Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NaPJxJ6sZ4a9xuncWuk-OhByNqs.roa
File: NaPJxJ6sZ4a9xuncWuk-OhByNqs.roa (raw, json)
Hash identifier: ldy2eXYWqX83+hJOkAhDdjAg0vsgpTbGgmwBmMIA8Ho=
Subject key identifier: 35:A3:C9:C4:9E:AC:67:86:BD:C6:E9:DC:5A:E9:3E:3A:10:72:36:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 840202BC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NaPJxJ6sZ4a9xuncWuk-OhByNqs.roa
Signing time: Sat 14 May 2022 16:11:50 +0000
ROA not before: Sat 14 May 2022 16:11:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2214724284 (0x840202bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 14 16:11:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35a3c9c49eac6786bdc6e9dc5ae93e3a107236ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:6f:3a:75:37:a8:d6:47:cc:16:28:e6:02:
26:8f:31:f2:1c:79:d7:02:f4:ed:d6:2f:84:8e:78:
d7:9c:53:c6:65:44:82:f0:f9:75:7f:10:fd:9a:91:
19:88:b6:58:03:e4:4c:e6:e3:e0:ab:0c:fc:ef:c5:
47:46:0a:b1:ef:bd:a5:e8:4f:13:a2:20:2f:4b:3e:
73:50:ec:58:22:dc:9e:98:43:b2:06:b2:d3:40:bb:
a0:2d:48:39:8d:22:f4:72:82:e3:17:18:1f:17:af:
37:f3:59:7a:f2:59:b8:b5:e7:47:9c:0a:85:e2:97:
a2:a1:91:81:ac:9e:0a:cd:c8:dc:09:36:96:cd:0b:
5e:d4:32:0d:e1:2b:e7:bb:82:6d:f0:dd:c3:0b:3f:
26:5f:80:60:b6:78:2d:32:48:47:2a:b7:3f:02:37:
c5:42:99:a3:c8:e8:76:c1:17:a0:3f:29:71:5d:5c:
f7:f7:b2:e3:14:f0:48:c2:bc:c7:80:e1:5d:56:70:
30:cb:0d:a0:dc:3b:60:af:e7:21:b7:e9:82:4c:ca:
72:48:18:62:21:cd:f9:cc:15:46:53:67:6a:4f:64:
60:96:92:4c:ca:8a:c0:8d:47:a3:5f:e5:60:a9:7f:
cc:57:97:8d:b6:d7:2a:60:99:0e:07:43:f4:f1:48:
bf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A3:C9:C4:9E:AC:67:86:BD:C6:E9:DC:5A:E9:3E:3A:10:72:36:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NaPJxJ6sZ4a9xuncWuk-OhByNqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:bb:28:42:ea:26:76:7a:bc:f5:84:d8:80:90:9c:dd:c9:58:
7d:38:a1:6e:e3:77:a4:90:e9:b2:47:6c:65:f8:91:4d:18:94:
38:ec:c1:d0:46:7b:40:07:04:c4:87:79:24:e0:03:a5:9f:0f:
86:2e:50:5f:1d:7a:fc:99:b9:5a:93:be:f3:60:9d:28:84:72:
96:30:a8:b4:f7:bd:9b:1f:69:79:02:09:19:e9:56:d9:03:15:
6b:6a:16:8a:60:e4:27:c6:05:d5:05:5a:27:96:19:b4:19:52:
32:e5:5a:e4:99:0e:4c:01:67:86:95:ef:d7:65:bd:98:8e:5e:
57:d5:69:6c:73:d8:4b:42:96:c1:07:72:3d:f4:76:09:89:b2:
d5:15:8e:e6:e7:5b:39:ac:0b:85:49:12:9b:f0:c7:d4:12:cf:
26:85:a9:a5:b7:11:e7:01:49:1d:30:25:ea:e0:60:6d:5b:88:
7c:7d:b2:5f:4a:94:5f:cd:3b:7f:fa:90:ff:98:bd:33:cd:b6:
3c:72:2f:46:e7:b1:21:e6:cc:0c:1c:2c:4c:1f:70:18:47:67:
7c:7e:d8:53:28:18:40:6a:98:0b:c7:73:1f:da:8c:24:b1:7f:
cc:31:77:3d:43:f6:83:5a:a6:d9:62:62:78:6a:97:5c:a2:4b:
ae:9c:ff:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:42:57 2025 by rpki-client