Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nep5FS59mDoKv50bIhxjSfBxh9k.roa
File: Nep5FS59mDoKv50bIhxjSfBxh9k.roa (raw, json)
Hash identifier: W6/fqTpuGFOLxf3mAQmWlUEGAcu1rlDYXmA8068lkOA=
Subject key identifier: 35:EA:79:15:2E:7D:98:3A:0A:BF:9D:1B:22:1C:63:49:F0:71:87:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F093ABFE1A2CBEDE6FEE986D6179CE30
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nep5FS59mDoKv50bIhxjSfBxh9k.roa
Signing time: Thu 08 Dec 2022 07:12:00 +0000
ROA not before: Thu 08 Dec 2022 07:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f0:93:ab:fe:1a:2c:be:de:6f:ee:98:6d:61:79:ce:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 8 07:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35ea79152e7d983a0abf9d1b221c6349f07187d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b8:a6:59:a7:61:f1:c3:5e:89:6c:e1:51:bf:
57:4d:72:43:e1:5d:f1:05:d1:66:90:65:82:ac:b8:
0c:be:88:72:14:14:cd:1b:b9:8b:4a:71:07:d2:26:
5a:fb:45:2d:71:4d:fb:cc:98:76:94:f8:38:27:d0:
ff:b4:1c:61:c0:b9:4e:23:42:8f:ef:df:4f:f0:e7:
8a:dd:e7:15:4e:ec:af:68:ad:b1:97:e6:cc:f4:5f:
b5:50:81:1b:b7:93:1e:72:e9:34:37:20:58:8c:cb:
55:3e:10:66:1c:6f:d3:04:47:41:e9:b3:eb:45:85:
c2:a1:12:eb:29:9c:dd:15:3f:9c:b2:9c:b8:81:5f:
6f:c7:bc:4d:92:9f:91:57:54:37:de:a1:2d:dc:0c:
ab:c5:0c:5d:00:5b:ad:5f:85:ae:42:e7:ed:ac:68:
16:6f:93:55:06:66:19:91:61:b4:a3:11:45:59:db:
56:d7:51:1c:86:da:f6:42:00:3c:64:19:af:ff:1c:
56:ad:66:32:af:1f:ef:49:b6:dc:56:d8:a0:c2:e8:
93:71:d4:35:20:ee:c0:55:02:de:10:63:0d:67:fe:
ff:21:66:d4:21:20:22:39:6f:07:6d:6e:30:0f:36:
8b:e4:47:79:90:3b:9d:03:e6:05:26:81:97:6d:4d:
0a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EA:79:15:2E:7D:98:3A:0A:BF:9D:1B:22:1C:63:49:F0:71:87:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nep5FS59mDoKv50bIhxjSfBxh9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:c9:3d:e4:d7:35:03:93:56:bc:43:54:8a:80:10:2e:23:b1:
67:d9:a1:2a:fb:be:60:d4:61:f0:ad:e7:b9:ce:dd:e4:4a:e7:
40:88:cb:e3:5a:23:75:9e:0f:dd:e0:c8:59:21:0f:35:99:08:
0a:af:7c:88:6e:19:36:96:93:e3:e3:06:5b:38:e4:fa:8b:8f:
12:1a:83:ce:f4:ea:66:a0:a1:e6:22:ba:7a:84:d5:63:bf:49:
03:de:26:27:ba:fb:0c:ca:73:13:3f:03:cc:1a:2e:7a:40:b0:
d4:05:0a:9e:2d:3a:be:8b:2a:e4:a6:29:c1:91:e0:0e:b0:93:
74:b2:c9:d4:14:14:ad:6f:21:5a:ae:ff:a6:21:28:d7:1e:4a:
7a:96:5d:c5:9d:be:0c:e0:f0:2c:8f:2d:b0:c4:dd:26:ac:ea:
c4:f9:a0:89:81:74:6c:c7:3e:9f:7d:d4:a6:d0:59:d0:e9:d3:
34:22:23:f6:42:25:56:cf:cc:1f:8c:48:d9:27:86:7e:0e:4a:
e0:25:8f:4d:04:73:63:5a:a2:70:f3:b2:c6:44:73:f9:5c:1d:
dd:01:38:b3:cf:f4:22:23:f8:3f:e3:bb:fb:be:46:fc:b8:e0:
6f:21:b3:b4:fd:6e:ac:34:56:cc:c0:d5:bd:2e:83:3f:e6:0c:
2c:cb:56:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:50:07 2025 by rpki-client