Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nbCLvXKpZqLEH0qe4cilQJ_Gr0U.roa
File: nbCLvXKpZqLEH0qe4cilQJ_Gr0U.roa (raw, json)
Hash identifier: 1XoKHniTVLLmmkH49Ev8hxZZ1yT1tV0lThHvEgZbQ84=
Subject key identifier: 9D:B0:8B:BD:72:A9:66:A2:C4:1F:4A:9E:E1:C8:A5:40:9F:C6:AF:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BC2B8FC10AB8A471FD113B0DC794CC3C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nbCLvXKpZqLEH0qe4cilQJ_Gr0U.roa
Signing time: Thu 03 Aug 2023 16:11:58 +0000
ROA not before: Thu 03 Aug 2023 16:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bc:2b:8f:c1:0a:b8:a4:71:fd:11:3b:0d:c7:94:cc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 16:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9db08bbd72a966a2c41f4a9ee1c8a5409fc6af45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6b:27:a0:29:5b:c2:8d:c9:6f:23:69:86:10:
c4:12:54:b0:04:12:2d:c9:0a:42:d1:79:11:e0:1d:
fc:1a:4f:f2:50:26:e2:55:3b:08:69:bd:ca:2b:98:
66:ac:33:cb:9d:65:fd:73:37:68:6e:96:46:49:2a:
ed:7a:4f:84:46:63:fb:15:2d:94:a5:c9:7a:95:a4:
3e:d6:67:7c:c4:a7:ec:d3:f1:d8:86:ed:d4:23:f9:
f2:ae:60:0e:03:ad:55:c5:5e:fc:b3:f2:01:b2:73:
54:ee:11:d3:a0:83:38:d1:4f:58:47:72:99:11:4d:
53:ca:94:85:29:7d:26:32:11:47:5e:c6:c0:2c:2d:
41:b4:81:47:08:e8:77:2a:50:53:b3:3f:2b:95:66:
40:4f:4a:17:aa:d9:05:07:d3:35:6d:07:a1:a3:de:
3c:d6:5c:0c:bd:09:c5:55:4c:d8:aa:3d:54:de:dd:
f2:16:ad:62:24:d3:03:ac:5d:72:6e:56:74:86:b3:
ef:37:9e:3f:15:5b:ef:cf:47:84:39:da:ef:dc:70:
97:34:d0:d4:8f:e1:b3:39:06:ae:17:50:df:6f:b5:
f1:a0:96:9b:d6:73:75:3f:b0:79:ae:5d:af:41:a6:
a4:5b:e6:c8:47:1d:86:2c:d0:4c:3e:48:1a:26:d2:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B0:8B:BD:72:A9:66:A2:C4:1F:4A:9E:E1:C8:A5:40:9F:C6:AF:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nbCLvXKpZqLEH0qe4cilQJ_Gr0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:fa:5f:ba:b8:d8:2f:88:0d:a7:7c:90:da:a8:fd:24:6c:64:
b9:2f:ac:ff:13:62:e0:29:0a:5f:60:4b:71:47:75:7f:fd:a1:
6b:d2:18:f5:6c:0e:f1:83:19:5c:19:74:a1:51:ee:a9:bd:c7:
4c:ef:2c:3b:47:78:b0:51:c9:ff:d8:af:b3:6d:e7:72:01:f4:
07:7f:cf:df:cd:5c:69:0e:a2:9d:41:ae:3f:a4:d6:1c:3b:70:
41:be:c9:8b:90:b9:2c:13:2b:46:72:53:53:89:26:a3:ce:c5:
0e:b9:73:e0:f2:e7:13:06:29:3c:aa:48:af:a2:1d:31:a5:5d:
1b:b4:f4:a8:bb:86:cc:ee:d5:30:e4:42:eb:30:52:ee:70:b3:
29:0a:88:32:59:30:b3:7d:a0:0d:6e:7d:7d:01:93:be:b5:96:
34:74:46:a3:37:c0:4e:7a:41:9a:70:74:00:18:39:87:d2:aa:
4f:10:1d:33:1e:04:4b:a2:c6:fa:1d:a8:e1:b5:84:82:ae:8a:
a1:99:85:1f:45:91:43:8e:9e:57:13:d3:a3:d1:e1:9a:fe:df:
5a:93:2d:8e:5c:a1:5b:63:12:f0:0d:f4:6d:33:d6:0d:ff:7f:
73:ef:84:85:44:0e:bc:fe:b0:f9:63:83:b6:a1:6c:da:73:c1:
24:25:03:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:59:08 2025 by rpki-client