Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nbKTDuZAD0uZfVKyyqAzmppEKcs.roa
File: nbKTDuZAD0uZfVKyyqAzmppEKcs.roa (raw, json)
Hash identifier: vQ6jnqVepyZDFyLcXLbahGC1/8cwZRXuAwyC/2D2gfs=
Subject key identifier: 9D:B2:93:0E:E6:40:0F:4B:99:7D:52:B2:CA:A0:33:9A:9A:44:29:CB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8C417CB1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nbKTDuZAD0uZfVKyyqAzmppEKcs.roa
Signing time: Mon 13 Jun 2022 02:11:03 +0000
ROA not before: Mon 13 Jun 2022 02:11:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2353102001 (0x8c417cb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 02:11:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9db2930ee6400f4b997d52b2caa0339a9a4429cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:f9:b9:ef:a7:28:82:3d:fb:13:23:ff:55:
fa:13:d3:46:ea:e3:53:06:a7:d7:f7:aa:3c:91:48:
d5:85:05:78:4b:16:9a:1d:72:53:95:b3:86:b9:e2:
c1:2a:cb:ab:36:67:9c:2b:1f:fb:f5:30:c4:16:3b:
ab:0a:20:de:fa:66:5f:50:ff:3e:e2:2c:ef:71:d8:
16:52:a9:a5:83:ef:41:fb:e8:b6:5f:be:e6:55:b3:
17:20:22:ea:55:39:07:b1:bd:ea:fe:86:97:31:a5:
ee:78:ec:d3:58:e8:d2:4e:b9:a9:82:eb:96:9b:9f:
38:d4:4c:05:1a:88:50:f7:8e:92:90:f9:40:fa:26:
80:ab:2c:9c:fe:92:07:98:d7:86:13:8b:bc:42:10:
ae:8c:b7:c0:fa:f9:0b:28:09:de:0e:23:b4:02:4b:
71:e7:63:4a:d1:78:17:ba:42:9d:be:e0:19:58:20:
7a:da:a0:29:b0:2b:4f:9a:aa:5e:1b:cd:a4:b5:27:
f8:dc:29:aa:9b:f9:a3:16:e4:f7:0c:5f:8b:c8:2b:
75:3c:36:d1:bf:ee:4e:8a:81:44:fa:dd:79:93:28:
f1:c7:bc:1c:37:73:e7:5b:f9:e7:b8:26:e3:e9:38:
1f:36:7a:32:f4:85:c3:8a:e3:b8:2e:30:5f:9e:69:
1b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B2:93:0E:E6:40:0F:4B:99:7D:52:B2:CA:A0:33:9A:9A:44:29:CB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nbKTDuZAD0uZfVKyyqAzmppEKcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:0f:44:54:fa:02:ed:a0:73:43:46:72:b0:88:86:ae:4f:ad:
d2:97:da:51:23:30:73:1f:81:60:70:b0:51:90:09:ed:50:55:
f5:eb:f1:a2:0d:1c:95:20:cb:ff:75:5a:98:1c:22:b9:8b:df:
0a:e8:c5:c8:b4:a3:2d:c3:35:ad:85:d9:bd:4c:91:09:51:dc:
9a:fe:3f:f4:c4:c7:52:10:3f:a6:a3:70:5f:e3:76:83:21:73:
01:af:fc:2c:92:06:68:15:c0:8f:80:5a:eb:08:af:69:23:f0:
2f:e6:82:66:dc:87:27:68:4f:88:81:4b:66:9e:44:ed:20:35:
e9:a5:b8:cc:9d:bb:1a:80:c1:94:60:db:ed:96:7b:58:79:3e:
91:ee:0d:a6:01:08:89:d1:5d:5c:f8:bd:d3:8a:5c:39:b2:8f:
f5:cd:39:74:e1:ed:d8:b4:2c:d0:3c:cf:47:d0:eb:fb:53:04:
5f:c4:a1:02:cd:2f:b2:c5:c0:f0:c8:97:d4:fa:ee:a3:75:1c:
64:84:38:43:c8:53:c3:a8:28:40:0e:1b:cf:b1:ac:70:37:37:
37:d9:af:6e:00:53:74:4a:16:d4:4e:42:59:cc:24:a5:f5:80:
fa:3e:26:57:dd:3e:dc:6d:65:65:d4:6c:2b:33:d3:2f:e1:f0:
e6:f8:52:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:15 2025 by rpki-client