Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N9Bb1r8W70vBE-U3JHR6Q4orNYA.roa
File: N9Bb1r8W70vBE-U3JHR6Q4orNYA.roa (raw, json)
Hash identifier: lG07W2lWsO8dksHEnLWAn4JoKDoI+kNlYnIcVglqyQ4=
Subject key identifier: 37:D0:5B:D6:BF:16:EF:4B:C1:13:E5:37:24:74:7A:43:8A:2B:35:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CCE1D1E5BDE65DA682A0AFF2F0473349
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N9Bb1r8W70vBE-U3JHR6Q4orNYA.roa
Signing time: Sun 06 Aug 2023 22:04:58 +0000
ROA not before: Sun 06 Aug 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:cce1:34d1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cc:e1:d1:e5:bd:e6:5d:a6:82:a0:af:f2:f0:47:33:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37d05bd6bf16ef4bc113e53724747a438a2b3580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:1b:86:27:39:a5:92:86:18:48:c1:d5:e7:
18:8a:bd:63:0f:97:e8:58:cb:96:f1:d1:d0:d3:73:
e0:1c:6d:bb:b1:20:73:08:a6:a2:5a:92:cc:5b:1a:
52:f9:39:17:a4:bf:c5:84:97:ee:41:df:25:88:29:
2d:76:04:49:30:54:fe:e7:bc:62:19:68:8f:d7:10:
36:3e:37:b3:cb:3a:bd:9f:c2:48:69:97:8e:cb:bb:
ae:fb:e3:4b:41:92:ea:aa:eb:16:ef:67:f8:74:50:
c8:11:df:b4:87:88:c6:05:fd:e8:17:ba:a0:8a:40:
a5:c2:16:91:f1:b6:9e:bb:3f:13:37:7f:cb:e5:c8:
58:8f:52:84:fd:33:e3:c7:e5:9e:4a:ac:ed:ee:3d:
74:8b:80:a5:b6:da:bd:a3:bf:a9:f6:2a:26:5e:81:
86:c9:db:a7:06:af:6f:37:c6:09:86:a7:9f:0f:1a:
e1:17:18:5f:48:51:3f:05:32:8e:e5:6a:03:24:2a:
8a:1d:7f:85:62:08:ac:62:3a:99:ef:78:67:ef:de:
9d:2c:35:f4:87:6a:cf:2e:ef:0a:9c:12:6a:83:b1:
18:da:84:4c:a3:d1:ba:71:6e:98:84:ae:36:0f:df:
45:ac:b3:79:42:9c:cb:91:2d:4c:71:c1:08:c7:42:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D0:5B:D6:BF:16:EF:4B:C1:13:E5:37:24:74:7A:43:8A:2B:35:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N9Bb1r8W70vBE-U3JHR6Q4orNYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:7a:b7:1a:c9:41:06:e9:0b:0d:02:58:6c:d3:a0:3b:5f:23:
6c:2f:fd:15:22:1e:b0:df:35:26:0d:99:4f:9c:63:a8:d0:78:
f9:38:cc:d4:35:a3:3a:e3:f3:38:fd:62:2e:ae:41:eb:94:de:
47:a9:56:89:2c:25:e0:7e:6f:67:0c:eb:00:00:5e:94:60:33:
98:67:11:2c:38:ee:a9:c9:bd:fa:e3:97:26:07:8d:94:79:9d:
f5:02:ed:21:f1:1f:12:49:b7:cf:6f:1c:dd:07:fc:8e:73:5d:
92:4e:cb:d1:20:cd:15:89:fa:bf:65:d0:05:c7:c6:4b:28:fa:
db:09:6b:66:3c:71:a5:f1:23:32:8b:a3:5a:d8:dd:a3:b5:09:
4c:10:dc:16:7a:06:fd:26:c8:3d:aa:00:07:f1:45:79:2c:ea:
d2:96:5f:00:cc:f6:1b:f1:d6:92:a0:51:71:44:c0:4f:f0:76:
2c:87:6d:a6:f9:74:7d:35:ae:a5:d6:ed:f3:14:1f:75:2f:e9:
66:52:c3:9d:a6:fa:5e:71:ab:0c:fc:c3:39:b6:b9:ff:a5:0e:
78:48:c1:ec:74:e4:54:a5:8b:d6:fb:d4:cc:7e:18:83:c0:33:
40:21:8b:85:e6:d4:e7:19:b5:68:b4:7d:29:eb:79:1a:e7:92:
54:43:8f:3d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnM4dHlveZdpoKgr/LwRzNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA2MjIwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2QwNWJkNmJmMTZlZjRiYzExM2U1MzcyNDc0N2E0MzhhMmIzNTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3Ubhic5pZKGGEjB1ecYir1jD5fo
WMuW8dHQ03PgHG27sSBzCKaiWpLMWxpS+TkXpL/FhJfuQd8liCktdgRJMFT+57xi
GWiP1xA2Pjezyzq9n8JIaZeOy7uu++NLQZLqqusW72f4dFDIEd+0h4jGBf3oF7qg
ikClwhaR8baeuz8TN3/L5chYj1KE/TPjx+WeSqzt7j10i4Clttq9o7+p9iomXoGG
ydunBq9vN8YJhqefDxrhFxhfSFE/BTKO5WoDJCqKHX+FYgisYjqZ73hn796dLDX0
h2rPLu8KnBJqg7EY2oRMo9G6cW6YhK42D99FrLN5QpzLkS1MccEIx0ImowIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDfQW9a/Fu9LwRPlNyR0ekOKKzWAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTjlCYjFyOFc3MHZCRS1VM0pIUjZRNG9yTllBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHR6txrJQQbpCw0CWGzT
oDtfI2wv/RUiHrDfNSYNmU+cY6jQePk4zNQ1ozrj8zj9Yi6uQeuU3kepVoksJeB+
b2cM6wAAXpRgM5hnESw47qnJvfrjlyYHjZR5nfUC7SHxHxJJt89vHN0H/I5zXZJO
y9EgzRWJ+r9l0AXHxkso+tsJa2Y8caXxIzKLo1rY3aO1CUwQ3BZ6Bv0myD2qAAfx
RXks6tKWXwDM9hvx1pKgUXFEwE/wdiyHbab5dH01rqXW7fMUH3Uv6WZSw52m+l5x
qwz8wzm2uf+lDnhIwex05FSli9b71Mx+GIPAM0Ahi4Xm1OcZtWi0fSnreRrnklRD
jz0=
-----END CERTIFICATE-----
Generated at Fri May 2 03:39:30 2025 by rpki-client