Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n6nO4dD_9LzAdEWXDdv9sV2th4A.roa
File: n6nO4dD_9LzAdEWXDdv9sV2th4A.roa (raw, json)
Hash identifier: fvrwjVHzYnGx8Z6bhoWkc7iX9Hl9BYq4OBScgHTl7cI=
Subject key identifier: 9F:A9:CE:E1:D0:FF:F4:BC:C0:74:45:97:0D:DB:FD:B1:5D:AD:87:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187BA411A8D264F8D2D0E11AC645496CDBF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n6nO4dD_9LzAdEWXDdv9sV2th4A.roa
Signing time: Tue 25 Apr 2023 21:10:41 +0000
ROA not before: Tue 25 Apr 2023 21:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ba:41:1a:8d:26:4f:8d:2d:0e:11:ac:64:54:96:cd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 25 21:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fa9cee1d0fff4bcc07445970ddbfdb15dad8780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:bd:8d:e2:f1:e6:7b:09:27:70:00:63:73:
5c:d5:64:73:2a:7b:8a:d8:f2:9d:93:ff:ae:90:fd:
89:b7:a9:76:c4:67:e9:46:d3:f2:ac:6c:98:e4:25:
46:86:af:b7:d6:71:1d:97:28:39:64:9e:17:89:f7:
a8:61:52:80:5c:66:d8:fd:f9:9c:3b:fa:63:3d:5a:
66:6e:e8:51:8a:c1:f1:31:77:f5:72:33:87:13:d2:
07:a8:88:e3:08:01:bc:dd:8e:08:ea:83:d5:5c:da:
d2:bc:f5:af:fe:df:f7:06:60:20:d1:94:6b:cf:43:
aa:28:eb:f6:7b:25:b0:4f:2c:03:b7:e0:39:90:5c:
3c:30:f7:3c:30:70:85:ea:a1:53:70:b4:6c:af:a8:
11:25:1c:0d:ac:38:5f:8b:6a:89:9c:37:35:39:2a:
61:a6:3e:f4:b5:af:66:94:e5:3a:3d:97:c8:ad:6d:
cc:51:04:6e:bf:92:ed:db:b0:8e:ef:85:7c:da:0e:
70:0e:6b:20:8f:da:76:ac:20:13:21:8c:33:3d:74:
52:22:e3:dd:cf:a6:05:7d:98:61:dd:a9:eb:2c:0c:
0c:fe:69:9b:c9:0e:6c:e3:5a:ed:37:6b:46:3d:7e:
28:82:3f:81:5c:a1:d9:9d:b8:38:4a:01:51:26:6a:
ec:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A9:CE:E1:D0:FF:F4:BC:C0:74:45:97:0D:DB:FD:B1:5D:AD:87:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/n6nO4dD_9LzAdEWXDdv9sV2th4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:be:c0:cf:a0:1c:d4:0d:4e:b6:71:25:3a:5a:9b:78:2b:7b:
e9:21:9c:a3:73:a5:3a:70:9e:e8:70:39:80:b6:df:44:a4:a9:
e0:80:e5:e9:81:a7:2a:3a:be:16:8a:5b:b6:77:6d:c2:f2:3f:
b1:5a:20:8f:10:71:14:88:e4:20:c4:e0:8f:6c:ab:c0:3d:25:
e2:aa:cd:38:2b:f4:71:9e:d9:c8:c5:70:11:a3:25:c8:cd:e0:
06:77:39:97:da:42:b0:7d:01:36:06:11:c4:63:c9:47:06:88:
12:5d:f1:3e:f0:4c:ed:6c:fe:c0:3e:75:47:84:a3:3b:f5:d4:
f1:80:63:9b:1b:fe:9f:90:ff:8d:fc:0f:af:f6:37:68:06:7d:
29:91:17:fc:36:e8:87:31:87:41:02:22:21:70:e4:07:c5:68:
c2:11:0f:55:c5:ad:50:92:42:e9:a3:0f:51:d4:aa:fa:97:89:
7b:60:72:06:f7:db:00:3b:ba:d1:5a:4c:37:40:d0:0c:5a:f7:
d1:75:e2:8f:3f:22:94:ec:c5:6b:50:39:cb:ff:4c:70:66:fc:
ce:a9:eb:a5:a9:c7:2f:f2:ee:cb:ca:f3:b4:73:1a:90:33:fb:
08:57:15:81:77:79:fd:e8:6e:b5:5b:c6:fb:c0:f7:a7:2c:19:
50:cd:2b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:59:42 2025 by rpki-client