Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nJCt28tDZ7z9faAanWAtEKaURkI.roa
File: nJCt28tDZ7z9faAanWAtEKaURkI.roa (raw, json)
Hash identifier: zNTG4hzxnYEjCW+U/Mf9oKCSpUOmJo/SiMpoDysaUWU=
Subject key identifier: 9C:90:AD:DB:CB:43:67:BC:FD:7D:A0:1A:9D:60:2D:10:A6:94:46:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183FF997AA277DB2B0339E095BC0A00EEBC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nJCt28tDZ7z9faAanWAtEKaURkI.roa
Signing time: Sat 22 Oct 2022 12:09:51 +0000
ROA not before: Sat 22 Oct 2022 12:09:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ff:99:7a:a2:77:db:2b:03:39:e0:95:bc:0a:00:ee:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 22 12:09:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c90addbcb4367bcfd7da01a9d602d10a6944642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:af:b2:4c:06:35:3f:4c:d0:f6:97:1a:86:3b:
28:4f:2f:77:f9:ec:c2:f5:f6:21:a2:ab:37:34:b8:
9b:08:48:59:8c:f5:91:bf:64:86:7e:46:47:9a:4d:
0e:69:07:91:24:1e:49:ed:e4:92:3b:b9:5e:58:40:
46:1e:3b:46:b1:e7:51:04:01:7c:06:a5:35:af:91:
40:1f:ec:e9:7b:5f:dc:19:68:de:17:0a:4f:2e:ab:
6d:96:ed:81:b2:c9:42:20:87:76:cd:de:cd:6e:85:
53:8a:bd:d0:f4:f8:cc:48:a4:56:c4:f1:99:3f:82:
95:90:44:f9:28:5e:22:a0:90:48:5c:09:a0:af:fe:
3e:e0:5a:52:84:85:f1:5d:ab:3c:9d:a5:73:77:6e:
a0:47:2c:f2:37:cd:ef:7b:dd:85:ad:36:2c:5c:fa:
b5:24:60:f4:23:00:46:9b:0f:76:91:37:24:5b:1b:
93:4d:80:f2:92:30:29:4a:f2:70:00:a1:5b:77:56:
ac:13:94:21:9c:3d:b2:07:be:98:26:12:a5:be:3f:
cd:66:6f:01:14:64:f5:a9:70:06:67:28:23:37:ed:
49:60:95:a1:8c:35:6d:51:c1:ea:1e:9d:1c:c0:41:
63:54:28:6a:3b:cb:cc:84:70:fb:d0:41:bb:a3:9f:
e5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:90:AD:DB:CB:43:67:BC:FD:7D:A0:1A:9D:60:2D:10:A6:94:46:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nJCt28tDZ7z9faAanWAtEKaURkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:17:c9:f3:7c:33:ab:77:39:88:ca:b2:db:0e:5a:56:c6:92:
ed:e3:85:67:e2:ff:12:f6:a6:cb:8a:6b:27:17:27:4d:3b:08:
17:c7:45:e9:bd:e6:07:80:10:a3:f1:1a:5e:40:0c:ea:39:66:
ac:ba:a2:6b:b0:08:3b:f7:43:e2:b2:bd:e3:df:94:50:82:81:
26:18:e9:5b:7c:3e:29:2e:34:35:80:27:59:c7:ce:4f:d5:fb:
dc:62:44:1a:67:d8:a0:0d:6b:ee:6d:35:b6:9c:4b:7a:dd:4b:
a2:a2:2c:b6:19:d1:b6:64:e4:e3:76:cd:df:ba:15:92:37:00:
3b:d7:10:10:03:d6:2a:90:eb:db:1c:1b:e2:70:09:3e:67:c3:
83:70:38:ab:1e:29:c4:a6:5f:c7:f3:ad:d3:25:7d:38:02:d7:
0b:58:6b:eb:dc:64:19:91:d7:9d:73:c8:c2:76:8f:f4:5f:04:
cb:73:8c:99:7c:78:f3:18:d3:03:a3:2b:62:1b:85:a7:34:3d:
52:d9:b9:16:9f:51:0d:dd:b0:d3:50:7d:46:6a:ea:de:79:3c:
22:be:64:6b:8a:cb:ea:24:44:59:68:38:5b:7f:e5:49:1f:fd:
7a:db:6e:68:18:1a:7a:62:19:00:64:27:22:64:93:62:3b:18:
df:2a:2e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:40:56 2025 by rpki-client