Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NvtmvuGJLVMQwol_LboQ5XoqTsk.roa
File: NvtmvuGJLVMQwol_LboQ5XoqTsk.roa (raw, json)
Hash identifier: HWURY1KdsK7Sco3dwKFq02peQHD4DLfVjUHbbF0ND04=
Subject key identifier: 36:FB:66:BE:E1:89:2D:53:10:C2:89:7F:2D:BA:10:E5:7A:2A:4E:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877A19768D3B676171B5DEC5C396AC3AE1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NvtmvuGJLVMQwol_LboQ5XoqTsk.roa
Signing time: Thu 13 Apr 2023 10:11:41 +0000
ROA not before: Thu 13 Apr 2023 10:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:19:76:8d:3b:67:61:71:b5:de:c5:c3:96:ac:3a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 10:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36fb66bee1892d5310c2897f2dba10e57a2a4ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:f1:7d:7d:d0:c5:cf:4f:e1:cf:11:b3:3e:
44:33:87:e4:d6:c3:a5:45:ba:96:97:30:b5:c9:35:
e3:d9:36:d8:21:21:53:01:f7:eb:5c:30:09:81:e0:
c7:15:ed:0a:8a:36:2f:9a:33:a5:31:29:d0:c2:39:
72:97:22:fc:54:6c:44:6b:ca:12:24:50:1c:15:ac:
b7:39:9b:07:be:a7:b0:c3:53:23:60:75:3e:aa:0d:
c9:23:38:d8:15:ab:aa:6d:ff:ef:b0:b8:05:4c:cb:
03:60:65:ce:e9:18:99:95:f6:d5:d1:72:d1:58:dc:
01:50:b1:99:22:6f:0b:d9:3c:8d:12:1c:08:33:85:
5e:56:4d:f6:c4:03:23:2a:bb:f7:f8:7b:8a:fc:0b:
fd:70:ef:92:c0:47:8b:a2:8a:22:72:dc:c6:ec:cb:
9c:b1:16:e9:31:eb:31:10:8a:76:2a:9d:05:0e:14:
00:87:ae:1f:87:d8:88:ec:c4:69:39:8d:9b:f2:1e:
78:50:90:4f:00:54:72:d5:e1:58:0c:ac:c6:a8:90:
59:9d:0f:dc:d1:b4:dd:93:59:32:14:a1:59:30:14:
8f:02:f5:04:4b:f1:f1:5c:a4:8c:fc:a0:76:10:0b:
ad:0e:9a:b0:a4:ed:10:43:55:45:d6:b6:2c:c7:b7:
50:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FB:66:BE:E1:89:2D:53:10:C2:89:7F:2D:BA:10:E5:7A:2A:4E:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NvtmvuGJLVMQwol_LboQ5XoqTsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:53:3b:7f:ef:cb:f4:32:dd:42:f7:ac:8e:54:3c:3b:5d:a9:
c8:b1:eb:e2:c5:65:58:ff:7b:d3:32:4a:a0:0d:97:66:f0:a7:
6a:c0:a3:14:cc:60:c0:90:d0:36:16:82:70:2b:4e:3a:9d:ec:
e6:57:6d:83:4e:8c:f5:9f:0c:b8:ae:2b:77:f8:27:26:e4:06:
70:64:9b:67:57:77:85:a4:f9:0f:c0:06:52:cd:c0:92:ff:f3:
e4:87:ea:bf:23:67:76:10:e2:71:19:2c:7c:99:fb:d3:2d:e7:
2f:85:e5:63:d8:f5:e7:1a:3b:6c:24:bb:d6:e3:ff:f5:fe:97:
6a:56:aa:88:4e:80:00:a6:80:fe:f8:6b:8d:26:21:76:f8:6c:
0a:19:ae:e6:81:7b:ed:34:8b:8e:43:ae:3c:47:a0:4c:f2:c1:
51:5e:a7:55:78:ca:c4:44:f5:0b:6a:fa:cd:74:7f:a4:fb:66:
6f:42:4a:86:a4:7d:d5:32:2e:61:4f:cc:01:4d:4f:85:88:55:
09:f8:1f:a1:7f:c0:7a:c1:01:45:61:f0:3d:3a:e4:c2:74:1f:
53:eb:a6:10:13:75:34:c2:42:18:cf:dd:8b:2b:30:84:15:e3:
dd:bd:0b:78:e0:cb:3d:8c:b1:54:c7:ec:9f:9f:be:60:ee:0e:
59:4e:b2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:02:56 2025 by rpki-client