Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NHUb6bDiNF6f_s5fG_LRbPZPxas.roa
File: NHUb6bDiNF6f_s5fG_LRbPZPxas.roa (raw, json)
Hash identifier: 5gEg2sxRNV+UVP0EHfYPRGvpDunzDtfYZ4W9sWCKA4c=
Subject key identifier: 34:75:1B:E9:B0:E2:34:5E:9F:FE:CE:5F:1B:F2:D1:6C:F6:4F:C5:AB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01835C1DF38A3F055E5E4083DC001764DC39
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NHUb6bDiNF6f_s5fG_LRbPZPxas.roa
Signing time: Tue 20 Sep 2022 18:16:50 +0000
ROA not before: Tue 20 Sep 2022 18:16:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5c:1d:f3:8a:3f:05:5e:5e:40:83:dc:00:17:64:dc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 20 18:16:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34751be9b0e2345e9ffece5f1bf2d16cf64fc5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:cf:b7:91:bc:a8:15:bc:74:93:8a:f9:19:
90:93:92:01:7b:f1:97:a1:95:e0:45:20:ce:b3:44:
75:96:3f:7c:34:88:c5:2b:b6:90:3f:2a:75:c0:75:
75:d9:7a:3a:27:84:ae:db:66:a7:dc:f3:4c:8e:01:
6d:75:b2:6f:d1:cc:49:a4:e8:10:7c:f6:ce:4d:aa:
f2:6d:14:f5:29:70:0f:78:d4:bf:b9:f2:21:9e:82:
56:84:61:45:61:60:f1:de:41:25:0b:6c:00:62:0b:
ee:59:db:f3:9f:8b:e9:a2:b2:90:19:90:84:73:30:
66:a0:78:22:2c:b9:f5:f9:85:bc:2e:cb:8b:ca:ba:
67:55:04:a7:4b:77:64:67:45:94:bb:22:7b:8e:71:
44:17:72:f5:08:c8:1d:d1:9d:fe:7b:65:34:51:33:
d2:f8:00:7c:d9:15:4d:99:95:2b:9f:89:1d:fd:1f:
4c:62:ae:92:08:56:cf:18:98:97:1c:d7:8a:53:fc:
fe:44:7d:ae:70:7d:92:aa:a4:83:d0:c7:90:d2:50:
a2:fb:b3:0c:91:bd:2d:20:fa:12:0b:f2:e4:5f:11:
dc:e5:85:21:20:ea:d7:04:aa:1d:3c:1f:22:6e:f5:
63:82:26:3f:de:12:dd:cc:d2:d1:05:94:fb:bd:9a:
5e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:1B:E9:B0:E2:34:5E:9F:FE:CE:5F:1B:F2:D1:6C:F6:4F:C5:AB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NHUb6bDiNF6f_s5fG_LRbPZPxas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:07:15:ae:8c:04:0b:49:39:8b:61:91:b6:25:7a:f8:a7:76:
a1:74:26:0f:a3:08:3c:31:58:b9:e1:ca:4c:33:2e:df:1b:df:
2a:02:48:55:28:3b:e8:c1:39:ec:aa:2a:52:75:c7:06:e6:77:
51:5f:7e:f1:7f:f6:9a:9c:f2:5f:f1:dc:db:f1:84:2d:39:90:
d4:0f:4c:9d:5c:05:2d:6c:b7:b0:e5:9b:e7:4b:f1:9e:d3:6b:
d3:fd:c2:0f:8d:05:f6:58:03:54:5e:4f:90:1b:88:d4:1a:ae:
bc:49:e5:25:01:66:0a:23:50:2b:5d:f0:97:9a:a4:a2:6b:6c:
71:87:6a:53:3d:8f:6e:7b:4a:bc:ea:cf:e8:38:61:c7:70:5f:
5e:a4:79:e0:5a:e0:73:e9:c0:fb:c1:f1:a2:d2:f5:0d:e7:3f:
65:a4:12:91:3c:b7:e9:96:16:f0:16:97:dc:55:df:1d:63:22:
02:32:09:0b:36:f3:a5:14:73:58:aa:1a:19:02:d8:fd:07:6f:
e6:a9:eb:ec:ba:b1:41:cb:dd:02:df:d8:15:0b:ed:17:62:fa:
ba:ab:7c:fe:3d:9b:63:48:56:03:d7:2a:89:01:7f:0b:7c:22:
fc:cc:ba:c1:d4:9b:54:b1:dc:21:d7:49:a2:19:d3:e5:28:36:
30:51:73:e2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYNcHfOKPwVeXkCD3AAXZNw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTIwMTgxNjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDc1MWJlOWIwZTIzNDVlOWZmZWNlNWYxYmYyZDE2Y2Y2NGZjNWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7nPt5G8qBW8dJOK+RmQk5IBe/GX
oZXgRSDOs0R1lj98NIjFK7aQPyp1wHV12Xo6J4Su22an3PNMjgFtdbJv0cxJpOgQ
fPbOTarybRT1KXAPeNS/ufIhnoJWhGFFYWDx3kElC2wAYgvuWdvzn4vporKQGZCE
czBmoHgiLLn1+YW8LsuLyrpnVQSnS3dkZ0WUuyJ7jnFEF3L1CMgd0Z3+e2U0UTPS
+AB82RVNmZUrn4kd/R9MYq6SCFbPGJiXHNeKU/z+RH2ucH2SqqSD0MeQ0lCi+7MM
kb0tIPoSC/LkXxHc5YUhIOrXBKodPB8ibvVjgiY/3hLdzNLRBZT7vZpefwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDR1G+mw4jRen/7OXxvy0Wz2T8WrMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTkhVYjZiRGlORjZmX3M1ZkdfTFJiUFpQeGFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHoHFa6MBAtJOYthkbYl
evindqF0Jg+jCDwxWLnhykwzLt8b3yoCSFUoO+jBOeyqKlJ1xwbmd1FffvF/9pqc
8l/x3NvxhC05kNQPTJ1cBS1st7Dlm+dL8Z7Ta9P9wg+NBfZYA1ReT5AbiNQarrxJ
5SUBZgojUCtd8JeapKJrbHGHalM9j257Srzqz+g4YcdwX16keeBa4HPpwPvB8aLS
9Q3nP2WkEpE8t+mWFvAWl9xV3x1jIgIyCQs286UUc1iqGhkC2P0Hb+ap6+y6sUHL
3QLf2BUL7Rdi+rqrfP49m2NIVgPXKokBfwt8IvzMusHUm1Sx3CHXSaIZ0+UoNjBR
c+I=
-----END CERTIFICATE-----
Generated at Thu May 1 06:46:34 2025 by rpki-client