Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n1l0VE5umQ3NIEfSH8zwu4A1FBc.roa
File: n1l0VE5umQ3NIEfSH8zwu4A1FBc.roa (raw, json)
Hash identifier: c2qrEWWaYEmZl3/n3oO74aHq2H1WMng962+IHfihH1E=
Subject key identifier: 9F:59:74:54:4E:6E:99:0D:CD:20:47:D2:1F:CC:F0:BB:80:35:14:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183CB0D698C95E6C1FBC2B3836A28A94132
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n1l0VE5umQ3NIEfSH8zwu4A1FBc.roa
Signing time: Wed 12 Oct 2022 07:16:37 +0000
ROA not before: Wed 12 Oct 2022 07:16:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cb:0d:69:8c:95:e6:c1:fb:c2:b3:83:6a:28:a9:41:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 12 07:16:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f5974544e6e990dcd2047d21fccf0bb80351417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bc:54:3e:2a:cb:a2:53:16:74:c8:45:78:2e:
b7:55:68:0d:94:b7:c3:5f:85:74:ef:53:5c:d6:d4:
40:d6:f9:d6:67:16:06:86:4e:1a:05:68:2b:69:db:
be:4f:00:25:65:18:58:a0:47:f7:8f:8f:c1:2e:96:
94:36:2b:37:92:9c:43:70:5f:f1:d0:b7:d8:5e:dd:
33:70:06:c9:34:10:84:8c:d5:b0:c6:52:d8:b8:4a:
83:b1:c2:2c:e8:4b:09:cd:78:b9:4d:5f:5a:01:cc:
c6:e9:b4:3d:c3:03:15:9d:99:5f:ae:88:17:5b:43:
7f:da:8a:a0:da:36:c0:b3:2e:a9:ed:39:82:4a:89:
d6:ae:34:7b:d2:e8:bf:72:68:4d:ce:c6:a9:ae:c1:
47:1a:cc:56:c1:1b:d3:52:f4:52:b6:29:c0:18:c9:
66:f3:c3:3d:cf:14:b0:c0:ea:c9:71:cf:a8:6d:71:
95:15:84:cc:29:29:92:80:2f:53:95:cb:41:dc:e1:
16:79:5b:de:29:9c:7f:c9:52:d2:cd:f3:54:86:23:
77:75:a7:f2:94:63:e8:d8:24:92:2d:77:c7:db:5e:
20:fc:0c:de:da:d9:1d:c4:4a:36:e5:07:08:64:ac:
45:4f:ed:29:d9:25:c6:80:d7:32:eb:74:43:19:59:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:59:74:54:4E:6E:99:0D:CD:20:47:D2:1F:CC:F0:BB:80:35:14:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n1l0VE5umQ3NIEfSH8zwu4A1FBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:40:a2:ea:90:aa:0c:61:c3:0d:3b:13:e6:b9:31:b9:cf:f2:
41:b3:94:79:20:4a:ee:d1:c6:74:d8:32:e6:cd:d1:67:c4:40:
c5:bc:cb:00:a0:21:01:da:7d:af:41:12:4d:88:da:bb:4e:5b:
8d:d0:ff:23:f0:80:8f:88:0e:a1:d8:a8:87:97:18:92:75:29:
13:9a:a2:9c:2b:da:dd:8a:12:32:80:b5:51:ca:ff:c2:0b:0e:
d3:16:23:3a:a6:70:2c:73:91:69:8a:e4:ce:79:39:89:4e:ca:
4f:97:5d:35:6f:a9:75:66:07:65:01:c8:34:27:10:0f:14:3e:
9f:07:1f:e6:87:54:f9:87:f2:4b:64:f6:5e:f6:f0:c9:b2:4b:
20:d4:c4:0b:05:66:dd:49:c5:7a:07:52:8b:8a:7e:cf:38:e2:
86:83:68:68:87:7b:3c:c0:25:4e:cd:e2:5d:a1:62:84:8e:bb:
c6:e9:03:21:2b:66:df:79:9d:79:c6:05:71:cb:2c:c3:35:5c:
c2:57:ba:c9:5e:e4:04:fe:ba:08:76:45:0e:08:bc:bb:4a:19:
e0:fa:ab:59:60:89:1f:5f:db:ad:86:65:e2:50:8b:90:0a:ff:
ee:22:76:ae:be:99:2c:b2:5e:e3:90:ec:c9:b6:70:f8:6b:63:
c6:11:ef:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:11:57 2025 by rpki-client