Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ncMMkQWPo4FbbL2L8oTibxzwIhA.roa
File: ncMMkQWPo4FbbL2L8oTibxzwIhA.roa (raw, json)
Hash identifier: dWDrw+4XZReQloxnMzsl6aHfuJQ4gY8KmLEJ0CCuD9A=
Subject key identifier: 9D:C3:0C:91:05:8F:A3:81:5B:6C:BD:8B:F2:84:E2:6F:1C:F0:22:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8CEF8542
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ncMMkQWPo4FbbL2L8oTibxzwIhA.roa
Signing time: Wed 15 Jun 2022 12:17:46 +0000
ROA not before: Wed 15 Jun 2022 12:17:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2364507458 (0x8cef8542)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 12:17:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9dc30c91058fa3815b6cbd8bf284e26f1cf02210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:21:ba:04:53:59:3d:6c:c8:dc:aa:b0:3b:b2:
34:81:33:36:96:0e:3d:a4:b5:22:44:2c:81:ad:c9:
f2:c0:83:44:6d:5a:c1:77:71:3a:fc:a7:a8:91:c4:
2a:0b:24:c2:c0:87:c4:6a:1b:2c:af:ed:f6:9f:de:
86:66:53:52:13:da:07:80:ca:4e:98:15:3a:0a:eb:
6b:07:77:18:23:33:9a:ef:95:34:a9:f7:3a:81:1a:
c0:00:f9:01:2e:77:f0:18:ea:fb:fd:31:b6:7f:d7:
f8:30:4d:e7:de:70:b5:8d:87:1a:b5:76:44:01:97:
1d:01:a6:e4:7c:5a:09:ec:0a:2f:f3:a3:64:81:2e:
b2:96:c6:a5:f0:1f:7e:a9:8a:25:96:4b:19:9a:db:
c9:60:20:e0:d1:88:4b:aa:d0:69:de:dc:03:78:71:
74:a7:aa:25:28:4b:14:28:cb:ac:6e:38:d0:75:06:
3c:2c:da:4d:32:2f:3d:27:0a:67:1e:7c:ff:4e:bd:
26:0f:10:98:a2:ec:18:de:b9:69:cb:f6:fd:d7:cd:
a8:4e:9c:78:92:8c:88:6d:9b:e8:91:bb:2f:1c:eb:
da:77:bc:13:bb:ff:de:af:fe:12:b5:20:5f:83:de:
b1:f3:d2:d8:f9:e5:38:a9:89:f3:f6:14:5b:67:a0:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C3:0C:91:05:8F:A3:81:5B:6C:BD:8B:F2:84:E2:6F:1C:F0:22:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ncMMkQWPo4FbbL2L8oTibxzwIhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:c2:d6:b8:09:f9:8c:a2:96:d2:74:03:92:9b:da:f2:26:2a:
75:71:d4:3e:80:8b:95:35:6e:0a:8e:bd:01:94:04:da:85:8a:
c6:db:dc:c7:54:ce:5f:7f:3c:47:3b:24:68:49:ec:12:ae:e4:
c6:cb:be:87:d6:9a:01:60:7c:9e:d5:b3:66:3f:a4:1b:a7:e6:
ed:d4:0f:7a:b8:ce:c9:24:9e:e9:33:d8:04:8e:a5:4f:8a:af:
8e:85:9f:4e:80:de:2b:4f:e4:ab:02:73:39:c3:20:5d:13:01:
48:e3:c4:5c:ca:85:70:38:5b:6e:9b:cd:7f:55:fc:0b:07:65:
79:65:d6:52:59:3d:89:23:ff:c1:94:e9:8c:d3:6a:49:b7:e0:
fd:8e:84:f2:95:ce:04:53:56:95:96:ab:67:8a:bf:19:31:e3:
f2:9b:b8:19:22:47:bd:a4:4a:6c:92:61:27:ed:46:06:16:ef:
e3:5c:5b:1c:f6:1f:7d:70:14:c5:72:37:9f:46:bb:91:87:d8:
10:fc:3d:a3:be:da:a2:03:68:f8:b5:ac:13:3b:52:72:20:a9:
d2:e0:1e:52:3b:56:7f:6b:7b:24:dd:c6:ed:96:24:5f:4d:40:
cc:15:48:f2:2d:b0:fe:59:0d:d2:50:38:ee:0e:39:43:c6:fe:
7b:a0:d3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:18 2025 by rpki-client