Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NpMlGSsIHRVYxq0pP9Wg5S0g9GA.roa
File: NpMlGSsIHRVYxq0pP9Wg5S0g9GA.roa (raw, json)
Hash identifier: Vgz0Hpz3dlJynxge0d9hi38y2HHF8xF3vNzY7vzACnQ=
Subject key identifier: 36:93:25:19:2B:08:1D:15:58:C6:AD:29:3F:D5:A0:E5:2D:20:F4:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187451D344EA36B395A4C87C473C64F94D4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NpMlGSsIHRVYxq0pP9Wg5S0g9GA.roa
Signing time: Mon 03 Apr 2023 03:15:54 +0000
ROA not before: Mon 03 Apr 2023 03:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:45:1d:34:4e:a3:6b:39:5a:4c:87:c4:73:c6:4f:94:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 03:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=369325192b081d1558c6ad293fd5a0e52d20f460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:94:bc:1d:42:66:ca:1e:00:26:33:ff:b0:3b:
0b:a4:34:cc:fc:96:4d:70:16:48:6b:e7:10:87:c3:
88:a7:f2:52:56:46:c1:0d:bd:6b:cd:a1:d5:fd:3c:
82:0b:6b:a9:d1:c5:0a:49:b4:a4:d8:9f:ed:67:f2:
98:73:c8:3e:6c:0f:32:d7:8e:6a:71:8f:55:89:00:
35:81:82:7e:15:6f:35:cd:b9:35:05:2d:0b:74:88:
2e:85:09:b6:7c:0c:2d:47:a3:f8:5f:b7:53:ea:38:
a2:c8:00:63:22:3c:a3:d8:62:62:f9:d1:85:a8:2f:
f9:c2:b5:6b:a7:b5:de:3b:67:c1:89:1f:ee:f7:c6:
dd:55:ca:63:a0:36:45:55:ee:0e:c5:73:f3:1c:37:
94:99:15:c3:36:b4:93:a6:5d:72:42:94:73:62:27:
19:67:ed:86:99:fe:45:8a:94:9e:49:4d:dc:c4:f1:
97:f0:51:ae:7c:e1:5b:7f:4b:93:fa:16:1c:61:bf:
f5:62:d2:97:4a:37:52:77:07:a8:e2:b7:06:30:2b:
98:45:64:f3:8e:73:aa:86:61:56:16:37:bc:79:53:
ac:05:64:57:05:65:1b:b7:7f:11:0a:77:38:a5:30:
c4:f2:fe:b5:c9:6e:53:c2:36:fb:4e:b2:19:9d:11:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:93:25:19:2B:08:1D:15:58:C6:AD:29:3F:D5:A0:E5:2D:20:F4:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NpMlGSsIHRVYxq0pP9Wg5S0g9GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:08:90:af:d4:ad:5a:6f:36:ce:ef:0c:0b:ed:54:cb:e4:db:
03:ab:32:19:55:28:6e:21:cf:82:25:b3:86:f9:ec:9d:a8:35:
c2:50:4d:54:c6:d7:cb:5f:78:02:49:ab:39:95:19:6d:6f:c4:
62:24:97:8f:b1:d4:92:ae:9f:ce:bc:e1:7e:3d:cf:27:25:0b:
12:37:ff:8f:11:9f:98:b6:9b:0d:9f:07:1a:82:08:ad:2e:b1:
52:6d:3b:39:e8:91:d7:c0:ca:aa:06:e3:ba:12:17:c2:ca:0a:
07:ef:c2:7c:c9:4b:3a:b6:79:ba:d5:15:a7:ae:d4:7c:51:d9:
2d:6f:ee:e8:c2:ef:eb:ad:ee:94:21:0f:75:84:78:90:2b:90:
2c:a3:a5:f7:be:ee:c4:98:21:b3:4a:07:2c:ec:a3:2c:2c:91:
91:5e:87:27:c3:f7:a3:db:ed:f2:ef:3e:67:3c:24:76:7d:5b:
10:de:ea:3a:3c:29:42:38:d1:a1:25:3a:c7:d2:9b:c1:61:e8:
50:9a:20:6e:7b:ec:5a:3d:83:80:b8:7c:bf:6b:20:b3:46:08:
fe:3d:a9:7a:2e:2f:80:63:5d:db:d9:d9:b7:82:bb:8c:e3:73:
99:53:cf:ba:5a:16:b8:50:df:8e:fe:91:b5:25:e2:34:bd:4c:
34:af:80:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:16:25 2025 by rpki-client