Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NzKgWTu3N9DoDMgNWRgs1g0qZh8.roa
File: NzKgWTu3N9DoDMgNWRgs1g0qZh8.roa (raw, json)
Hash identifier: gNWOwzzWIUIg/6Od2VDRbxtZHNv9zUerohlcofbhc9Q=
Subject key identifier: 37:32:A0:59:3B:B7:37:D0:E8:0C:C8:0D:59:18:2C:D6:0D:2A:66:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864099D2ECD110B88B50DFF48006B5CC2C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NzKgWTu3N9DoDMgNWRgs1g0qZh8.roa
Signing time: Sat 11 Feb 2023 13:11:08 +0000
ROA not before: Sat 11 Feb 2023 13:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:40:99:d2:ec:d1:10:b8:8b:50:df:f4:80:06:b5:cc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 13:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3732a0593bb737d0e80cc80d59182cd60d2a661f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:6c:4b:a2:22:3f:bf:0f:9e:a1:48:d0:50:
7c:12:17:80:0a:a3:3c:4c:ce:a8:02:85:58:76:49:
65:58:e3:3f:1e:c8:dd:69:96:b7:c7:22:d6:93:fc:
cb:ea:79:6c:de:f2:f9:71:10:7c:f1:dd:4c:85:10:
8a:30:a5:01:62:ca:d2:9d:e7:71:22:f6:fc:10:9b:
c7:ce:e6:17:05:92:ce:dc:86:bb:28:68:4d:6a:10:
a3:ed:7d:70:c6:fa:2f:c8:7d:06:f8:c7:68:4b:d7:
10:87:e7:d8:ba:05:aa:b9:68:d9:1d:b0:ca:fa:b9:
f8:9b:2f:ab:6b:12:fc:1b:df:d7:35:ea:85:b0:31:
e7:61:94:34:f5:38:5d:76:b6:87:8f:4d:d4:3a:f5:
e8:e9:19:a2:69:6e:1d:d2:21:1f:e9:8d:e5:63:a0:
14:04:c0:95:46:83:2b:82:5e:0b:84:dd:91:c4:3b:
f8:c0:48:bb:30:63:6f:23:41:f1:01:19:14:71:f2:
94:b5:8c:7c:90:90:e1:e7:f2:25:8a:e5:e7:7d:1c:
1d:1a:17:46:05:c1:21:51:c0:47:1e:ce:d2:54:ef:
2f:d1:cf:08:d2:40:a9:46:5c:7b:c7:d4:a1:90:d8:
08:fc:0c:e1:ee:4d:7d:48:fb:c0:e5:a9:80:f5:69:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:32:A0:59:3B:B7:37:D0:E8:0C:C8:0D:59:18:2C:D6:0D:2A:66:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NzKgWTu3N9DoDMgNWRgs1g0qZh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:bc:c0:98:5c:95:6e:bb:62:13:74:f1:4d:9b:15:b6:93:ab:
82:15:7b:16:cc:34:ba:6c:be:e9:0e:be:7a:8c:5c:00:87:43:
31:3c:c0:97:d7:1a:3d:11:bc:81:d7:ab:f4:f8:98:02:48:d9:
13:e6:4a:6c:0c:07:89:df:e3:ba:0a:87:97:37:21:81:29:b1:
4c:83:f2:ee:42:79:66:26:0d:05:10:b6:fe:81:a1:6d:d0:cd:
5f:6c:35:cb:a5:99:8d:84:fa:b4:e9:fd:aa:f0:d8:2e:26:01:
91:b1:3e:cd:9d:d0:35:ea:7f:28:70:75:7e:f7:db:0b:5e:d2:
7b:39:63:c6:7a:f1:e9:d0:4a:0e:38:f9:4b:25:12:ea:6a:2e:
94:2e:55:00:ae:34:94:b8:5f:c7:69:04:93:d5:d9:18:da:00:
71:ec:d2:38:cd:05:87:a5:8d:c3:a7:a9:f6:26:ec:ea:d5:c8:
75:20:3f:84:2d:b5:0a:16:52:73:02:88:11:b6:e3:6d:0d:41:
6e:2d:68:8e:9c:de:ed:00:4e:9f:81:d8:20:6d:26:ee:1d:ba:
ed:75:bf:e7:ec:8e:08:d4:07:14:5a:ec:76:20:80:87:a6:55:
c2:bd:e4:cf:d2:61:bb:80:94:be:45:07:18:8d:a3:0a:10:de:
7e:e6:12:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:07 2025 by rpki-client