Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/neoBWSnbsU2Wz-Nam_h5pUu3lz8.roa
File: neoBWSnbsU2Wz-Nam_h5pUu3lz8.roa (raw, json)
Hash identifier: wU30G/PobGzDqmckvzh9hwm8oynrHE4oOCIf6ZHIm/c=
Subject key identifier: 9D:EA:01:59:29:DB:B1:4D:96:CF:E3:5A:9B:F8:79:A5:4B:B7:97:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186361717F4C6CE0390E494FD253BC2B0AC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/neoBWSnbsU2Wz-Nam_h5pUu3lz8.roa
Signing time: Thu 09 Feb 2023 12:12:08 +0000
ROA not before: Thu 09 Feb 2023 12:12:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:17:17:f4:c6:ce:03:90:e4:94:fd:25:3b:c2:b0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 9 12:12:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dea015929dbb14d96cfe35a9bf879a54bb7973f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:66:09:d6:b6:71:e8:76:6e:20:4d:15:65:
4c:56:b3:7b:e7:de:0d:11:7e:83:ea:7f:86:78:cd:
7d:1f:6e:1d:e6:cf:e2:20:49:a0:f2:ee:dd:ee:06:
77:a1:58:e9:f3:7f:8c:26:2b:67:4e:7b:a5:8e:b9:
a8:07:71:57:49:d3:ba:09:ae:18:0a:e9:a9:02:9d:
9d:d7:30:d7:dd:a5:a8:fd:e6:28:d2:91:78:e7:41:
33:11:8b:90:f0:9f:6c:af:24:30:24:09:07:6c:7c:
f5:97:24:26:22:6d:d6:2f:ca:eb:b1:4a:97:41:7a:
c0:d2:8a:a9:fc:9b:8f:9b:b7:e0:9b:03:24:10:2e:
12:2a:2c:52:b7:b5:d3:bd:49:e7:3a:4e:2c:80:b5:
56:94:0d:01:e1:e9:6e:3a:b5:2a:85:09:e5:6d:71:
be:fe:12:a0:50:9d:ba:a0:8d:3a:2d:40:8c:2e:9a:
20:ac:e1:d7:86:be:ab:45:ee:5a:a1:ca:75:35:cc:
7a:57:74:42:15:2f:e5:b1:37:3f:ed:df:c1:08:6e:
ec:a8:21:10:f9:9b:1a:06:e4:77:39:a8:2c:23:87:
9e:b9:57:14:5e:b9:bc:49:62:f0:eb:ed:58:0e:61:
e7:05:ad:51:0f:2d:cc:f7:3e:8f:36:9e:2c:64:c9:
21:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EA:01:59:29:DB:B1:4D:96:CF:E3:5A:9B:F8:79:A5:4B:B7:97:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/neoBWSnbsU2Wz-Nam_h5pUu3lz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:15:e4:c9:63:61:e3:ab:63:63:ba:8f:b2:f2:e2:55:9b:59:
f4:ed:cf:ba:46:1c:eb:55:15:51:a0:78:b9:36:07:bd:36:5b:
b6:58:31:ba:34:65:76:c3:95:46:11:96:50:f4:6e:96:41:76:
93:d8:ea:18:4c:8d:f3:4f:43:17:36:59:14:34:a9:42:9b:f9:
82:2a:20:31:a9:5c:8c:b4:20:fd:f9:bf:32:67:e2:13:cb:77:
f3:ec:5e:df:bf:47:13:bb:21:b2:a8:55:5a:92:ec:38:f1:11:
f4:e8:06:14:42:46:c2:fd:06:fe:c7:70:7a:46:54:03:b9:e7:
06:aa:97:60:5b:77:d5:0f:1a:d4:1e:68:29:19:90:3f:f6:a2:
24:a5:67:e9:c1:27:b9:da:19:3a:a9:f4:af:33:d9:b8:b8:9e:
5a:47:74:96:e6:ec:6a:bc:f5:35:5e:ce:03:92:9e:2c:d7:74:
41:97:e7:3e:da:f0:e7:7a:a1:af:b8:18:08:18:12:5a:a0:c7:
e4:62:9f:ff:22:09:0b:31:f2:f3:4f:ca:c1:53:df:af:2e:3d:
cc:f1:36:6d:3b:c1:ce:16:81:70:c2:b5:35:05:b8:a3:7d:b1:
6d:c1:c8:66:66:24:ae:37:08:0f:96:d7:73:c1:b4:68:d6:cb:
20:be:65:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:54 2025 by rpki-client