Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ND2mr4cD80CfbgGDoSka3bsPFO0.roa
File: ND2mr4cD80CfbgGDoSka3bsPFO0.roa (raw, json)
Hash identifier: 5gxEKEVfihk5mVj751yBib4FtLfpQcQjjQWo7FI6yMc=
Subject key identifier: 34:3D:A6:AF:87:03:F3:40:9F:6E:01:83:A1:29:1A:DD:BB:0F:14:ED
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018651C72CFEFA42B29F5DE7BFDA09965417
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ND2mr4cD80CfbgGDoSka3bsPFO0.roa
Signing time: Tue 14 Feb 2023 21:14:12 +0000
ROA not before: Tue 14 Feb 2023 21:14:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:51:c7:2c:fe:fa:42:b2:9f:5d:e7:bf:da:09:96:54:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 21:14:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=343da6af8703f3409f6e0183a1291addbb0f14ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:73:53:42:81:86:64:86:87:a1:13:c8:08:
93:03:51:69:81:8d:8c:33:4a:55:f8:60:12:11:92:
f0:03:96:44:04:d9:20:d2:50:2f:75:5d:be:ec:fd:
f0:2a:3d:95:c1:b4:31:be:70:e1:0b:88:fb:0b:fd:
c2:b6:f2:fa:8a:52:b7:03:ca:90:e2:91:fa:cb:a5:
eb:e8:f0:c1:52:9c:2c:73:7f:ef:8e:69:a8:55:c7:
16:11:88:2e:74:a7:ef:e6:74:6f:78:3a:b9:50:4a:
02:bc:0c:b3:48:a2:44:44:b2:f7:9b:c0:43:a2:89:
79:11:67:fe:74:a5:9d:1e:42:6f:ac:e1:9b:1c:0b:
a6:f0:3a:7b:b2:b6:c1:67:a2:2f:50:44:c7:de:9c:
03:4a:16:ad:3c:ff:00:54:a7:5d:04:0c:5a:29:b3:
93:d3:0d:ea:ba:28:66:24:85:aa:bc:db:48:0d:e9:
9e:80:aa:d9:4e:72:76:ce:7e:04:36:d6:b1:c3:d5:
c2:df:6b:1e:5c:7d:53:16:64:71:02:06:d4:02:f7:
d0:c6:92:79:26:f2:74:46:31:46:7d:71:9d:f1:71:
dd:d3:1f:60:a5:c6:30:0a:93:95:09:89:64:7e:00:
c8:87:2e:b8:de:80:08:e5:75:a7:58:fa:98:e0:96:
d7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3D:A6:AF:87:03:F3:40:9F:6E:01:83:A1:29:1A:DD:BB:0F:14:ED
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ND2mr4cD80CfbgGDoSka3bsPFO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:e3:de:dc:8b:88:0f:e4:3a:6b:4e:80:fb:cd:9c:1c:ba:1b:
10:1d:fd:2a:d3:70:2f:7a:66:4e:88:de:af:1a:39:c3:aa:f8:
95:99:fd:f1:85:f7:25:00:08:3c:cc:59:58:27:67:0e:7b:26:
39:ba:06:1d:b5:28:3d:df:40:b3:a6:23:f3:5c:40:ad:77:91:
15:06:90:f1:d7:4c:fd:aa:ea:54:33:1e:86:8f:49:93:c5:94:
00:37:ed:8a:63:0f:4f:27:ba:6d:3d:a6:a6:69:36:45:f2:fa:
b0:48:5f:42:68:27:31:94:0e:d5:a3:b5:91:4f:62:cb:1e:37:
df:04:2b:71:2d:08:bb:0e:10:ae:e3:32:49:33:bf:dd:8c:f6:
da:ea:9c:2b:d3:32:a5:68:df:1b:39:29:5e:b0:f3:fb:32:c6:
ac:45:65:4c:e4:f4:a1:81:fc:fa:5f:ae:e8:9b:7a:29:14:c3:
a8:93:a3:1b:72:ee:41:e1:7b:9b:7e:d4:23:41:9b:81:a6:ba:
f1:b3:03:a6:8d:2b:43:89:7a:1c:c5:aa:00:da:a9:cc:ed:db:
b8:67:27:0a:c3:8d:36:b3:7b:0f:b5:ab:c4:22:b4:ba:d6:87:
c9:79:11:bb:92:bf:31:0f:09:a5:95:55:5e:e1:9a:e2:e8:83:
d3:e9:64:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:05:59 2025 by rpki-client