Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nBvjjI74vaBsP5oqvmn7c6gtAoI.roa
File: nBvjjI74vaBsP5oqvmn7c6gtAoI.roa (raw, json)
Hash identifier: /gpYS9OnyOdasabbFVTryR/GhVYRdcZgjDBmqaisS84=
Subject key identifier: 9C:1B:E3:8C:8E:F8:BD:A0:6C:3F:9A:2A:BE:69:FB:73:A8:2D:02:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0D09DE517527D5FBA3B8508CC460A9F7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nBvjjI74vaBsP5oqvmn7c6gtAoI.roa
Signing time: Sat 19 Aug 2023 09:04:25 +0000
ROA not before: Sat 19 Aug 2023 09:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:18a:d09:d336/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0d:09:de:51:75:27:d5:fb:a3:b8:50:8c:c4:60:a9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 09:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c1be38c8ef8bda06c3f9a2abe69fb73a82d0282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:a5:8d:90:cd:70:f8:54:3f:b0:29:07:8d:
ec:09:33:2d:7b:52:16:77:e4:34:a0:80:2c:80:28:
41:0c:e6:8b:8c:98:14:04:ce:76:90:d9:be:0c:7e:
61:65:05:5d:73:cb:c2:98:a2:49:d9:21:f1:ba:bd:
b9:95:55:55:43:d3:da:b3:4a:24:4e:a4:2b:98:76:
38:8d:1f:a3:67:12:42:8f:84:cd:bc:8b:5c:7f:84:
b7:14:86:a4:42:4f:22:ac:99:9c:41:3f:7b:62:29:
c7:8e:24:63:16:f0:c0:7b:8d:9c:0d:66:ef:c6:1c:
f9:3c:89:ec:86:ef:62:59:22:40:bd:7a:ea:3c:27:
2b:92:34:8e:4f:11:f3:03:af:4a:5b:9a:2b:62:16:
71:50:2b:3d:86:08:ce:d8:0a:a2:2f:29:da:f5:73:
1d:d8:ba:ac:35:9f:37:01:2d:8b:fc:22:68:cb:92:
c4:e7:e4:cd:08:c7:c7:8c:69:19:71:9b:c0:45:d1:
fa:ab:d8:17:10:8f:97:17:1f:6e:2f:83:02:bd:38:
dd:2f:8e:ef:8a:ba:79:e4:dc:aa:5c:5d:4c:aa:03:
18:32:74:1e:3c:7e:19:cc:ae:02:84:72:40:1d:5e:
d3:ca:35:14:c9:83:c2:02:e7:86:90:2d:0e:96:fd:
f1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1B:E3:8C:8E:F8:BD:A0:6C:3F:9A:2A:BE:69:FB:73:A8:2D:02:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nBvjjI74vaBsP5oqvmn7c6gtAoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:09:ae:35:6c:f7:20:62:6c:72:c7:11:80:b5:3b:61:3b:0a:
b6:4b:55:db:ef:ae:7b:3d:ae:52:1f:d5:e8:28:de:e9:d9:60:
5e:c2:80:34:f9:2b:03:21:51:0b:33:46:5a:9a:8d:a5:2c:69:
73:db:12:d6:55:38:24:05:40:b1:ac:6e:df:20:e3:9e:e1:b6:
1a:e8:63:5d:45:dc:10:da:0a:00:cf:2a:a0:23:df:33:25:32:
2b:ed:77:f3:0c:99:6d:d1:0c:92:46:93:4c:d9:1b:80:7a:f1:
2c:4e:02:2a:6e:55:c9:74:8e:ad:e9:a9:55:60:cf:7d:a9:6d:
6c:63:95:7b:1c:21:dc:9c:88:97:ca:89:ff:e3:86:18:b5:42:
cb:4e:60:87:c0:c3:7b:0c:de:9b:6c:bf:7d:3c:7a:46:ca:24:
71:00:c3:b7:7f:7d:64:38:1b:4d:3e:9f:b1:f0:73:7f:2a:1d:
ae:4f:0a:1a:92:d2:06:af:0b:a6:a4:75:91:bf:32:46:5b:2c:
4d:69:0c:26:fe:18:4b:c8:79:90:a7:a9:2c:80:f2:fa:f2:f1:
30:fa:36:fa:b5:6b:2d:d6:2c:b9:9e:60:2f:22:c4:a4:c5:06:
ba:9e:60:cb:ab:1a:e8:c5:a9:6e:f2:1a:65:41:85:dc:b7:ad:
82:28:d8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:46 2025 by rpki-client