Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nRJuY3CzOIpf11ZbZZVmH-2UVVk.roa
File: nRJuY3CzOIpf11ZbZZVmH-2UVVk.roa (raw, json)
Hash identifier: uv1KBuNmbxuBtzSbmLRGXxPzkqVtPuDf+ZiPgsKiqsQ=
Subject key identifier: 9D:12:6E:63:70:B3:38:8A:5F:D7:56:5B:65:95:66:1F:ED:94:55:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01849AC02E4AA6E195F1137B24FFE080D538
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nRJuY3CzOIpf11ZbZZVmH-2UVVk.roa
Signing time: Mon 21 Nov 2022 15:13:16 +0000
ROA not before: Mon 21 Nov 2022 15:13:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:c0:2e:4a:a6:e1:95:f1:13:7b:24:ff:e0:80:d5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 21 15:13:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d126e6370b3388a5fd7565b6595661fed945559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8c:af:18:40:3b:d1:a4:26:c5:d8:83:ab:6a:
50:ee:4e:66:cd:24:97:ca:be:5e:85:fc:37:b1:69:
fd:ab:ea:ed:09:45:0b:86:bf:00:ee:14:7b:02:12:
c6:a4:8f:e2:5a:d8:16:65:38:25:27:a1:6e:8d:5b:
e2:9f:a9:58:d9:3a:0d:a2:69:fc:64:4e:5e:7a:d0:
27:cf:41:c4:ca:72:02:80:cb:79:cd:97:53:95:52:
06:90:65:14:12:a1:6e:ba:f1:e8:bb:29:ce:90:96:
eb:a9:0b:e0:a5:43:c0:dd:59:f3:65:b3:bf:ef:d6:
aa:05:66:14:25:24:09:2e:9d:31:64:02:dd:f7:9d:
ac:47:55:29:29:14:1c:2e:ba:a6:18:94:10:42:94:
85:6a:12:fd:94:16:bf:0a:84:95:f1:9d:c0:99:20:
d5:d1:af:d6:59:38:d1:d5:ff:91:90:0b:b3:3e:f1:
a1:2a:33:6b:8b:4d:0a:12:4c:45:1c:36:75:2a:96:
6e:56:0d:b3:e2:32:36:0f:92:8d:d3:bf:cb:80:85:
f3:b5:8b:27:b6:1d:62:68:3c:64:21:4b:a6:4b:a0:
f3:51:07:0c:fc:dd:bb:60:cd:e4:85:f5:74:c4:2e:
0a:dc:40:64:16:b0:34:60:4f:01:3e:96:62:83:f8:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:12:6E:63:70:B3:38:8A:5F:D7:56:5B:65:95:66:1F:ED:94:55:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nRJuY3CzOIpf11ZbZZVmH-2UVVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:c2:cc:58:c1:29:04:e4:38:d0:c6:39:c2:d9:12:4a:5a:1d:
13:07:80:01:d7:5e:7f:5a:25:34:08:4f:00:8f:fd:e5:54:2e:
02:84:13:b5:48:6a:90:01:d5:38:14:86:85:b9:85:49:ad:11:
92:00:04:32:4c:3a:4b:fc:a0:46:77:70:17:1e:a2:cc:14:f7:
35:ce:27:eb:ca:8d:c1:83:62:cd:57:b2:cb:4c:55:8c:b3:fa:
ad:96:72:6b:7b:1d:61:03:8e:04:9f:5d:33:16:fd:1c:9d:67:
b2:d1:0a:6e:2f:41:a9:12:a4:05:6c:d0:44:4f:ea:7e:d0:df:
08:24:0d:55:b7:4b:7a:dc:58:f9:c0:9e:0e:14:57:f6:9f:21:
51:07:49:9d:ad:0e:54:16:5d:e3:fa:96:ce:40:d1:04:81:60:
23:72:8e:cc:cf:90:c2:e8:a4:77:6e:d7:c0:53:b1:a1:0e:51:
11:74:ef:bc:a2:01:0d:d8:80:be:d8:3a:2e:dc:ac:0c:b7:21:
bb:8a:c9:1e:e0:7b:81:58:07:8e:80:c4:72:db:ef:b8:38:bd:
33:de:4e:64:01:45:41:43:05:af:5b:1d:b9:cc:53:af:c3:e3:
60:69:c5:f3:92:8e:19:c3:23:54:21:0b:d6:e9:d2:eb:ea:33:
d7:df:26:65
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYSawC5KpuGV8RN7JP/ggNU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTIxMTUxMzE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDEyNmU2MzcwYjMzODhhNWZkNzU2NWI2NTk1NjYxZmVkOTQ1NTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoyvGEA70aQmxdiDq2pQ7k5mzSSX
yr5ehfw3sWn9q+rtCUULhr8A7hR7AhLGpI/iWtgWZTglJ6FujVvin6lY2ToNomn8
ZE5eetAnz0HEynICgMt5zZdTlVIGkGUUEqFuuvHouynOkJbrqQvgpUPA3VnzZbO/
79aqBWYUJSQJLp0xZALd952sR1UpKRQcLrqmGJQQQpSFahL9lBa/CoSV8Z3AmSDV
0a/WWTjR1f+RkAuzPvGhKjNri00KEkxFHDZ1KpZuVg2z4jI2D5KN07/LgIXztYsn
th1iaDxkIUumS6DzUQcM/N27YM3khfV0xC4K3EBkFrA0YE8BPpZig/gQPQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ0SbmNwsziKX9dWW2WVZh/tlFVZMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvblJKdVkzQ3pPSXBmMTFaYlpaVm1ILTJVVlZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGzCzFjBKQTkONDGOcLZ
EkpaHRMHgAHXXn9aJTQITwCP/eVULgKEE7VIapAB1TgUhoW5hUmtEZIABDJMOkv8
oEZ3cBceoswU9zXOJ+vKjcGDYs1XsstMVYyz+q2Wcmt7HWEDjgSfXTMW/RydZ7LR
Cm4vQakSpAVs0ERP6n7Q3wgkDVW3S3rcWPnAng4UV/afIVEHSZ2tDlQWXeP6ls5A
0QSBYCNyjszPkMLopHdu18BTsaEOURF077yiAQ3YgL7YOi7crAy3IbuKyR7ge4FY
B46AxHLb77g4vTPeTmQBRUFDBa9bHbnMU6/D42BpxfOSjhnDI1QhC9bp0uvqM9ff
JmU=
-----END CERTIFICATE-----
Generated at Thu May 1 00:08:07 2025 by rpki-client