Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nYRzVRvU8W8DSJ9vYCRcSlSqf_U.roa
File: nYRzVRvU8W8DSJ9vYCRcSlSqf_U.roa (raw, json)
Hash identifier: J3louraqdkZmiBrvqDKXAAdiQkKZ1AKvESZndn3rk1E=
Subject key identifier: 9D:84:73:55:1B:D4:F1:6F:03:48:9F:6F:60:24:5C:4A:54:AA:7F:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864A0BBC1ED1EC2C9EAAF4CBF895FC6A01
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nYRzVRvU8W8DSJ9vYCRcSlSqf_U.roa
Signing time: Mon 13 Feb 2023 09:12:08 +0000
ROA not before: Mon 13 Feb 2023 09:12:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4a:0b:bc:1e:d1:ec:2c:9e:aa:f4:cb:f8:95:fc:6a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 09:12:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d8473551bd4f16f03489f6f60245c4a54aa7ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c8:3f:11:28:a8:6b:85:22:55:a5:b1:5f:38:
1c:2a:e8:17:46:ab:74:6a:15:48:8f:68:66:25:91:
4e:83:ea:02:02:eb:c4:dc:cf:f0:a3:2e:26:42:55:
fc:f1:6b:24:c6:87:6b:a5:37:92:02:45:4c:eb:8c:
2e:c6:ef:e9:3b:23:d3:ba:eb:12:46:3f:82:9e:d6:
58:6f:97:be:02:bf:78:d1:40:2b:82:eb:83:ed:68:
19:8b:f0:df:e8:d9:fa:38:aa:4c:ef:b8:dc:2c:a4:
c2:bb:9a:e6:61:cd:74:fe:7a:f0:c3:e5:b2:43:73:
05:a7:7d:8f:e0:7c:92:92:4b:ee:96:01:6b:fb:0e:
79:87:d9:2d:3a:dc:d4:c3:35:f2:2f:25:66:2a:09:
db:2d:e7:0d:a1:8a:6d:fb:31:e8:4e:4c:5b:5f:0a:
15:96:ad:ea:d2:3e:9f:67:84:4a:37:27:c0:34:94:
ba:28:57:bc:f6:1f:e5:0e:67:d0:9c:69:83:68:66:
cb:18:a3:73:de:82:d7:28:e7:a2:89:f9:25:51:81:
91:d4:f3:0f:d2:ce:ff:26:82:9d:75:0e:a2:10:82:
8e:e8:3c:28:4a:7d:8d:e9:88:77:b1:b2:9d:96:ca:
c6:0f:7f:2a:b4:96:15:c4:fb:20:0f:15:91:cc:4c:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:84:73:55:1B:D4:F1:6F:03:48:9F:6F:60:24:5C:4A:54:AA:7F:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nYRzVRvU8W8DSJ9vYCRcSlSqf_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:76:e9:ff:d2:61:1b:a8:45:ee:ba:8e:1d:f0:41:29:dc:4c:
8b:1d:81:d3:ab:ef:58:0c:ee:f6:31:34:08:7c:13:be:b6:f3:
4d:d8:ee:5c:e0:6d:0d:9e:ec:69:9d:3c:c9:d7:58:44:6d:e8:
b4:1b:77:25:6b:e0:55:c6:7c:f5:58:5e:56:60:60:55:9a:c8:
9f:b7:85:e6:f9:32:3a:f5:46:d3:21:8d:43:9f:05:0c:9b:08:
3b:be:b1:34:46:20:1d:e1:98:04:49:30:40:ab:30:0e:b9:16:
15:ba:30:1f:70:6f:73:db:17:3b:45:8b:f6:cd:10:f8:4f:dc:
90:73:1d:4f:ec:21:a8:63:60:86:cf:a6:e1:62:e9:d4:13:ff:
a0:26:49:38:91:ba:fd:39:ca:df:04:37:90:bf:5a:76:8e:6b:
62:6b:e7:c9:7f:94:19:cb:52:b8:ea:69:5d:bb:76:da:ae:70:
f9:6b:fb:17:d9:be:e2:7f:b1:4a:29:f6:b1:b6:bd:77:6b:6c:
3a:d0:82:4c:19:6f:87:53:7a:67:c9:0a:fd:40:06:62:58:ab:
0d:37:56:2a:58:34:95:64:76:d5:7a:6f:b1:10:6c:8d:ef:8b:
cc:ca:98:15:e2:86:f4:95:c1:c1:37:6c:19:e4:5e:c0:a3:33:
07:69:61:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:09 2025 by rpki-client