Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NEAjuTYH2_dcipgAS2wWSdtS06s.roa
File: NEAjuTYH2_dcipgAS2wWSdtS06s.roa (raw, json)
Hash identifier: OXuGiBzgZo+75SdSXQHEHCUSve0MTI6x01Ci+ztRH7A=
Subject key identifier: 34:40:23:B9:36:07:DB:F7:5C:8A:98:00:4B:6C:16:49:DB:52:D3:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A06353490EF91BB57795AE071502FD073
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NEAjuTYH2_dcipgAS2wWSdtS06s.roa
Signing time: Fri 18 Aug 2023 01:14:24 +0000
ROA not before: Fri 18 Aug 2023 01:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:06:35:34:90:ef:91:bb:57:79:5a:e0:71:50:2f:d0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 01:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=344023b93607dbf75c8a98004b6c1649db52d3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:06:46:0d:15:4d:5a:44:82:88:31:e1:37:
40:86:a8:81:12:92:4b:53:7b:1e:44:27:d2:9f:19:
50:33:80:ca:a4:04:f3:93:17:a9:3a:e5:b7:cf:b4:
fa:d7:23:d9:6d:cc:c4:e6:68:38:89:de:14:6d:4d:
8f:e5:18:bd:21:92:c7:92:bf:0f:db:31:62:a7:11:
f7:56:b7:c0:08:6a:dd:c0:8b:3d:21:7c:c2:0d:21:
b3:c2:61:8e:78:5c:85:bc:fd:e8:6b:a3:fb:b4:c3:
e1:4b:de:65:43:e4:6f:5a:d9:44:ba:47:4b:b2:16:
5a:ce:45:63:fb:19:08:54:d4:c1:42:5b:94:81:a4:
c2:6e:f8:f2:9f:a8:c3:3a:03:dd:77:04:8f:2b:47:
9c:e0:3b:41:0b:d0:21:2a:ef:82:7e:d2:e0:00:9d:
7a:28:e4:de:a3:2d:2a:66:7b:0a:71:de:8d:bd:17:
77:f1:b0:c0:61:c2:2a:03:65:bb:b7:52:0a:68:25:
fb:07:4d:85:0f:4b:3f:4d:d9:9c:1f:87:c3:bc:21:
ea:3d:2c:93:a2:4f:03:f2:e4:bc:28:73:0e:23:f1:
5c:ae:a9:c6:ed:b9:84:be:03:3b:7a:c1:fd:f2:f6:
ae:d7:b0:a9:72:48:87:0e:cf:ad:c2:a0:46:5d:c1:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:40:23:B9:36:07:DB:F7:5C:8A:98:00:4B:6C:16:49:DB:52:D3:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NEAjuTYH2_dcipgAS2wWSdtS06s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:9a:c4:42:b7:fa:17:35:f2:59:82:fd:dd:b8:90:4d:bc:c4:
da:38:97:7c:6f:e5:91:44:e3:2c:62:6b:65:da:0a:c4:c9:c6:
ee:35:ae:24:9f:3f:9a:60:fe:04:18:5b:a5:92:a0:21:10:af:
a1:a1:4c:11:a2:7c:5d:0d:55:dc:dd:86:27:cf:66:bf:75:71:
42:f7:39:99:69:7b:fe:9f:0e:51:85:1a:b2:a3:fe:b3:8f:6c:
df:1d:4e:18:f3:4d:15:28:d2:cd:91:d6:20:83:47:f3:5f:b0:
ab:24:fc:a1:de:50:66:8e:9f:59:6b:7c:75:2b:50:a6:31:ae:
89:ce:d8:99:00:72:eb:32:37:55:93:05:8b:bc:0a:75:47:d1:
82:37:d5:1a:0a:e9:47:77:4a:2d:a0:fa:dd:00:3c:d6:3f:36:
bc:95:1b:92:fd:4e:bf:65:a7:51:6d:53:01:57:e7:cd:5e:72:
b4:a9:2d:fa:d8:53:28:23:16:b2:32:c4:6e:4b:7b:b2:4f:20:
08:5e:bf:a8:12:19:4e:13:11:ba:d7:35:b7:98:47:61:7f:8c:
82:74:00:2e:81:34:c3:00:5e:ac:7c:38:f0:be:9e:05:74:eb:
7c:a2:d3:78:59:6e:93:8d:0f:0e:88:79:4a:f3:31:15:12:fa:
9b:7f:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:46 2025 by rpki-client