Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nONmmlbS-V1Wyj0YIR2RoYQDV_c.roa
File: nONmmlbS-V1Wyj0YIR2RoYQDV_c.roa (raw, json)
Hash identifier: xZoq0F8nds5BvzJsONeNBeEl3pr8uca8w7uy2/dcuog=
Subject key identifier: 9C:E3:66:9A:56:D2:F9:5D:56:CA:3D:18:21:1D:91:A1:84:03:57:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D1D99BF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nONmmlbS-V1Wyj0YIR2RoYQDV_c.roa
Signing time: Wed 23 Feb 2022 21:24:48 +0000
ROA not before: Wed 23 Feb 2022 21:24:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1830656447 (0x6d1d99bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 23 21:24:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ce3669a56d2f95d56ca3d18211d91a1840357f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:fc:0c:f2:c1:0f:5d:74:cc:ca:f2:08:11:
f6:09:fe:af:ab:f0:06:e0:ac:82:ae:5d:55:1b:ea:
84:c7:a5:61:7c:42:79:8f:be:09:50:7d:dd:4f:85:
01:c7:01:5b:a3:97:96:6f:4c:47:04:13:9f:8e:1e:
c6:6a:01:68:3c:1e:e2:c1:84:83:f7:e9:82:fd:5f:
e6:d8:14:60:b8:b8:3f:9e:63:02:40:98:6b:c1:aa:
18:ea:48:a8:54:4f:99:6c:e6:e0:e4:09:fa:43:0b:
52:8e:66:bd:14:aa:89:ba:11:c1:67:7a:9d:ab:be:
ae:75:99:51:af:3c:01:51:13:a3:d5:ee:20:f7:f3:
15:19:4f:9a:c8:19:f4:b2:a1:c2:eb:39:76:96:e0:
13:c0:ee:54:8c:97:92:0b:41:02:5f:60:fc:0c:4b:
0f:b9:2c:37:61:0e:84:1d:1b:57:23:86:81:5e:a2:
da:01:d2:69:5b:8d:df:71:94:60:71:91:6b:7a:30:
75:61:47:cb:81:f7:cd:8c:2b:57:25:69:71:1c:34:
78:a5:a0:71:bd:10:a6:a2:8d:64:f0:b2:a3:56:53:
25:f2:27:87:12:1a:c8:d0:84:fa:37:e9:02:b8:9a:
ab:27:91:f6:70:e2:a1:a4:ff:cd:47:ee:c3:07:bb:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E3:66:9A:56:D2:F9:5D:56:CA:3D:18:21:1D:91:A1:84:03:57:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nONmmlbS-V1Wyj0YIR2RoYQDV_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:62:b4:bf:dd:5a:b7:b4:a2:94:60:d0:d7:40:89:69:15:f6:
b6:32:72:c2:80:5c:a2:3d:cb:cc:0d:14:74:4a:d6:2b:20:fc:
62:7b:8d:32:cf:b8:73:05:e9:e0:e9:3a:8d:4f:a9:d3:d5:82:
a7:c9:65:c9:0d:ff:4c:9b:cf:68:e7:53:87:2b:5c:1c:02:3e:
0a:45:50:fb:4f:83:37:55:6d:c0:4e:96:8c:17:0b:b4:9c:9e:
6d:03:af:a7:9a:69:a4:5f:f5:45:52:09:c9:22:2e:ab:c7:a3:
0e:38:86:83:fc:96:a1:0c:10:29:1b:f9:3e:bf:65:44:18:9e:
8a:09:69:1f:83:aa:96:27:54:b7:05:c5:fb:ae:0d:5e:7f:6b:
f2:56:18:b4:fa:18:e7:4e:f9:0e:5b:a3:7f:83:9d:37:9c:ea:
0a:0b:84:42:5f:aa:12:af:d9:41:00:73:a2:24:bc:8a:aa:c1:
e9:7c:10:c0:4e:ed:82:9b:a1:41:51:f4:34:d8:eb:39:19:26:
54:fe:a0:05:c4:f3:e7:86:8f:5b:b5:4b:d4:7e:cc:3e:40:73:
27:cf:24:2d:12:bd:4b:45:e4:87:59:7f:62:69:77:da:c9:9d:
b6:d8:aa:a5:b9:5a:b9:27:0b:92:e1:73:8b:5e:64:d4:97:69:
80:81:f9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:56:08 2025 by rpki-client