D:B2:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NxOt1P1c18VFnQUD-ipnScFtsjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:f1:57:8e:1e:b5:82:66:4b:06:56:93:06:45:3c:41:96:84:
3a:7f:d6:ec:8a:55:31:9f:2d:c9:7f:1e:bc:54:97:14:32:af:
83:17:d5:5e:84:b2:ef:c1:d8:0f:b1:88:bc:71:85:18:ce:7c:
67:68:aa:e5:00:4a:60:e2:62:81:e8:b3:76:53:d8:f3:5e:cd:
ab:cc:dd:02:a9:bd:54:54:9a:08:5d:c3:72:1e:ce:f2:4d:16:
83:09:cd:fe:db:b3:d7:2d:32:58:b6:51:f9:05:43:f3:31:69:
46:2e:d9:5a:09:03:ca:1c:44:cd:ea:6b:a0:d9:a1:09:52:bd:
51:08:af:5c:8e:f2:2b:5e:f2:d2:72:1f:b1:76:c0:be:a5:0d:
2a:45:55:b7:ab:b9:d6:e2:b3:29:10:25:c1:c1:b3:47:20:c9:
f7:04:65:a4:1e:37:46:f6:60:a8:71:94:28:dc:45:dc:a1:84:
ff:bc:ca:f2:43:4f:d9:91:75:71:37:2e:c7:bd:b8:03:5d:4e:
92:7c:d9:10:82:29:7e:39:07:ec:4c:f4:56:b4:66:a3:0e:71:
ac:eb:6d:29:62:c1:1e:a7:58:1d:1b:ef:5a:b6:f2:7f:43:a7:
1c:f5:ef:89:07:08:66:61:e6:29:53:50:69:8a:0d:3e:c6:d5:
cb:08:a0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:56:23 2025 by rpki-client