Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/npJ3gCFrvBBRyhqyyJWMtCrAz9c.roa
File: npJ3gCFrvBBRyhqyyJWMtCrAz9c.roa (raw, json)
Hash identifier: 0Waq/qqk+pv2dwYDseYEXIK5rBbFYE+jPcKl70TzS98=
Subject key identifier: 9E:92:77:80:21:6B:BC:10:51:CA:1A:B2:C8:95:8C:B4:2A:C0:CF:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7191049C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/npJ3gCFrvBBRyhqyyJWMtCrAz9c.roa
Signing time: Fri 11 Mar 2022 09:10:43 +0000
ROA not before: Fri 11 Mar 2022 09:10:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1905329308 (0x7191049c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 09:10:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e927780216bbc1051ca1ab2c8958cb42ac0cfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:5f:66:7b:e6:4d:99:8b:48:c0:eb:38:55:
b3:7d:dd:5a:23:60:e9:9a:1e:56:de:ab:19:05:ff:
bd:0a:e4:08:88:20:89:96:f1:c3:2a:42:a2:c9:78:
b0:33:f7:92:04:fb:70:74:01:51:25:28:8c:1c:27:
27:60:db:3e:de:d0:8b:dd:7b:de:49:24:c5:35:02:
79:ac:e9:61:58:56:7a:7e:31:71:23:9f:75:13:2f:
ee:41:32:c0:84:19:75:63:95:00:57:26:29:d6:00:
a9:5a:3a:c4:65:18:4a:1c:bc:6b:55:5b:23:ae:fb:
8d:98:a8:f4:39:fb:d6:b7:82:de:7b:2c:d4:59:86:
3e:70:a0:e4:5e:8d:ee:e0:ca:0e:8c:b3:45:a5:a3:
d8:19:2f:3f:5d:48:32:e5:ae:3d:a9:f2:59:8a:f0:
ce:84:67:9a:cb:8f:1a:04:16:43:60:fb:5b:54:82:
54:86:f5:a5:d5:78:f8:99:b4:5d:b9:46:d6:4f:eb:
56:2a:91:8a:3e:e4:d2:0a:ca:f3:11:c9:eb:92:7e:
ec:dd:9f:87:b7:19:19:bf:58:b3:6e:40:8f:8e:39:
91:25:55:c2:09:33:48:7e:01:72:11:8a:6c:ff:7e:
0c:a2:9e:43:51:96:9a:52:d0:83:69:9c:e4:4c:1e:
2d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:92:77:80:21:6B:BC:10:51:CA:1A:B2:C8:95:8C:B4:2A:C0:CF:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/npJ3gCFrvBBRyhqyyJWMtCrAz9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:93:aa:c9:f5:1a:5d:56:ad:af:8a:42:c7:97:bc:b2:fc:ad:
4e:de:43:5f:16:a6:d5:74:6f:1d:10:39:e7:4f:10:b7:34:7f:
7f:1b:78:4b:c3:38:59:86:36:bc:25:27:46:23:28:0f:99:a1:
42:47:dc:10:e8:b9:96:43:75:c9:8d:d1:f0:54:ed:54:bc:48:
76:8a:60:1c:0a:47:92:fa:77:88:91:1c:c0:a6:36:87:41:5b:
ef:09:39:c6:62:43:e0:87:b9:12:10:11:79:46:5d:7e:2e:1d:
32:6a:d5:e2:95:2f:18:15:a3:29:e0:55:bc:2c:59:af:0c:ff:
3e:4e:5c:e5:9f:61:d8:1b:0a:81:8d:8f:7f:16:e1:94:69:b5:
65:bf:23:70:04:60:cd:d9:c4:29:e4:7f:50:88:78:7a:54:53:
7e:5d:75:0a:a9:4e:86:33:1f:a1:cc:05:67:48:e7:81:b1:30:
78:17:ec:e2:24:39:5d:fc:93:a8:e2:e4:23:44:32:c6:4c:84:
37:bc:ca:0f:b5:dc:07:53:ed:ad:28:36:a4:50:fc:00:c7:2c:
4d:5f:11:e3:aa:2e:c4:09:74:3a:5a:08:c8:4e:b0:72:d2:b7:
28:79:a5:ad:37:da:f8:31:ca:16:b4:e4:62:dc:7b:d8:0d:64:
bf:9b:19:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:45 2025 by rpki-client