Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nKDf6dKDPxfHaYB37EzBUh1-nUA.roa
File: nKDf6dKDPxfHaYB37EzBUh1-nUA.roa (raw, json)
Hash identifier: IGSzjDQsr0mkHwhs907SkTDpBAjuLSeno2RBHLw+Atk=
Subject key identifier: 9C:A0:DF:E9:D2:83:3F:17:C7:69:80:77:EC:4C:C1:52:1D:7E:9D:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DF27061702DD5EB2DA2FC382DD1F770F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nKDf6dKDPxfHaYB37EzBUh1-nUA.roa
Signing time: Wed 21 Jun 2023 18:10:56 +0000
ROA not before: Wed 21 Jun 2023 18:10:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:27:06:17:02:dd:5e:b2:da:2f:c3:82:dd:1f:77:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 18:10:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ca0dfe9d2833f17c7698077ec4cc1521d7e9d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5f:cf:1d:32:98:d0:15:3e:9a:a6:49:c0:a7:
37:40:c6:de:7f:66:95:62:c7:6d:55:fc:c4:66:3c:
10:c6:05:80:77:05:81:21:4f:53:f6:a8:e0:87:a9:
38:e2:7f:12:0b:0b:ca:68:9c:87:ce:70:05:c6:57:
4c:50:4b:b9:67:84:10:09:f0:f0:89:19:d9:05:42:
df:49:6b:0d:4e:04:54:c9:13:ac:a3:9d:55:77:9b:
ce:43:92:bb:cb:6d:b8:4a:52:0d:77:40:88:9f:39:
fd:1a:56:73:5a:c1:0a:39:f6:62:6a:27:6b:e2:6e:
74:be:33:2c:99:6b:e7:f6:52:af:d7:74:d4:65:91:
02:ea:d8:1c:92:a1:f2:70:e3:45:fd:0a:5d:15:0e:
93:9a:9e:27:d7:4d:9e:54:27:1f:32:e8:3d:f8:88:
3a:a4:44:43:69:a2:89:cc:04:89:f5:45:73:0c:44:
b5:37:87:8e:d3:82:60:ef:06:c5:32:65:c2:a1:af:
4a:6d:35:de:ce:b0:56:dc:f3:6b:60:16:1d:04:0f:
96:32:ac:af:67:34:4d:b7:de:63:d1:76:c5:bb:04:
83:06:69:ef:ff:f1:b8:b6:c3:df:a9:dc:50:a0:0f:
1b:3c:47:71:52:48:c2:d1:26:5c:70:d7:1a:0e:38:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A0:DF:E9:D2:83:3F:17:C7:69:80:77:EC:4C:C1:52:1D:7E:9D:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nKDf6dKDPxfHaYB37EzBUh1-nUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:ef:ea:f0:67:a1:9e:b9:4f:59:ae:6c:dc:ed:c6:7e:4e:fc:
52:8c:81:ad:1e:9d:c7:14:bf:bb:2f:7b:05:9c:54:11:c4:12:
96:67:5a:2a:aa:ba:63:e7:87:2c:40:54:fb:19:a6:94:ab:5d:
ef:82:ce:b7:15:a6:71:c8:30:91:f5:d4:71:1f:5b:3b:b2:5f:
3a:7d:7e:bc:28:42:82:3a:55:39:8c:7d:15:bc:00:45:fe:01:
ae:01:4c:a1:e3:14:34:72:6b:d8:28:13:12:82:d2:67:79:45:
77:51:7d:1b:a8:e3:de:ae:9d:92:94:69:6f:4e:14:15:49:ad:
60:fd:5d:b2:d1:1e:f3:cb:54:6e:36:12:96:bf:f0:52:7c:7c:
36:fe:aa:70:5a:b5:79:c8:74:77:2f:3e:05:02:8c:3a:55:97:
a0:04:46:7a:44:50:0b:d8:17:a1:53:0a:17:eb:e7:e8:b5:9d:
53:b8:54:fe:0c:54:fa:80:a5:a5:37:b7:ed:4b:d9:c1:a9:17:
40:ee:cc:57:4c:f9:8c:f7:6e:ad:dd:2e:16:df:55:ac:e7:c4:
dc:f3:39:64:7a:b8:a2:2f:be:0d:a6:b3:19:19:78:d1:7d:ed:
f5:b5:a3:a2:37:c7:a0:0e:3c:ef:c5:ee:43:43:02:77:0d:e0:
86:01:d2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:11:29 2025 by rpki-client