Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nRZGz-9GQ2YbXT5jVt_r-FIGt3M.roa
File: nRZGz-9GQ2YbXT5jVt_r-FIGt3M.roa (raw, json)
Hash identifier: W6pYKejWRqJs4KiuC4mY3ytKhGEGFzAaXgW66ySKM2o=
Subject key identifier: 9D:16:46:CF:EF:46:43:66:1B:5D:3E:63:56:DF:EB:F8:52:06:B7:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C0AE0B5822573C2692752894A0A6B6C8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nRZGz-9GQ2YbXT5jVt_r-FIGt3M.roa
Signing time: Fri 04 Aug 2023 13:12:58 +0000
ROA not before: Fri 04 Aug 2023 13:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:ae:0b:58:22:57:3c:26:92:75:28:94:a0:a6:b6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 13:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d1646cfef4643661b5d3e6356dfebf85206b773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:94:c1:46:43:2c:e2:5a:ca:25:69:5a:b3:8b:
15:4c:88:c3:ea:39:8c:4a:4a:cf:dd:0c:27:e5:df:
41:b3:75:c3:9e:71:79:8e:7a:4e:d3:85:42:5d:0f:
4b:bd:aa:56:db:f9:ac:a6:e0:07:6d:b1:b0:9f:9c:
df:16:f3:43:8f:10:ff:c0:f3:b1:4b:fe:74:35:4f:
0f:96:a3:d4:0a:0d:3a:be:9a:07:d2:e0:34:b5:8b:
fa:14:53:d7:89:c1:37:fe:e6:48:77:9f:cf:84:89:
8e:08:61:71:a8:06:c6:cb:17:c7:1d:b5:38:59:46:
9e:15:fb:69:1a:2e:2d:37:f2:c5:84:9e:ce:e8:09:
c8:bd:5b:af:de:0e:54:cd:71:b2:bf:4a:a0:9e:54:
27:b8:d8:d0:a1:d6:96:8b:08:6a:ea:9c:73:9f:0b:
1f:b0:a3:56:4a:0e:34:97:8d:34:01:75:3f:a8:19:
0f:91:44:30:9e:ef:68:9d:ae:02:1b:48:06:f4:40:
d0:75:06:23:e9:96:67:38:3e:66:0a:6c:71:cb:14:
5d:5c:3b:c0:4c:ce:79:1d:e0:50:18:08:68:a7:49:
67:9a:80:08:4b:9e:49:df:53:59:b5:a8:62:70:7f:
9b:0d:d0:32:12:a7:59:12:80:c8:c3:62:be:09:ae:
d7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:16:46:CF:EF:46:43:66:1B:5D:3E:63:56:DF:EB:F8:52:06:B7:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nRZGz-9GQ2YbXT5jVt_r-FIGt3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:92:c0:85:76:2c:d3:35:8d:a3:0f:30:ec:8d:bb:06:0a:b5:
3f:34:4e:47:97:72:59:02:1b:1b:d8:b6:42:0a:3c:c2:81:f9:
33:9b:4e:3b:25:60:ae:3f:b1:c2:e5:44:cb:ae:39:1a:f2:7e:
e6:e7:4e:d2:23:70:0b:f0:4d:e8:13:c7:a6:a8:60:24:01:d2:
47:ba:a7:fa:27:55:56:89:f6:90:0d:a2:83:cd:ea:15:7a:58:
2d:34:50:f2:ec:5c:4a:2f:9e:f0:f6:91:26:98:32:22:21:80:
24:1a:a2:46:c3:88:2c:3d:75:4d:42:23:27:5c:d5:62:d9:86:
43:31:2a:66:c8:6e:6a:43:86:41:98:d0:e9:6f:5c:7e:81:34:
68:21:58:29:46:6f:a1:4b:9b:13:32:71:34:b4:5b:75:f2:7a:
05:8b:87:76:35:c1:e8:1b:d1:75:99:2c:78:bf:f9:8b:de:d1:
7d:da:9d:ec:2c:71:07:8a:78:2f:08:23:17:31:2a:90:c9:52:
73:eb:5f:81:38:8e:d5:00:87:1c:7e:98:74:51:82:11:fa:5f:
0e:57:8a:8c:4f:ba:a1:b5:4f:d5:12:a8:c4:3d:dc:8f:62:c6:
50:d2:c1:38:89:7a:2d:2e:5b:02:3d:1e:8f:27:83:5d:ea:5e:
0b:c9:d5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:59 2025 by rpki-client