Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nC5l0r1m509brVuQTpAgPxerpt4.roa
File: nC5l0r1m509brVuQTpAgPxerpt4.roa (raw, json)
Hash identifier: 0rtLQf55Ol47u8hmzkz2+0Sw1c+mTGnuPQiBCvfpbD4=
Subject key identifier: 9C:2E:65:D2:BD:66:E7:4F:5B:AD:5B:90:4E:90:20:3F:17:AB:A6:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856D6F32ECAB853CA129CE6BD0A0CF678D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nC5l0r1m509brVuQTpAgPxerpt4.roa
Signing time: Sun 01 Jan 2023 13:04:42 +0000
ROA not before: Sun 01 Jan 2023 13:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:6d6e:b22b/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:32:ec:ab:85:3c:a1:29:ce:6b:d0:a0:cf:67:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 1 13:04:42 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c2e65d2bd66e74f5bad5b904e90203f17aba6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:cf:5b:d5:35:a3:c5:3a:49:22:7c:37:6e:
02:31:c3:2c:be:96:5c:ee:dd:67:ed:ea:ec:19:f1:
34:1b:22:cd:d3:7d:0c:4e:6e:20:55:6c:68:df:22:
11:10:4b:0b:76:0f:9b:38:75:31:d6:02:2f:e7:f9:
0d:bb:f9:2c:0b:e6:4c:4a:59:f3:e1:d0:b0:f7:b4:
6a:cb:a0:84:3e:04:20:a7:16:16:1e:5e:40:60:da:
bf:41:63:e3:9c:dd:2f:43:e3:b6:92:2b:67:09:d1:
26:0b:bd:d0:05:46:3e:2c:3a:83:02:a2:f7:b9:ea:
6c:bf:d8:70:8d:98:6c:28:5b:f9:09:57:08:ad:2c:
42:66:60:ef:31:80:5d:8b:a7:25:e8:35:88:8e:d6:
35:8c:d5:9a:6e:e5:40:20:af:ad:da:96:cf:02:85:
29:1f:1b:55:2c:27:68:6b:cd:9c:64:94:40:35:ba:
75:9a:5e:ec:ee:36:c4:02:75:c6:25:48:0a:c9:df:
0d:1c:c7:9d:c9:1b:d2:0f:5b:38:37:08:f1:bf:c3:
80:8b:5e:70:9f:58:32:25:ce:d6:12:42:c6:fb:42:
60:ba:d8:ba:13:d8:b4:e4:8a:91:b6:e0:e2:92:61:
c6:a2:54:d4:bc:ee:05:c5:2c:a8:29:9b:cd:f2:36:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2E:65:D2:BD:66:E7:4F:5B:AD:5B:90:4E:90:20:3F:17:AB:A6:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nC5l0r1m509brVuQTpAgPxerpt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:01:39:70:2a:d3:e4:39:96:1e:28:56:8c:a2:d9:2e:a0:93:
12:ad:c4:fa:68:ac:19:1f:58:74:9c:ce:7f:07:8a:9b:63:9d:
79:b6:e6:1a:0e:15:44:43:f9:b4:08:da:ee:59:27:d1:c9:b4:
78:37:5d:48:be:05:db:02:0e:cd:9a:fa:1e:61:0b:62:2a:dc:
bc:d4:a9:d6:df:2a:c2:62:18:a8:3d:cc:ad:4c:31:95:01:d4:
aa:14:f6:17:38:94:91:6e:e5:23:24:80:90:2f:79:6a:87:83:
f4:83:b7:25:fe:52:cd:66:00:1b:93:1a:c7:55:22:51:00:78:
56:9d:9e:39:da:ae:02:c5:f0:d0:8b:be:60:41:52:53:fc:72:
1e:b0:32:f5:52:14:9b:ba:70:29:4e:a9:fd:ce:1f:f0:c2:e3:
10:fb:a8:d2:13:c0:68:77:88:49:e7:41:2b:a1:8b:5d:5b:2a:
e8:a5:32:52:4f:64:45:c3:d1:18:0c:c0:86:15:cb:84:3a:54:
87:47:c2:6a:03:64:b5:ec:33:54:b1:a1:c3:70:6a:08:f5:b0:
6d:ef:5a:08:45:75:c7:0e:84:b0:11:f7:77:cd:3a:0f:f8:2c:
b1:f4:f8:b4:4d:3a:2a:dd:39:88:d6:a4:4a:08:64:df:83:74:
a0:5b:4a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:32 2025 by rpki-client