Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nKu3vXu1rOzR3dXdBVPfsmmeDn0.roa
File: nKu3vXu1rOzR3dXdBVPfsmmeDn0.roa (raw, json)
Hash identifier: 9/+RSleBQrjiGJ0J/1yPOKzaMgGKZfqLtqfCl2ZeXks=
Subject key identifier: 9C:AB:B7:BD:7B:B5:AC:EC:D1:DD:D5:DD:05:53:DF:B2:69:9E:0E:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D473A1D35D5B2809280E7DE15137F73F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nKu3vXu1rOzR3dXdBVPfsmmeDn0.roa
Signing time: Sun 12 Mar 2023 06:13:13 +0000
ROA not before: Sun 12 Mar 2023 06:13:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d4:73:a1:d3:5d:5b:28:09:28:0e:7d:e1:51:37:f7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 06:13:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cabb7bd7bb5acecd1ddd5dd0553dfb2699e0e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:6f:b4:03:a4:5f:65:4b:40:ce:34:44:c8:
f4:b6:a8:e5:e8:a6:a3:46:65:70:32:11:96:d1:a3:
c4:a5:84:23:17:9f:07:8c:fa:d9:98:6d:92:0e:e4:
42:e1:b4:8e:78:22:b8:ed:6d:7c:a2:96:88:69:60:
72:80:0b:d8:3b:c8:95:32:b5:37:c6:3d:2e:22:b3:
5f:55:d5:16:3b:75:19:db:3f:86:31:d6:7b:b0:86:
5a:8c:f9:78:ef:2c:17:5e:3e:48:78:7e:cd:88:a6:
1d:ab:bd:f4:94:7c:af:3a:f2:de:51:e0:fd:75:2e:
b2:72:15:10:49:90:39:86:c2:3f:f0:fb:30:f7:1c:
9f:25:4e:b9:2b:a7:c8:11:96:68:fc:f3:c0:34:21:
e9:b9:e9:3c:d5:06:6e:71:80:53:25:4b:f4:2c:3e:
2d:87:e1:fc:af:08:56:07:17:97:b7:02:f5:ca:d0:
e3:55:77:6d:2f:49:c1:49:0c:c8:68:40:d8:76:d8:
55:37:f1:c2:71:87:5d:72:fd:6f:c6:c5:4f:96:2f:
cd:de:05:44:a8:82:2c:f0:8d:fa:20:15:8e:c5:43:
6e:e3:c3:af:84:85:4f:be:65:89:e6:b2:d2:f9:c4:
65:84:1e:fb:da:8f:fe:17:18:3f:a6:6f:35:63:87:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AB:B7:BD:7B:B5:AC:EC:D1:DD:D5:DD:05:53:DF:B2:69:9E:0E:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nKu3vXu1rOzR3dXdBVPfsmmeDn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:94:01:5b:b6:82:b1:ab:f2:68:73:7d:8f:0e:78:ab:c5:37:
e3:99:ab:fd:ba:a3:24:d2:d9:77:08:49:6c:5c:bf:fe:5e:dd:
05:e0:c2:91:9b:76:ab:10:61:c3:90:ef:d2:db:a5:0a:8d:23:
3e:af:cb:1b:9c:c3:b8:5e:05:e9:78:94:10:ed:39:25:ed:a0:
91:f4:1b:2b:ce:3e:a0:78:46:c6:ad:f5:54:18:a7:4a:80:f1:
95:3e:fc:a4:ac:51:26:a3:59:ff:48:bf:3b:fd:03:f5:67:1d:
be:5e:f5:fb:eb:59:88:96:2a:fd:8b:0b:0c:28:1e:d7:24:b7:
27:22:2c:02:73:6e:5b:9a:5e:0d:ca:38:1f:2f:0b:1e:c3:bd:
ec:04:38:cb:53:7a:6b:a3:b0:ac:f2:2c:28:73:1a:bd:05:4e:
4d:91:e4:e1:3b:c2:dc:d1:e0:c4:d1:44:ab:c7:67:d9:45:04:
16:5a:3b:b9:40:b5:09:58:84:77:7a:7a:da:6f:62:2a:5a:0a:
8c:60:31:2e:3d:c9:3b:d7:eb:a7:54:70:3a:71:2d:85:24:05:
05:6e:ec:fb:06:9c:c2:fb:d3:89:b1:33:1e:e7:b1:be:fc:63:
e3:df:f1:db:40:28:1c:c6:70:aa:b7:b0:5c:5c:e2:ad:3f:ba:
bc:ff:78:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:29:07 2025 by rpki-client