Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nOXMwVBb-V09YS65E5l1BOVkwHU.roa
File: nOXMwVBb-V09YS65E5l1BOVkwHU.roa (raw, json)
Hash identifier: UzmEFPXBwCbOx5THaoLklxg2R/u6sIkwEUCnIa3NEkA=
Subject key identifier: 9C:E5:CC:C1:50:5B:F9:5D:3D:61:2E:B9:13:99:75:04:E5:64:C0:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0A11FCF566E5E43AAD53DCA133D8C07F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nOXMwVBb-V09YS65E5l1BOVkwHU.roa
Signing time: Fri 18 Aug 2023 19:14:25 +0000
ROA not before: Fri 18 Aug 2023 19:14:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0a:11:fc:f5:66:e5:e4:3a:ad:53:dc:a1:33:d8:c0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 19:14:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ce5ccc1505bf95d3d612eb913997504e564c075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:07:d8:4c:e6:08:47:6a:8e:7c:44:d7:33:
3d:76:77:02:52:bb:bf:e6:ae:b5:22:91:99:60:41:
d9:d5:cd:48:c9:ab:e6:01:13:07:f6:25:b4:99:68:
5c:57:9e:c2:62:d8:57:23:ad:d0:35:8a:39:cb:0b:
0a:ec:85:f0:03:d5:9f:1e:42:2a:f8:41:12:1e:ab:
b7:44:1c:55:9b:e5:5d:ef:85:80:ae:ad:b4:f9:62:
b8:6c:27:cc:6c:fc:ca:b7:55:6f:4d:bc:4a:51:07:
ae:51:b5:cd:03:8f:04:93:a6:ff:55:46:19:6f:19:
9e:96:2e:ed:9a:05:e5:34:7b:3f:5f:7f:66:ce:e9:
35:02:85:80:0e:2b:31:28:f5:89:e0:16:79:1d:fe:
6a:a2:50:51:ef:e3:fe:46:65:6c:41:8b:ee:12:80:
5c:23:c7:e7:85:0f:df:ff:f9:5d:63:61:1d:d4:68:
28:2c:d9:fd:f0:5a:66:79:45:b9:8c:1b:5d:79:54:
1d:a6:18:22:10:c1:99:6a:c4:48:f6:78:ff:9a:0e:
a7:24:6f:0c:54:35:e7:30:bd:01:37:a3:86:95:86:
78:b0:b6:b4:4f:3e:08:eb:d4:f8:92:b7:92:d5:f4:
e5:f6:b9:7d:5a:a0:0c:7b:97:59:34:c8:2a:09:d6:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E5:CC:C1:50:5B:F9:5D:3D:61:2E:B9:13:99:75:04:E5:64:C0:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nOXMwVBb-V09YS65E5l1BOVkwHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:61:2f:47:28:65:aa:8a:5b:46:f9:17:e6:c9:6e:ed:a6:2b:
c2:1b:28:50:70:1c:aa:c1:59:b2:bd:c5:5b:89:7b:62:0d:a7:
d7:5b:a6:a1:14:e2:56:8e:76:94:68:96:e7:eb:22:e6:ec:4f:
25:ae:74:f6:96:4f:a5:92:95:aa:55:18:1b:dc:8d:3d:35:aa:
f6:d1:74:c3:64:e7:6b:a1:a5:dc:a2:6f:ef:4c:cc:60:71:ac:
d9:b6:69:ef:61:88:07:39:2c:0b:55:d2:b4:fc:01:01:b3:e1:
95:10:5d:d9:0c:10:c9:21:1e:36:f2:c9:18:3a:f0:18:69:e1:
e6:21:8f:3a:df:da:06:c9:d9:8f:50:9d:a2:31:5b:47:31:d4:
f0:e4:8e:0d:47:a1:e4:8c:29:93:6a:7f:73:4e:89:9d:2c:38:
db:92:de:87:55:56:0e:bd:23:2c:d2:fa:36:32:f1:0d:25:9d:
ed:ed:6a:a5:61:0e:67:b3:07:6c:c6:16:6f:69:21:b9:c6:70:
86:78:ce:d9:1d:ab:f5:a9:c0:20:71:5f:ed:3c:88:a0:42:14:
1f:61:ef:f8:59:ea:ce:7d:4c:5c:48:e4:55:e0:26:f3:f8:ca:
a2:73:ee:78:ac:ff:cf:4b:a3:ba:12:0f:e9:68:70:2a:22:08:
33:67:94:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:08 2025 by rpki-client