Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NEUTWnhKq79J7pBnjAnYZ9v8Rtw.roa
File: NEUTWnhKq79J7pBnjAnYZ9v8Rtw.roa (raw, json)
Hash identifier: 1rKzadjeAUqu1lKuKOaVaPBhIEvpWJteI8n/aOI7784=
Subject key identifier: 34:45:13:5A:78:4A:AB:BF:49:EE:90:67:8C:09:D8:67:DB:FC:46:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018564D9EC54E2609F971FAB059D11097AAD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NEUTWnhKq79J7pBnjAnYZ9v8Rtw.roa
Signing time: Fri 30 Dec 2022 21:04:41 +0000
ROA not before: Fri 30 Dec 2022 21:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:64d9:8437/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:64:d9:ec:54:e2:60:9f:97:1f:ab:05:9d:11:09:7a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 21:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3445135a784aabbf49ee90678c09d867dbfc46dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:44:1b:02:3d:4f:e8:73:6b:dc:99:69:36:
55:1e:a9:bc:85:dc:92:ab:60:d2:f1:a5:9f:75:36:
a9:9e:db:ea:09:47:00:f0:9d:be:06:3e:3b:8d:8f:
e4:57:59:0d:86:fb:70:0a:8c:a0:b7:00:e4:15:95:
0a:9e:fe:62:be:d1:38:f1:97:5e:e2:9e:e8:f5:f8:
51:5a:bc:ee:67:2c:aa:30:f1:87:0c:e5:55:96:15:
6d:1b:c0:14:41:85:6d:c9:ee:05:cd:6a:31:68:b9:
fe:d3:af:24:3f:9b:b8:fa:95:5b:0b:f0:82:9b:62:
5f:8c:19:88:62:ec:36:da:16:8a:88:cc:af:5f:6b:
af:c9:c7:f8:2f:53:80:5f:21:f2:fd:9f:7a:92:01:
98:6e:f4:56:f9:31:58:4d:db:91:bb:f2:72:75:32:
d5:02:06:e6:87:f8:55:89:3a:b9:e1:88:fc:78:81:
05:75:42:a4:d8:2e:7c:59:95:21:95:c7:22:71:1a:
f0:31:10:b3:dd:0d:ee:f5:6a:ca:90:7c:95:30:b9:
75:c9:c9:aa:ee:7a:c4:f9:d9:c6:e8:f1:94:77:be:
63:58:0d:49:74:34:c9:ce:2b:7e:b0:69:49:b6:cf:
4b:7b:d8:a0:e6:8b:45:34:27:40:eb:ee:85:ec:36:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:45:13:5A:78:4A:AB:BF:49:EE:90:67:8C:09:D8:67:DB:FC:46:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NEUTWnhKq79J7pBnjAnYZ9v8Rtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:ca:69:1a:e0:d2:9b:9e:51:a8:16:d5:67:30:40:21:b6:90:
f5:b4:f5:93:8d:37:0c:e6:86:0b:79:bc:98:de:b6:aa:71:5e:
2f:82:dc:e9:49:a0:63:3c:84:90:69:5e:35:00:bd:5a:ce:37:
b0:5b:1c:ea:84:a6:e8:e2:a3:b3:ef:24:65:27:10:ef:c5:84:
f8:d7:40:fe:17:8b:3e:36:8c:19:96:fc:d0:c6:73:93:f2:63:
01:46:62:88:98:00:ec:1d:b0:df:81:ca:bb:d2:11:fc:21:be:
73:ed:c6:6a:bf:19:4b:61:5c:73:dc:82:b3:a9:2b:99:45:fa:
50:d9:0f:37:8e:1d:95:67:90:cb:53:7d:85:71:27:ce:64:b5:
6b:5f:6b:3b:23:b2:f1:0d:83:e2:82:43:b9:5d:97:4c:e9:5f:
0b:14:32:3b:94:1f:6d:d9:20:19:95:74:60:ba:12:c7:b6:cc:
5c:25:99:21:41:9f:5e:73:ea:bb:bc:ff:6a:30:c6:4c:fa:69:
9d:0f:1c:32:54:6b:92:a4:51:5d:d8:26:ae:f8:96:bf:05:8c:
ed:96:88:f0:b2:0c:b7:1d:2c:67:c9:6c:1f:4d:4b:6e:55:1e:
16:c4:36:40:e0:4f:a8:02:04:59:16:f3:d7:11:c1:00:63:6c:
ca:c3:67:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 10:25:08 2025 by rpki-client