Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nLdlkyi2upD2vabRDOHH8jU_YSs.roa
File: nLdlkyi2upD2vabRDOHH8jU_YSs.roa (raw, json)
Hash identifier: 6CtRbiG/uLanpEzJ8LBsicR6NMhPWbJo+vtIM+/ICxo=
Subject key identifier: 9C:B7:65:93:28:B6:BA:90:F6:BD:A6:D1:0C:E1:C7:F2:35:3F:61:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E8355811BDA832EEE997777197B3289B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nLdlkyi2upD2vabRDOHH8jU_YSs.roa
Signing time: Tue 06 Dec 2022 16:12:00 +0000
ROA not before: Tue 06 Dec 2022 16:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e8:35:58:11:bd:a8:32:ee:e9:97:77:71:97:b3:28:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 16:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cb7659328b6ba90f6bda6d10ce1c7f2353f612b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5b:39:94:04:47:d0:b7:c5:bd:0f:87:ae:c1:
a9:c5:f9:bc:d1:21:64:ac:6f:28:c8:ed:68:aa:39:
87:5f:eb:23:29:73:c4:63:0e:e4:48:b6:a6:95:a5:
e8:e9:11:90:6a:70:06:05:02:9f:89:48:b8:6b:ae:
d7:cf:78:fe:cf:c9:1a:61:75:13:b2:d0:0f:fc:47:
4f:10:72:e7:01:b9:16:95:8d:13:bf:83:c4:db:34:
88:9b:d1:17:97:e5:b4:ff:7f:88:94:47:04:fe:45:
45:ee:07:20:d8:a8:a9:27:45:1a:56:47:82:69:9b:
66:68:db:a9:9d:af:3a:a3:87:46:87:3e:4f:d2:73:
3d:b6:7d:ef:7a:30:6c:b8:32:ce:4e:8d:cd:e6:d3:
b2:04:1e:b9:f1:d8:74:ba:ae:43:11:90:c2:88:3e:
bb:11:a4:38:fe:6b:b3:25:31:c4:68:39:65:c4:01:
89:a7:3b:a2:97:d0:17:27:38:d7:95:83:57:ee:3e:
97:08:f4:e0:92:1e:04:84:58:2f:8e:2c:a6:13:42:
c8:1d:fd:a3:75:1a:43:a2:91:4d:ba:28:b4:00:7d:
ae:c7:47:67:11:11:7b:1d:51:df:4c:0d:54:ea:36:
16:77:e8:c1:f4:91:59:17:31:2c:90:83:ce:85:c4:
c5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B7:65:93:28:B6:BA:90:F6:BD:A6:D1:0C:E1:C7:F2:35:3F:61:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nLdlkyi2upD2vabRDOHH8jU_YSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:3c:de:56:b5:d9:17:86:9d:73:19:15:5a:41:32:b9:f2:b0:
32:47:83:c6:28:b9:a1:35:e6:42:ee:93:03:5e:18:0b:0a:8b:
51:53:70:ab:6f:f8:bb:38:d4:fc:1c:fe:b2:9e:9a:d0:2f:16:
b9:08:2f:66:a9:f8:f0:14:46:21:dc:f3:ca:46:1a:bb:95:ca:
11:28:5b:6a:72:41:18:80:0b:6a:ca:51:49:32:02:0e:96:0f:
b0:bc:fb:86:a7:02:1e:78:1f:34:3e:3e:19:b9:86:f4:97:d9:
df:79:cf:1c:66:8f:2a:6e:50:7b:47:52:c3:e9:49:61:28:81:
88:4e:dd:c0:79:88:cc:9f:5f:33:de:ea:a6:a3:21:f0:12:8a:
1c:77:40:ec:dd:96:33:8b:7c:82:a5:18:94:3a:84:e2:f1:04:
ee:81:fa:02:1d:c1:61:5d:6d:db:2d:de:23:49:b0:15:61:fe:
a1:13:29:4e:bf:98:5a:48:ce:ff:24:e6:ad:c0:84:73:34:d1:
06:14:9a:32:c7:4e:c2:a5:af:68:62:08:23:03:f7:7d:c8:6b:
47:79:c2:95:1c:f3:1c:48:50:3c:09:c0:cb:0f:44:d5:ce:a0:
79:68:37:f0:d7:a4:18:9c:4a:48:11:31:ee:75:52:d0:1e:23:
65:33:aa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:21:00 2025 by rpki-client