Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ni5cIVqOZX9xY03n2aV8kkopnuM.roa
File: Ni5cIVqOZX9xY03n2aV8kkopnuM.roa (raw, json)
Hash identifier: 5EfwTaH9w8RMsWbzJzXx6djRpmJ9utz/DiCll1rljcs=
Subject key identifier: 36:2E:5C:21:5A:8E:65:7F:71:63:4D:E7:D9:A5:7C:92:4A:29:9E:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F68E2D387CAADE8E9F27D09B49A5072E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ni5cIVqOZX9xY03n2aV8kkopnuM.roa
Signing time: Sun 07 May 2023 14:12:05 +0000
ROA not before: Sun 07 May 2023 14:12:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f6:8e:2d:38:7c:aa:de:8e:9f:27:d0:9b:49:a5:07:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 14:12:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=362e5c215a8e657f71634de7d9a57c924a299ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:39:6e:c5:d9:f4:13:b4:d7:ea:5e:45:1d:
7d:86:8e:b8:26:97:7f:1c:61:03:f7:c0:5b:14:c5:
75:c8:2c:6a:92:46:0b:03:d7:57:50:c5:7f:6c:a0:
e9:d7:1e:5a:08:82:60:8d:71:50:31:b3:fa:17:33:
ac:e6:f2:1e:03:d5:19:ff:52:4b:5b:87:05:2d:79:
8e:ff:f2:c7:2e:2d:e6:d0:2a:9a:e9:40:72:f9:ff:
b6:c2:47:60:c1:af:64:7b:c1:4c:b7:5e:6d:29:03:
00:fb:f0:53:65:52:9e:2e:51:10:83:45:40:d2:c4:
37:03:5c:ae:48:86:cf:53:36:53:90:b1:45:08:95:
1d:77:ff:7c:fc:95:20:59:74:95:f3:94:24:c9:22:
cc:6f:08:00:23:77:36:6c:99:fe:ec:84:8d:47:dc:
6e:7b:eb:55:a8:8f:1e:ad:f4:e3:64:5b:5b:25:5b:
cf:bc:db:37:8c:b1:c1:d0:83:47:10:ed:89:00:b5:
4c:34:b8:e1:2e:bc:4a:96:87:08:c0:2f:fa:0e:9b:
dc:fc:d9:25:e9:b5:6b:5c:b4:22:6e:14:dc:64:61:
15:cb:2e:de:3d:55:cc:eb:a1:60:6e:1d:e8:82:7f:
5c:a8:4c:cc:8b:e1:28:94:e2:c6:90:c1:64:c7:a1:
93:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2E:5C:21:5A:8E:65:7F:71:63:4D:E7:D9:A5:7C:92:4A:29:9E:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ni5cIVqOZX9xY03n2aV8kkopnuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:72:03:2f:09:48:b5:9a:23:3d:a1:85:aa:02:90:da:74:ea:
ca:a4:fc:2f:95:6d:f0:3f:a6:84:f6:51:54:74:4b:72:83:30:
79:fe:52:7c:81:37:87:ae:c0:d5:34:96:ea:23:04:1f:e5:6a:
09:f8:30:da:7e:91:9c:ad:46:09:39:58:f8:1a:43:ed:46:b6:
cb:36:c5:6e:c8:84:db:4d:19:43:30:6f:f6:c3:84:d6:dd:2e:
f6:54:27:35:d8:71:4e:95:09:d2:71:52:eb:3c:88:06:63:b9:
45:67:52:a1:ec:8d:ef:f1:b8:14:72:5c:bb:a9:b3:68:c6:6d:
9a:f5:70:27:88:98:42:e9:40:d6:ad:af:dd:91:77:39:2d:75:
87:31:f7:b7:06:66:05:29:26:a5:51:5f:2c:b9:b5:73:96:92:
9b:63:9f:b2:a2:a2:71:1c:51:4c:86:d5:68:2c:98:8b:bb:bd:
a2:15:9f:e9:7f:21:b5:e2:20:25:55:bf:2f:c5:b9:a5:5d:5c:
41:43:18:01:7f:05:cb:a8:8e:e9:0b:9e:f7:e0:a9:55:36:d5:
82:ef:0c:4e:28:08:da:62:71:ff:d6:f9:82:50:d6:04:70:19:
de:3d:65:77:f9:19:79:d5:47:e9:9a:a1:73:30:24:4b:29:9d:
d6:19:06:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:58:33 2025 by rpki-client