Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pNCDNCsyxGN_vZdkTdC098iAgp8.roa
File: pNCDNCsyxGN_vZdkTdC098iAgp8.roa (raw, json)
Hash identifier: hoeZFVEEXjKox1bV+5QhJ/gNUPjZapwvK6Khg2FG3eE=
Subject key identifier: A4:D0:83:34:2B:32:C4:63:7F:BD:97:64:4D:D0:B4:F7:C8:80:82:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850907A22F5A17EAD25FCEF97DF8D4CAAB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pNCDNCsyxGN_vZdkTdC098iAgp8.roa
Signing time: Tue 13 Dec 2022 01:09:33 +0000
ROA not before: Tue 13 Dec 2022 01:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:09:07:a2:2f:5a:17:ea:d2:5f:ce:f9:7d:f8:d4:ca:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 01:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4d083342b32c4637fbd97644dd0b4f7c880829f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:16:a2:56:b0:b7:2e:fa:3c:88:72:cd:a4:87:
c7:db:ad:31:82:c4:3e:38:8a:f6:e0:f1:3a:21:ee:
d1:b8:24:ce:6b:04:67:be:34:ed:a0:bd:b7:01:7b:
19:25:ff:f9:35:e6:12:27:29:e4:dc:fe:50:66:2e:
61:47:31:a5:47:07:23:35:dd:7a:bf:bf:83:cf:4b:
c6:88:ea:a6:82:dc:b0:24:88:91:c3:8d:e5:29:f8:
a0:65:e1:b1:13:56:26:37:40:19:0e:43:f8:06:c7:
19:d0:eb:68:c9:8f:81:02:4f:d1:8f:cb:b8:4b:df:
14:f2:34:4b:91:56:4b:17:f7:e7:ab:9f:2a:35:57:
99:88:c4:fb:d2:05:06:20:b0:64:84:aa:b0:d9:43:
87:78:b4:d3:ed:2d:cc:e3:c2:c4:2c:51:5b:87:4c:
89:28:de:5a:fa:30:be:5a:95:58:5c:44:e5:d7:a3:
a0:76:22:57:11:85:9b:af:19:55:5c:47:17:5e:65:
64:bb:32:06:b9:63:f8:c1:05:a8:66:c1:7a:71:41:
d7:33:b6:eb:8a:bd:4b:69:b8:2f:c1:a6:d7:89:da:
cb:a7:13:5e:fb:01:aa:4d:1b:f9:87:2c:ac:31:e6:
5e:77:d0:98:c3:ec:f2:11:8e:72:8c:7d:de:89:9c:
20:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D0:83:34:2B:32:C4:63:7F:BD:97:64:4D:D0:B4:F7:C8:80:82:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pNCDNCsyxGN_vZdkTdC098iAgp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:c1:31:98:27:65:f8:43:9f:d4:54:8d:4e:e2:bd:46:79:61:
d5:7c:13:05:41:43:4f:22:4e:b5:2d:01:3d:5e:55:28:05:ac:
3e:cc:9d:21:17:35:1a:11:4d:b2:8c:26:17:a1:da:d8:68:ed:
85:ed:54:03:f1:a1:c0:c7:10:42:33:1c:f9:2f:4f:aa:ac:44:
0e:ed:dc:9b:9e:e7:99:0b:ed:20:42:4a:93:ca:79:22:70:2c:
94:68:fb:b2:42:b3:ae:07:be:05:88:36:c7:48:60:22:d0:ff:
33:f8:f7:63:20:00:68:5f:4e:1e:f8:37:ba:38:38:4c:13:cd:
ad:93:ad:6e:68:11:a0:c0:8d:68:35:b4:5b:cd:a7:b2:d7:18:
3e:c5:d8:59:a2:52:8d:1a:2e:58:9d:86:97:8a:87:5f:21:c7:
68:8b:79:44:86:18:7a:d7:ba:8e:7b:9e:50:d4:ca:ca:54:07:
06:92:4b:11:ff:7a:5d:38:87:19:b2:2e:19:f8:af:d8:cb:a0:
3b:b9:64:cf:96:f9:98:31:f3:28:4c:f8:3a:b2:32:da:bc:ca:
86:53:68:c5:da:49:a1:44:cf:1c:49:67:6f:32:0a:ed:bb:a4:
1c:ab:b6:29:3c:15:14:25:88:1e:4d:ff:f3:be:75:6b:8a:0e:
79:2b:a7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:32:19 2025 by rpki-client