Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NtYBmLzEldp68CUULBds4Isx09k.roa
File: NtYBmLzEldp68CUULBds4Isx09k.roa (raw, json)
Hash identifier: 4tJAGSit8evVvG0hnWChwWntQhkTKxdQjX65jXC+Amg=
Subject key identifier: 36:D6:01:98:BC:C4:95:DA:7A:F0:25:14:2C:17:6C:E0:8B:31:D3:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856928390F0F0EB2500FD67DEDC594BFE6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NtYBmLzEldp68CUULBds4Isx09k.roa
Signing time: Sat 31 Dec 2022 17:08:41 +0000
ROA not before: Sat 31 Dec 2022 17:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:69:28:39:0f:0f:0e:b2:50:0f:d6:7d:ed:c5:94:bf:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 17:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36d60198bcc495da7af025142c176ce08b31d3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:37:f2:ec:dc:57:e5:4d:a3:00:70:c8:e5:65:
05:5d:d3:41:c3:68:32:fa:2b:08:60:9e:d2:69:66:
e5:e4:b9:66:1e:c8:c9:2e:2c:31:a8:6a:7b:af:ee:
23:7b:73:a8:0c:cc:ba:14:6c:c6:41:85:06:66:20:
f6:c1:fd:2f:80:14:6a:f6:16:f7:38:64:e3:93:bf:
bd:8e:f1:b3:cf:82:23:9a:3b:f4:77:93:da:a1:cf:
ed:65:5b:f5:bb:ca:8d:52:dd:6c:a3:b0:44:d3:43:
2d:5f:52:84:77:5e:c2:66:f5:24:17:87:bc:bc:ce:
f5:ac:c6:a0:79:db:3b:bc:b7:12:03:5f:0a:df:e0:
42:52:7e:07:2a:54:6f:ad:74:aa:9c:87:d9:f2:6f:
2a:6f:4f:ba:7f:51:32:20:a8:2e:64:35:7c:fa:92:
7e:cd:80:e3:2d:c4:74:1b:af:a8:22:0a:25:72:be:
ae:43:37:50:4a:ca:d7:e1:1d:97:63:92:17:af:23:
e4:29:a0:36:89:ba:82:f3:d0:6c:f6:32:12:8f:3d:
52:d7:5d:76:78:b9:69:68:40:b0:73:d6:78:71:90:
6c:b3:39:99:1f:18:8c:46:5a:4e:ef:6f:aa:79:16:
b6:fd:d3:c2:39:5d:ad:05:ef:e1:8c:24:8d:7b:dc:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D6:01:98:BC:C4:95:DA:7A:F0:25:14:2C:17:6C:E0:8B:31:D3:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NtYBmLzEldp68CUULBds4Isx09k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:87:72:c9:66:7b:5e:48:c3:a8:8d:57:84:be:2d:0f:97:56:
a0:80:0f:3e:8b:01:62:14:69:da:60:ad:cc:3a:41:45:ef:7f:
b2:f2:84:67:f8:0d:96:0e:5c:3c:e6:10:49:a2:46:48:06:a4:
91:ba:48:97:c2:c0:e0:99:e4:2d:b2:9a:51:0b:4a:e9:ea:e9:
12:0f:f7:ee:7c:82:a4:10:88:3a:97:e6:75:ea:64:15:ac:4f:
18:a7:cd:ed:65:d4:37:c4:29:b7:81:0d:b0:ca:31:fb:89:fb:
2a:eb:3d:56:be:a3:9a:45:bf:46:cd:1c:28:43:d9:be:72:b0:
75:7a:0d:7b:c7:09:a7:52:37:f0:10:60:ba:d2:16:f6:1e:33:
c0:6a:88:1f:d9:60:1a:47:69:32:68:7e:d7:80:bf:c1:2c:bf:
e8:68:1b:b6:8d:76:4c:86:cb:8e:f9:1e:6a:9c:70:1c:5a:cc:
88:d4:13:39:26:42:2e:c3:94:86:15:1e:74:35:f2:c2:c5:4b:
a6:04:b7:6a:33:1e:b1:30:58:e2:8a:15:ca:3a:20:72:d1:54:
1e:8d:2d:2d:d0:7e:cc:54:5f:8f:f0:8e:6a:b7:17:1c:bc:1e:
d9:24:17:7d:1b:4f:11:6d:e3:72:10:8f:2a:13:6d:59:87:2b:
40:26:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:59:53 2025 by rpki-client