Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n5p_A__yaZeOYsR0CuArOmI3upI.roa
File: n5p_A__yaZeOYsR0CuArOmI3upI.roa (raw, json)
Hash identifier: z5ith7rjpMOv8ueg6AtSg8eGBRCydUhU9RC0+r3M6aQ=
Subject key identifier: 9F:9A:7F:03:FF:F2:69:97:8E:62:C4:74:0A:E0:2B:3A:62:37:BA:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856AA516C2473A685840DE692C1016FDFE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n5p_A__yaZeOYsR0CuArOmI3upI.roa
Signing time: Sun 01 Jan 2023 00:04:42 +0000
ROA not before: Sun 01 Jan 2023 00:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:6aa4:ea52/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:a5:16:c2:47:3a:68:58:40:de:69:2c:10:16:fd:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 00:04:42 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f9a7f03fff269978e62c4740ae02b3a6237ba92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:eb:3a:e6:f1:c4:8f:90:c4:03:4b:f4:ba:df:
f6:6d:7a:38:39:a1:69:d7:3f:74:a3:c5:3b:89:a4:
63:4f:d5:94:ba:0b:e8:1b:a0:18:07:2a:16:e8:3f:
b8:30:72:33:d6:9e:2b:41:d1:d8:e1:5a:6c:41:29:
9d:31:ff:bf:64:a5:36:33:ea:28:5a:11:b1:50:cb:
66:98:83:79:2d:78:c8:4d:41:98:90:10:f0:e2:61:
ae:76:45:57:6e:0e:01:49:74:3b:a2:21:d2:58:43:
c0:7a:ad:89:f8:66:4e:bf:36:c8:50:4d:08:8f:70:
61:ce:9f:af:df:92:c3:12:11:4b:8c:4a:47:28:22:
10:11:e6:54:42:61:ab:ef:c4:fb:c8:a5:f7:10:f3:
9a:80:2d:55:7d:dc:ff:c8:21:85:99:3a:21:01:6f:
2c:bc:1b:2c:44:10:a0:9a:31:2c:05:5c:d5:46:f6:
70:b5:8d:10:a9:d5:ef:cf:4f:4d:d1:5a:64:d5:47:
a2:13:22:91:54:71:37:57:d7:e6:f0:de:16:b2:da:
41:ff:ea:b8:a6:1c:de:29:ae:dc:0f:71:ad:10:f0:
d1:4c:a5:a7:cc:16:c8:1a:ea:6d:c0:c2:1d:ed:2f:
08:f4:d0:81:78:c9:88:80:91:48:38:a7:34:84:86:
c6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9A:7F:03:FF:F2:69:97:8E:62:C4:74:0A:E0:2B:3A:62:37:BA:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n5p_A__yaZeOYsR0CuArOmI3upI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:d4:2b:70:fa:07:ae:4f:2f:44:9b:7a:60:f0:fc:68:21:78:
73:d3:16:3a:7e:21:b0:fa:8d:a2:c8:17:bc:83:4b:a7:35:5c:
e4:06:17:b4:34:7d:6d:7c:0e:08:27:57:91:38:2f:8b:8c:cd:
37:55:69:d0:e3:45:eb:66:78:b0:fd:d8:fa:8e:8f:86:3e:3f:
76:01:3d:a6:a5:9e:90:18:4a:02:6f:c0:51:db:46:ff:24:63:
8a:b2:c6:79:b3:b3:cf:2b:eb:12:a2:d6:f2:b1:58:c3:fb:86:
56:cc:d1:dd:68:3f:54:ae:b4:8f:f6:4f:49:16:76:55:45:cf:
77:29:04:b6:87:ac:8d:45:10:86:bf:b6:0d:da:a9:a9:2f:1f:
a3:32:04:a8:28:5d:46:ae:7d:0c:a1:ec:57:f0:30:5f:61:e5:
6d:0b:46:14:ea:29:43:b8:0c:91:2a:f6:23:0f:a0:0d:3b:b8:
72:23:70:15:3d:e5:f5:28:77:4b:06:01:db:d1:d2:0c:a5:e7:
d8:2c:ed:bb:9f:7e:a1:48:84:9b:8c:41:a0:72:7c:15:df:a0:
5c:21:2b:a7:42:32:58:20:01:61:0f:76:17:f1:38:00:5f:c2:
74:89:8c:18:6e:59:7a:74:e6:fc:a3:bb:f6:04:10:ce:a0:5d:
9a:42:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:05:17 2025 by rpki-client