Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nLbNH9Nz3niEzlMxLJR2TiPMIwI.roa
File: nLbNH9Nz3niEzlMxLJR2TiPMIwI.roa (raw, json)
Hash identifier: 9sa62+m9ZDpN/cxGLl78LRl8YlAJhXnS0sbUoh2z1tE=
Subject key identifier: 9C:B6:CD:1F:D3:73:DE:78:84:CE:53:31:2C:94:76:4E:23:CC:23:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884772152F5BCA80AD479D4FDE98987D41
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nLbNH9Nz3niEzlMxLJR2TiPMIwI.roa
Signing time: Tue 23 May 2023 07:10:38 +0000
ROA not before: Tue 23 May 2023 07:10:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:72:15:2f:5b:ca:80:ad:47:9d:4f:de:98:98:7d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 07:10:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cb6cd1fd373de7884ce53312c94764e23cc2302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:2d:4e:65:17:41:d7:45:f9:c4:9e:92:b8:
da:8c:5d:48:6a:4e:f4:11:75:24:d8:92:58:22:8c:
28:b6:8f:ba:9c:71:b0:79:e9:3a:af:4b:57:be:98:
6d:a4:77:22:07:61:d3:8d:62:f0:82:96:17:1a:9b:
9d:19:fb:ea:c8:3f:6e:38:62:16:2b:bc:41:03:26:
cb:85:6a:13:8d:0e:1b:97:f3:5d:c1:4c:1a:11:d7:
72:5d:df:92:e0:27:77:86:0a:98:8e:e9:09:7a:ec:
e0:62:c4:ff:4f:dd:a0:af:44:b9:9e:9c:5f:70:f7:
39:89:45:16:79:8d:b4:3e:63:6c:75:63:99:28:aa:
55:42:89:95:8e:c1:3e:b4:81:6e:84:55:60:4e:94:
ef:db:ed:a2:39:a2:ba:60:22:24:23:46:dc:cc:44:
7d:32:86:bd:c7:d2:96:01:5e:12:4e:9c:f0:c6:ee:
a0:f8:e1:55:eb:16:25:66:13:e5:e5:48:12:cd:e9:
1e:a6:92:57:23:68:53:8f:1b:08:44:f8:a8:6a:c1:
31:cd:44:61:89:95:4a:ea:d7:bb:3f:a2:8c:72:64:
60:f7:c2:79:23:47:86:b3:a0:10:23:60:b2:2a:a9:
8d:49:60:3d:43:bd:b1:1f:ff:80:35:41:d0:14:22:
84:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B6:CD:1F:D3:73:DE:78:84:CE:53:31:2C:94:76:4E:23:CC:23:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nLbNH9Nz3niEzlMxLJR2TiPMIwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:2e:53:ba:78:9f:b7:72:e6:5e:b7:71:cf:0c:82:e3:00:c8:
e8:3c:3d:4c:b6:db:71:84:0b:24:b5:34:d2:59:9e:9a:71:4a:
14:0f:f2:41:a5:80:db:12:59:ea:bb:b0:5b:7a:a8:c3:72:2d:
37:73:68:33:89:90:16:f8:9a:3e:9f:9a:c3:bb:4b:b8:7d:6e:
dd:43:aa:c7:ca:46:88:ec:bf:f7:1a:5c:8b:08:c4:5b:52:d5:
4b:5e:1c:ee:02:c6:d6:a0:69:76:c1:36:a3:e2:1d:d9:ac:a4:
9a:a0:fe:e4:fc:49:8f:b1:41:7d:13:56:11:05:91:e9:5a:34:
ad:c8:dd:6b:e3:f2:c0:74:ee:e7:67:f6:1b:38:6a:19:95:fe:
bf:07:38:2f:9a:59:c5:ec:c4:b7:c2:e1:e4:77:6f:2e:4f:62:
e8:40:a4:e8:f5:b4:43:ee:5b:0d:e5:4c:7f:f8:83:af:62:df:
dc:df:70:46:c5:68:af:13:3a:3c:91:6c:f7:5d:e7:59:d2:6f:
63:e8:51:ec:84:76:d6:81:ad:d6:ad:ff:57:fe:9f:d8:46:c7:
31:69:f1:2f:df:a3:ad:08:bf:b6:62:1f:88:d0:6b:19:6e:dc:
cd:c0:85:54:49:97:f6:4a:f5:07:6e:6f:d0:2f:6c:52:69:ca:
45:37:a3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:22:35 2025 by rpki-client