Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nGz02AmmIoJJxChgY8tA-HWaqSI.roa
File: nGz02AmmIoJJxChgY8tA-HWaqSI.roa (raw, json)
Hash identifier: sM7fiSgsvY3xeJk5TL4q6XQdAFvRtEXr32dUez/enus=
Subject key identifier: 9C:6C:F4:D8:09:A6:22:82:49:C4:28:60:63:CB:40:F8:75:9A:A9:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E0E4EDFA7A81E3D7851C64BABAED9220
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nGz02AmmIoJJxChgY8tA-HWaqSI.roa
Signing time: Mon 23 Jan 2023 23:09:37 +0000
ROA not before: Mon 23 Jan 2023 23:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e0:e4:ed:fa:7a:81:e3:d7:85:1c:64:ba:ba:ed:92:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 23 23:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c6cf4d809a6228249c4286063cb40f8759aa922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3b:4d:94:4f:ae:89:c8:96:7b:c3:38:b3:0a:
89:78:ed:a1:09:c2:16:8d:6c:18:de:9e:28:44:8b:
5b:aa:6d:c6:d3:25:20:c8:b9:ec:99:ee:e6:de:2b:
14:96:07:3d:db:5c:8b:b5:df:81:d4:60:61:35:7d:
20:e5:bc:8d:44:42:99:11:23:0a:db:07:76:d4:c8:
1b:5a:69:d8:90:4d:ea:ba:2c:da:2b:64:99:6c:eb:
75:0d:62:22:92:fa:fb:db:73:a1:9b:ad:6f:e8:bf:
db:06:88:35:4d:a3:bc:d9:c1:2c:e7:5e:d8:0e:97:
3c:a0:c0:20:ac:e1:46:f9:91:a7:d5:b0:ef:3f:6f:
39:9d:22:b7:44:14:a7:6a:3b:0b:ac:27:96:fa:8c:
52:be:65:d9:b6:d6:b2:bd:c6:c4:4b:3b:cb:d5:09:
9c:3f:34:ad:07:92:f5:a5:0d:08:d8:9d:67:f1:c3:
4c:b2:1a:17:cf:a7:9d:de:6b:b6:91:29:77:a8:d8:
b7:49:91:f9:46:e0:6b:48:2c:82:cf:1d:2e:48:91:
65:0c:d9:85:27:ee:a5:61:93:aa:35:a6:95:c9:c5:
90:1b:6b:2d:7e:53:59:a1:95:0b:6f:7c:75:83:c5:
23:ae:be:e2:4a:d7:78:61:90:7e:7a:2e:c0:cd:9d:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6C:F4:D8:09:A6:22:82:49:C4:28:60:63:CB:40:F8:75:9A:A9:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nGz02AmmIoJJxChgY8tA-HWaqSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:98:b3:b6:a2:44:df:ca:dc:48:01:d6:5a:12:63:72:e5:c7:
b5:97:73:31:ba:6b:f4:04:fa:a5:16:bb:b0:76:82:06:bf:27:
2b:4d:73:c1:58:8c:a1:8a:63:ef:ef:44:cc:a2:f7:e9:f9:b1:
e1:87:55:50:18:41:c5:9c:24:85:46:10:ec:c5:31:87:79:fa:
d1:9f:92:0c:ea:2d:9a:49:96:b0:fc:e8:ef:24:1a:9e:7f:51:
52:ef:a7:2d:d8:11:55:ac:f1:72:dd:20:c0:c6:2a:d6:1f:3f:
9d:b6:d7:66:67:24:7e:e4:3f:a7:e6:15:3a:7a:3a:b6:40:37:
7c:f8:16:ff:b9:59:13:aa:9c:35:49:46:bf:85:13:d6:ca:fb:
cb:e6:1e:81:7f:06:fb:a5:70:1e:3b:a2:3e:d4:be:a8:1b:eb:
92:39:93:60:d8:59:1e:e2:5e:f6:af:38:88:ac:e3:cb:94:03:
cb:16:72:63:a3:3b:71:bf:a2:39:49:f5:d2:01:7c:b0:61:02:
da:de:69:25:3f:70:de:28:f7:b9:06:09:ad:fa:a7:0d:cd:a0:
a9:ff:f7:da:e6:d4:d0:94:15:a0:e9:41:5e:08:b6:10:4d:3c:
f2:47:11:a1:81:23:a7:8c:a0:e9:81:fc:44:1b:25:cf:4e:d7:
1f:7b:da:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:52:16 2025 by rpki-client