Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nKgpZh2q8oTNsts7aZ5h_91BMD4.roa
File: nKgpZh2q8oTNsts7aZ5h_91BMD4.roa (raw, json)
Hash identifier: 4pIkRXo2vGeaUAvLz/EaTiGM3ciWDD0nUyryiPYycKA=
Subject key identifier: 9C:A8:29:66:1D:AA:F2:84:CD:B2:DB:3B:69:9E:61:FF:DD:41:30:3E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897C3B47E3361562BB659BF93222EE2133
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nKgpZh2q8oTNsts7aZ5h_91BMD4.roa
Signing time: Sat 22 Jul 2023 06:13:27 +0000
ROA not before: Sat 22 Jul 2023 06:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7c:3b:47:e3:36:15:62:bb:65:9b:f9:32:22:ee:21:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 06:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ca829661daaf284cdb2db3b699e61ffdd41303e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:53:77:42:62:09:29:f9:46:8b:99:5b:c6:1a:
fd:33:03:5d:2c:a6:0f:20:26:eb:4e:94:ea:66:8f:
d1:99:35:87:c0:a7:57:68:0a:06:cc:c2:7e:1c:9f:
7c:7b:ae:b8:b1:4f:6e:55:bc:39:c3:4d:c1:61:6f:
70:a7:5b:6b:32:2f:2a:62:a4:28:fc:00:7f:bb:8e:
3b:cc:69:0b:1c:43:4b:33:de:9b:fc:c8:ab:19:12:
ad:54:ed:48:7e:d8:72:d2:57:6d:72:46:80:45:9a:
d5:27:64:7b:4d:c4:1e:2f:c7:aa:fc:7a:34:73:86:
70:4f:5c:f2:3d:bc:e7:8a:aa:bf:dd:32:9b:19:7e:
17:d3:f3:d9:5b:9a:19:04:b8:b2:62:ee:3b:cc:d7:
cb:14:82:b1:2f:c6:bb:c1:4a:d5:52:6f:15:d5:ae:
07:41:1a:09:35:c5:45:91:7f:53:62:85:c3:37:c1:
a4:63:0e:7e:a3:2c:03:04:22:89:25:54:b8:87:1b:
1b:c0:b7:93:ee:7d:d5:e1:8f:58:7f:71:a5:b9:84:
ed:0a:82:45:4e:65:f2:bb:3f:a0:6c:b3:7b:5b:bc:
d8:3c:de:30:38:31:92:2d:50:8f:9f:42:ad:11:07:
3f:61:01:f5:22:29:ac:ae:89:e1:f9:1b:27:da:77:
bb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A8:29:66:1D:AA:F2:84:CD:B2:DB:3B:69:9E:61:FF:DD:41:30:3E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nKgpZh2q8oTNsts7aZ5h_91BMD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:26:76:0b:b4:30:99:96:51:9c:98:a5:f9:21:bc:d5:af:5a:
7b:98:2d:55:1e:c1:41:80:87:5b:39:15:9c:22:c0:c6:ab:c3:
d0:9c:e9:eb:50:c3:42:70:8b:98:d2:ac:2d:e6:ac:7b:8b:e1:
87:86:46:94:f1:c1:81:47:1d:70:aa:ee:ce:dd:0f:68:3c:2f:
c9:05:8e:46:90:9a:1d:78:bf:b0:17:62:9a:b7:15:82:d7:2f:
7c:15:00:46:cf:83:a6:64:f8:84:bf:2e:c1:10:84:e4:9c:13:
a9:3b:8d:50:f5:21:9b:08:ba:2b:38:ef:9f:47:d6:b5:6c:34:
ef:10:18:06:0f:fd:41:6b:74:27:a8:d8:5a:07:81:f2:f0:72:
be:a8:19:1f:22:16:95:b4:5f:c7:52:d8:71:fa:91:07:a5:62:
9a:57:64:47:6e:f1:b5:f9:6d:17:06:ee:a5:ff:01:2c:12:31:
e5:fe:40:b9:0a:e0:d2:6d:fc:1f:72:e6:db:5a:cd:8f:71:4b:
4d:33:44:27:3b:c9:0d:62:23:a9:56:f1:fc:da:f8:c1:77:67:
5e:73:38:1c:38:bd:60:c4:50:74:6e:76:1c:5d:7a:48:50:28:
07:4c:d0:15:86:44:28:b2:19:80:57:43:47:bb:c4:c3:00:ee:
72:fe:49:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:14:56 2025 by rpki-client