Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_nebWfaLFZnZFuDUIqUgC604GkE.roa
File: _nebWfaLFZnZFuDUIqUgC604GkE.roa (raw, json)
Hash identifier: TrWvJd9P4LFdMnMyP/LOmWQ5SZ4Aikonvu8F6blW8MU=
Subject key identifier: FE:77:9B:59:F6:8B:15:99:D9:16:E0:D4:22:A5:20:0B:AD:38:1A:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187300C5C95B196736369ACB0C9FF2CCBE6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_nebWfaLFZnZFuDUIqUgC604GkE.roa
Signing time: Thu 30 Mar 2023 01:05:29 +0000
ROA not before: Thu 30 Mar 2023 01:05:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:300b:7c7f/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:30:0c:5c:95:b1:96:73:63:69:ac:b0:c9:ff:2c:cb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 01:05:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe779b59f68b1599d916e0d422a5200bad381a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:11:82:0c:4b:66:f5:27:62:62:5c:8b:0f:
eb:ab:69:f3:ba:f9:67:6e:bd:d6:3a:83:e8:47:92:
81:e2:d7:e6:bd:0f:cb:e9:2c:8b:89:99:89:9d:87:
5e:18:a4:e5:71:67:4c:fe:d4:2a:32:58:85:00:e2:
6f:a9:42:ef:1b:e1:b1:f9:dc:23:69:6c:be:d1:01:
8f:47:db:2a:09:78:af:8c:50:65:cc:be:3b:6a:b7:
19:8e:d9:89:ea:13:98:40:80:ff:06:5e:c6:7a:3d:
c7:42:67:94:6a:3d:d8:80:82:bb:52:cd:c9:b1:28:
1f:cc:21:bb:2f:76:3d:f8:9a:f2:c7:61:2e:0e:da:
1d:88:ee:88:74:05:3a:a2:a4:82:2e:22:f5:87:3a:
b6:75:aa:89:bf:eb:82:c6:28:9d:f3:c6:85:cf:5f:
92:90:af:a2:00:ef:3f:18:90:7f:e9:67:b3:f2:16:
39:60:db:ab:3c:52:02:f5:00:40:e5:10:0b:b1:5d:
44:15:16:9d:1a:52:d4:cb:74:fc:e8:11:44:82:61:
14:e5:15:d1:17:8b:44:ae:77:98:29:a9:63:33:d2:
d4:b4:be:55:0d:25:5d:9e:91:ad:00:22:7b:2d:09:
f3:c2:98:7d:8d:b4:9f:30:8e:92:c5:09:d3:50:22:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:77:9B:59:F6:8B:15:99:D9:16:E0:D4:22:A5:20:0B:AD:38:1A:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_nebWfaLFZnZFuDUIqUgC604GkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:51:cf:de:ef:d2:ac:64:1d:93:d8:b7:d8:fa:26:74:a1:d8:
4d:15:61:39:8e:8d:65:12:1a:bb:6a:a8:1d:26:2f:78:7c:06:
e9:b1:74:e1:74:71:b8:1a:83:ac:3e:38:4b:4d:22:55:66:66:
17:6e:02:a8:a3:53:e3:0c:ea:90:cd:ae:a4:0b:ba:72:8a:65:
3d:d9:61:b9:a5:f0:4f:59:17:bf:a0:59:f3:43:54:be:d2:4e:
bb:9f:33:79:f1:ac:3a:d6:66:b8:33:63:cf:e3:51:b6:b6:83:
c1:ae:d0:88:65:ff:03:29:a6:54:60:9e:51:bb:d3:16:cc:29:
61:16:f6:33:5b:79:d3:c9:4d:4f:2c:86:e1:4b:3d:9a:b1:0f:
f9:68:6b:b6:dd:f5:66:26:d2:62:0e:15:cb:0c:87:34:94:cd:
68:4e:47:cb:09:e8:ab:fb:e7:eb:dc:fa:4e:bb:d4:98:04:1d:
2d:c1:b6:06:11:fb:e5:c6:bc:d4:32:2b:56:3d:21:fa:39:8d:
8c:87:43:4b:e8:ca:c5:d5:64:ed:39:d7:7e:80:3c:90:b2:c4:
23:d5:49:48:3b:f7:82:85:d7:7b:0f:d4:e6:43:8c:7d:83:b8:
1d:65:a9:83:d4:bc:e4:dd:38:f3:d1:37:d6:25:d4:66:56:21:
fe:60:21:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:18:29 2025 by rpki-client