Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NlWbhguEjsp_c3JokMrX-Sq8tGU.roa
File: NlWbhguEjsp_c3JokMrX-Sq8tGU.roa (raw, json)
Hash identifier: kT7aUoVNdMX2twcN8o2sMohkWNGIGQKjRzQc1QeL5xs=
Subject key identifier: 36:55:9B:86:0B:84:8E:CA:7F:73:72:68:90:CA:D7:F9:2A:BC:B4:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187301584EE8FFE1A74535EF43F876763D2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NlWbhguEjsp_c3JokMrX-Sq8tGU.roa
Signing time: Thu 30 Mar 2023 01:15:29 +0000
ROA not before: Thu 30 Mar 2023 01:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:30:15:84:ee:8f:fe:1a:74:53:5e:f4:3f:87:67:63:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 01:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36559b860b848eca7f73726890cad7f92abcb465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:39:c8:41:b6:9f:7e:27:1e:d6:a7:86:88:db:
ba:62:12:46:ba:44:86:3e:bf:2c:d2:7b:39:2d:b2:
39:ba:a6:65:0b:69:71:55:80:0b:6a:60:ef:0e:48:
71:ea:ca:88:d9:7a:67:87:8f:48:ce:6c:01:e5:c7:
2e:b0:01:07:c6:7a:09:5b:77:1c:a7:ad:7b:48:4b:
ed:fe:7d:07:c7:5f:25:bb:67:1a:94:cb:6b:23:0f:
2e:f9:8a:7a:29:c5:52:18:88:df:b5:04:61:7a:55:
95:40:85:9d:f3:71:8c:9a:71:1c:cd:5e:78:c4:80:
80:6c:bf:51:a4:fb:2d:07:0a:01:66:21:9c:c0:81:
db:63:ba:a6:c7:ba:a1:b2:4b:c0:9e:22:b5:70:c7:
95:f2:86:8e:e2:b0:99:c9:d1:bd:24:a6:53:01:77:
10:d8:86:15:5f:07:5a:ef:7c:d5:89:57:63:f4:5c:
ac:f1:1f:7c:96:14:0b:be:1a:ec:ab:d8:1c:44:db:
f5:8b:c5:6d:21:a3:bc:ee:1a:4e:92:82:c4:0a:fb:
3a:c4:4b:3a:03:e3:67:01:06:0b:0d:2a:f8:11:1f:
d0:7b:c0:f1:9a:02:c8:f1:85:2e:3c:2f:1b:01:e4:
fb:00:df:e7:4f:62:66:d5:54:4b:17:59:cc:96:ca:
4a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:55:9B:86:0B:84:8E:CA:7F:73:72:68:90:CA:D7:F9:2A:BC:B4:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NlWbhguEjsp_c3JokMrX-Sq8tGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:d3:7d:b3:3c:4e:9e:51:bd:55:cf:83:77:19:08:3f:f0:43:
37:11:6d:61:87:0e:2c:bd:e3:17:04:93:ff:c8:cf:5f:dc:b2:
5e:a7:f6:d0:ca:7f:f4:60:d1:cc:ad:b7:c4:2b:96:33:b4:a8:
0f:20:de:11:58:12:e5:cc:36:23:19:cc:cf:41:cf:9e:cf:3f:
0b:c4:7c:a9:29:53:0c:49:eb:8d:e6:d1:f2:3a:67:55:b6:c0:
df:fd:a3:7a:38:1a:62:3b:9c:2a:66:d3:d0:c1:38:68:34:ae:
bf:fc:66:b5:36:c5:4e:58:06:e8:82:59:40:cb:c7:e6:a0:81:
28:72:6a:24:95:0e:98:db:f9:32:b4:f6:4e:ec:9e:7c:99:97:
65:47:4e:3e:18:26:7d:cb:21:d1:58:a4:21:98:d1:07:1e:91:
16:11:90:f4:7a:a5:02:91:26:a8:3e:72:d2:d1:ce:72:82:ea:
82:db:84:b5:01:02:30:de:0d:3d:1c:10:8e:9b:5b:d3:88:ea:
78:40:e9:53:30:fb:e4:dd:e5:c3:02:f7:c2:e0:9c:56:95:ea:
bb:f4:0d:24:0d:dc:f4:96:28:6a:fd:10:75:5b:73:a7:66:9a:
ba:e0:20:d1:e2:5a:22:07:b3:6a:55:a8:9b:66:7d:9b:00:dc:
68:ca:ef:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:05:44 2025 by rpki-client