Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NXXRjpLMrVJN5Y19I2FKyyriJKo.roa
File: NXXRjpLMrVJN5Y19I2FKyyriJKo.roa (raw, json)
Hash identifier: GaixnL3X5EbuoemcXadCljzlmlZ7o7A0sylQzjODFcM=
Subject key identifier: 35:75:D1:8E:92:CC:AD:52:4D:E5:8D:7D:23:61:4A:CB:2A:E2:24:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C0A958BD234446557092F21E0CE9B3AB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NXXRjpLMrVJN5Y19I2FKyyriJKo.roa
Signing time: Thu 15 Jun 2023 20:05:03 +0000
ROA not before: Thu 15 Jun 2023 20:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:c0a8:c45c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c0:a9:58:bd:23:44:46:55:70:92:f2:1e:0c:e9:b3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 20:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3575d18e92ccad524de58d7d23614acb2ae224aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:17:9f:0e:d8:ca:60:2c:a4:42:e9:c9:99:a3:
05:ed:53:bb:85:df:1f:d3:3c:53:bd:cd:e2:e0:aa:
80:e0:29:92:9c:7b:cb:b7:cf:41:e1:37:37:ad:30:
cf:78:af:71:21:91:23:e6:75:4b:a0:3b:9f:56:de:
5c:ed:78:fc:2d:46:df:0a:9a:01:c3:0e:66:ae:88:
fd:58:c3:b1:ec:76:70:78:65:9d:73:3e:c3:b6:a4:
7f:7a:eb:eb:0a:cb:3e:37:de:74:df:6c:39:88:03:
17:95:6a:a6:35:7e:c3:1d:3a:8f:13:3b:89:f6:ec:
99:d7:cd:94:6e:6c:34:4a:46:b0:f3:3c:60:69:0d:
78:39:09:36:11:40:19:0e:04:b9:e5:5c:95:6f:80:
81:1d:8a:70:5e:58:2d:0a:04:a4:d9:ba:74:70:0d:
c8:da:20:50:f4:fb:e4:ab:95:2b:a5:9f:3c:ae:39:
f5:f5:ff:09:45:01:66:cf:85:53:04:51:45:85:08:
b3:e1:eb:63:bc:b9:b1:11:f7:62:c3:67:d8:3b:54:
79:f1:9f:11:b2:f7:f4:15:7c:3e:eb:c1:b6:ca:3f:
b3:20:e6:05:84:8e:5e:ca:ff:1e:ae:4a:15:b6:89:
59:22:6f:b5:bc:32:5e:40:42:01:18:7e:df:1f:78:
b5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:75:D1:8E:92:CC:AD:52:4D:E5:8D:7D:23:61:4A:CB:2A:E2:24:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NXXRjpLMrVJN5Y19I2FKyyriJKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:41:a8:55:be:dd:90:2d:f2:61:59:ff:4a:52:06:81:a2:73:
7d:74:7f:ef:58:1c:b5:64:bf:50:4d:90:ec:e5:59:4a:74:30:
5d:ef:9e:d1:b7:4d:2b:d3:3c:de:41:7b:1b:c9:d0:04:ee:d3:
97:e3:20:13:fb:b3:b2:36:e9:ed:a0:e2:f3:8c:75:ea:2a:13:
71:c5:21:ae:67:dd:e3:09:0c:1a:86:46:5e:2c:29:bb:97:5a:
14:98:df:74:92:dd:cd:3d:2c:70:7e:a3:44:17:e2:76:4e:55:
15:5e:cb:37:75:85:e1:39:36:e7:b7:5b:44:96:8e:c5:ce:37:
d2:f5:2a:6b:06:4e:9b:55:3b:f1:c7:d9:47:10:1d:5f:59:2c:
cc:75:9d:06:4e:66:56:2c:bc:23:06:2c:80:2b:da:ee:7e:17:
a8:e1:f8:c9:02:9c:b1:5a:13:d4:98:04:7e:9c:66:98:7f:c6:
0e:0f:3a:80:9d:08:44:ef:c9:9a:3b:96:1b:10:d0:79:60:15:
07:f4:dd:fe:d8:e9:97:d7:ff:12:d6:6e:85:a9:ff:7f:39:e4:
b9:f7:ea:7b:2c:37:5b:6a:1e:ff:df:a7:b7:e3:63:6e:c7:26:
2b:ee:d2:71:dc:db:67:b3:c5:1b:ae:c1:f4:fd:aa:e5:e1:2c:
d4:0b:89:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:16:38 2025 by rpki-client