Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n2LMZ7OLLTPZsIfjBVMHCyIAgXo.roa
File: n2LMZ7OLLTPZsIfjBVMHCyIAgXo.roa (raw, json)
Hash identifier: esr4GcI1xOasFCJxtLmwGEt4G6tiy6vwOZ9zSntD8Zc=
Subject key identifier: 9F:62:CC:67:B3:8B:2D:33:D9:B0:87:E3:05:53:07:0B:22:00:81:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866F928404B7D2F84C6800117FAD19300A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n2LMZ7OLLTPZsIfjBVMHCyIAgXo.roa
Signing time: Mon 20 Feb 2023 16:05:18 +0000
ROA not before: Mon 20 Feb 2023 16:05:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6f91:ba65/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:92:84:04:b7:d2:f8:4c:68:00:11:7f:ad:19:30:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 16:05:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f62cc67b38b2d33d9b087e30553070b2200817a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:18:e1:ec:b1:a1:49:2a:16:72:0f:a9:51:
03:b8:e1:68:77:1e:d5:b0:f4:bf:f1:31:87:ad:d5:
5e:b2:85:ef:88:32:c3:92:26:e6:27:4f:97:78:ca:
c3:5c:c5:4c:6c:bd:af:fc:1c:e2:c1:36:d5:77:23:
7e:43:2f:8f:08:bd:9a:10:ae:18:b2:9a:0c:e5:e2:
4d:5f:e9:71:a3:c0:b1:5f:06:a3:d7:a9:bc:8a:ac:
fc:28:dd:6d:a8:a9:42:0f:d4:c0:6b:6d:d6:ee:7b:
ce:fe:dc:71:26:6e:b9:3f:f6:5f:d1:cc:0f:c2:80:
5c:74:84:dc:7a:cd:99:16:49:0b:34:de:28:79:56:
7d:f1:e8:e2:b5:ae:00:3d:62:4e:31:93:3c:47:df:
c8:ba:2e:d4:9a:a0:96:26:bc:1d:d7:4c:5b:17:d2:
23:7c:5c:bc:5c:10:ad:27:65:c9:f5:5b:0e:34:e9:
ff:b3:08:14:07:80:fa:15:50:56:e3:2e:fc:4d:d8:
9c:3d:6f:61:03:c5:c2:50:40:dc:55:e9:37:78:4d:
82:69:1f:7a:d0:8e:1f:4f:0c:75:cf:0a:e0:89:86:
07:6d:b3:a8:13:7b:12:6c:ba:ad:24:8b:be:fc:70:
65:5e:26:77:65:67:58:e5:df:56:74:b6:f1:0e:cb:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:62:CC:67:B3:8B:2D:33:D9:B0:87:E3:05:53:07:0B:22:00:81:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n2LMZ7OLLTPZsIfjBVMHCyIAgXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:b6:43:7f:6b:b5:a8:c6:ef:fe:48:11:32:2d:54:83:3a:d3:
08:10:cf:82:50:db:2a:3b:5e:08:9f:ae:80:b4:7c:4f:91:20:
99:8b:b0:e0:84:e4:13:f2:2e:ad:dc:4b:c8:79:43:04:a4:c4:
09:e5:3c:69:89:14:e2:79:83:07:e9:6f:9a:e9:35:10:71:c0:
aa:9a:14:3a:f6:2e:f9:6c:fc:55:ac:77:b5:fc:1e:ca:6f:ac:
f2:f1:a7:17:ce:28:af:b5:ec:34:42:74:8a:bf:66:50:68:bb:
a4:bb:b5:72:09:07:48:2d:56:c2:47:08:be:89:38:11:a0:23:
33:5d:e5:74:a7:be:4a:a3:13:ba:06:b0:0e:19:c7:aa:c2:37:
4b:af:f7:a0:59:a4:c1:00:4b:94:57:2e:89:6d:a9:2a:6b:28:
9c:e0:0e:93:8a:8b:6d:84:e1:9a:bb:53:57:b5:b8:b3:4f:00:
b1:0f:7c:7f:46:7e:a6:f6:43:e2:c6:8d:2f:11:7e:05:16:c8:
15:99:6a:30:97:13:48:86:85:47:6a:a2:c1:41:e1:59:59:a2:
8a:1b:a3:d4:18:be:e8:e3:62:2e:35:21:38:e8:ba:3c:7a:e3:
6d:54:1d:c6:43:f4:fe:49:0a:15:66:5e:24:ec:af:5e:d9:36:
6c:df:e3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:29:26 2025 by rpki-client