Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IDV5563_nfscBGhOs_sFf76POjI.roa
File: IDV5563_nfscBGhOs_sFf76POjI.roa (raw, json)
Hash identifier: wjmd9PjEcYi9hIyqlk7C8E8LKKUa9vJjkeN1DguINsw=
Subject key identifier: 20:35:79:E7:AD:FF:9D:FB:1C:04:68:4E:B3:FB:05:7F:BE:8F:3A:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018652D0AD7E7CE59A13CE3EEE514C610124
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IDV5563_nfscBGhOs_sFf76POjI.roa
Signing time: Wed 15 Feb 2023 02:04:12 +0000
ROA not before: Wed 15 Feb 2023 02:04:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:52d0:9df7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:52:d0:ad:7e:7c:e5:9a:13:ce:3e:ee:51:4c:61:01:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 02:04:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=203579e7adff9dfb1c04684eb3fb057fbe8f3a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:25:d2:5c:b6:a6:be:56:c0:85:94:b5:91:
a6:c6:7a:61:ac:16:16:6e:15:fa:88:6e:41:53:2e:
9e:f3:2a:ae:99:c4:5c:75:a3:a6:49:38:3a:33:9f:
fc:85:4c:5c:66:67:f0:06:bc:24:2d:7b:8a:32:fc:
63:66:d8:5e:54:9c:c2:5e:28:70:cb:16:55:c2:bc:
af:31:36:ed:f3:1d:44:70:4c:c0:31:f6:d9:72:2d:
fe:17:7b:27:ee:bb:d5:75:ee:2c:86:40:d0:fe:4c:
2e:51:ca:30:bf:0f:dc:ef:c4:41:66:7c:72:0e:17:
9e:23:05:5a:92:07:5e:ce:14:64:c3:27:90:6b:d2:
1e:8b:9a:99:21:41:f4:5b:de:f4:0a:e5:97:63:49:
28:ae:5c:76:0c:a6:13:0f:c0:4c:60:68:54:7d:1c:
0a:c9:4b:3a:af:52:88:e3:41:c1:f6:46:e4:93:52:
7e:03:db:24:fe:8b:b2:82:79:e1:32:aa:b7:f6:bf:
3c:de:7f:bd:1f:39:91:3c:73:ab:49:d9:21:21:d0:
9e:b7:08:93:79:75:d0:44:e0:6a:ab:b7:40:f3:e6:
46:e6:cf:9e:fd:62:9d:9e:03:51:8e:1b:c1:84:c0:
ea:cf:13:9e:90:95:da:0f:1b:45:93:34:71:0f:58:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:35:79:E7:AD:FF:9D:FB:1C:04:68:4E:B3:FB:05:7F:BE:8F:3A:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IDV5563_nfscBGhOs_sFf76POjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:0f:71:4d:ab:f8:89:2d:13:96:1c:78:bd:9e:71:f0:1b:f1:
ca:fa:e1:75:06:1c:c5:7b:26:67:6e:73:9e:76:88:a1:f7:b0:
17:a6:5d:80:6d:0e:76:bf:a1:14:1e:96:64:93:f6:7f:5a:7c:
b7:0a:5d:b1:b6:cf:35:5f:37:26:21:af:7c:83:7a:1c:48:69:
bc:1e:d7:43:ab:0e:f9:70:46:f5:93:a3:c5:a9:88:e1:ae:a2:
22:29:dd:b1:95:3b:f3:e4:7c:55:a1:20:6a:4d:8a:71:5f:ba:
73:a4:1f:1a:b4:01:19:0d:4e:eb:34:bb:e4:cf:08:8d:c5:a9:
ea:b3:ae:57:3b:c7:3f:0a:48:44:6c:d6:04:f6:2e:1b:40:f6:
b7:2e:22:22:58:44:16:3a:ae:21:39:09:10:55:ea:56:46:41:
84:fc:b7:77:8c:b4:d5:05:4b:c1:25:38:f2:cf:4f:7f:ca:ab:
06:18:6f:cd:6c:73:08:b1:ee:97:8d:79:6a:65:77:e9:af:2f:
90:85:69:af:ba:67:00:69:8d:dc:cc:50:df:8c:d4:5b:75:6e:
30:93:a7:49:4f:92:5c:11:fb:94:93:89:65:a2:84:bc:56:34:
fc:a7:d7:ea:40:d1:94:d8:f5:4a:30:03:1d:91:36:c8:22:e5:
54:69:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:55:37 2025 by rpki-client