Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NQq0jHfUIaUWbmH7ZRoAIrMmWRE.roa
File: NQq0jHfUIaUWbmH7ZRoAIrMmWRE.roa (raw, json)
Hash identifier: Hray9swxkgunuLeDgshdW19BkMyzQKU+W6mzLJhBe/I=
Subject key identifier: 35:0A:B4:8C:77:D4:21:A5:16:6E:61:FB:65:1A:00:22:B3:26:59:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897523CAAF91069F0009CF115EB14FD102
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NQq0jHfUIaUWbmH7ZRoAIrMmWRE.roa
Signing time: Thu 20 Jul 2023 21:10:27 +0000
ROA not before: Thu 20 Jul 2023 21:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:75:23:ca:af:91:06:9f:00:09:cf:11:5e:b1:4f:d1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 21:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=350ab48c77d421a5166e61fb651a0022b3265911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:23:04:25:e1:8a:76:06:9b:01:2d:17:71:7f:
eb:f1:6d:0a:58:34:1a:7e:9b:1b:61:c1:19:1d:e1:
02:66:d4:7b:25:7d:2f:46:9c:85:44:a6:27:0b:8a:
86:b9:4e:51:64:ec:ea:3c:1f:a4:36:7d:48:b4:51:
dc:35:2f:88:cd:4d:7f:36:1a:d5:b0:b0:85:27:12:
0c:7c:30:70:50:95:35:54:f1:ee:d3:0a:37:4f:53:
b0:ac:a3:18:30:67:68:60:a8:d3:4b:2f:ab:c7:85:
d5:4b:9b:65:9e:22:0c:03:5b:f9:59:fa:0e:37:43:
07:28:1f:16:49:cd:cf:78:74:fd:83:5b:e9:af:9b:
44:2c:10:21:55:2e:92:0f:b0:0b:d4:e8:06:fc:b5:
c4:1a:53:41:25:7f:0f:fa:30:cc:9c:f6:db:11:a5:
a8:00:9f:ba:f6:10:50:b9:a4:93:4a:54:fe:f4:42:
ab:f3:75:25:67:0b:2b:fb:c1:6d:97:2f:57:55:ed:
c3:0d:af:95:b4:b1:c7:4a:6d:c0:ba:36:1e:c0:ea:
f1:5d:5e:a2:ef:45:b0:eb:2f:38:37:85:ea:47:bd:
13:97:c5:74:69:bf:49:71:0b:0c:89:7a:f4:44:e5:
ec:ac:8e:4c:73:af:9c:6a:07:34:ad:a1:d8:e5:80:
be:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0A:B4:8C:77:D4:21:A5:16:6E:61:FB:65:1A:00:22:B3:26:59:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NQq0jHfUIaUWbmH7ZRoAIrMmWRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:fc:67:a0:e4:8b:f0:ac:92:bb:0a:32:01:9f:24:8d:17:28:
46:a1:01:51:5b:1f:47:dc:c2:4d:4e:53:3a:3d:53:76:ee:2c:
82:d2:06:ef:00:40:50:8e:06:73:a9:a3:c1:95:fe:04:b6:77:
3e:07:02:a5:c0:db:23:0d:69:31:87:03:c2:50:dc:43:15:71:
03:e6:0a:84:a8:23:47:34:5b:77:8d:a0:d7:b2:ca:f8:f0:8e:
fa:d9:46:c2:ce:19:53:50:8f:b1:bf:50:c7:5d:07:eb:9f:c5:
34:8e:9f:df:f4:ba:97:db:92:41:ed:ab:b8:be:fa:63:da:a0:
90:ad:9e:47:bd:02:df:c1:ba:0a:2c:02:74:a0:b2:21:81:40:
b9:aa:1f:b2:ea:aa:77:95:55:f6:dc:55:95:33:be:0a:0b:00:
89:33:64:69:45:c7:05:8f:b7:f1:3e:0c:3f:28:01:1a:0e:e8:
06:f8:08:c4:e6:ad:c3:d4:10:2f:fa:1d:50:a2:3b:37:10:db:
90:f2:a8:87:46:b1:df:00:29:00:cc:07:11:7e:b1:8b:f0:6a:
0a:60:ff:d7:2b:df:1a:96:09:59:71:b6:13:bc:1c:b6:01:da:
e4:e2:d0:25:2e:6e:fc:47:2a:75:8f:46:7a:05:7c:a3:66:59:
24:fb:b2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:37:39 2025 by rpki-client