Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nbxuJ3uR2GkX1l6sjscHNZP2waA.roa
File: nbxuJ3uR2GkX1l6sjscHNZP2waA.roa (raw, json)
Hash identifier: XCtKKKkCOil7nGn9V2CQLAOCIYLkChhOgWmM8Lu8qYY=
Subject key identifier: 9D:BC:6E:27:7B:91:D8:69:17:D6:5E:AC:8E:C7:07:35:93:F6:C1:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182911EA9D2D1FC28566062958CEBF260FE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nbxuJ3uR2GkX1l6sjscHNZP2waA.roa
Signing time: Fri 12 Aug 2022 08:14:41 +0000
ROA not before: Fri 12 Aug 2022 08:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:1e:a9:d2:d1:fc:28:56:60:62:95:8c:eb:f2:60:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 08:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9dbc6e277b91d86917d65eac8ec7073593f6c1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0f:da:77:b2:62:86:58:c2:33:fc:c3:91:2b:
dc:aa:fc:eb:7a:eb:70:84:a2:fa:a3:d8:ec:ab:7e:
6a:f3:59:3e:80:18:85:54:dc:43:ae:83:73:0a:4c:
ed:bd:d2:ce:76:6c:4a:a9:8c:a7:68:0b:c6:ce:04:
75:a1:f0:08:6a:b4:65:93:54:b4:4c:a1:be:0e:16:
d0:c1:67:a1:c0:0b:dc:21:28:43:a9:9a:0f:d5:f5:
64:f4:90:01:4a:36:90:06:dd:92:e0:9a:e4:42:0f:
8f:22:03:65:be:04:42:2a:88:46:30:aa:07:d9:72:
e3:f6:b9:a3:b2:1b:dd:1c:28:f4:54:ab:b9:2d:fe:
d5:72:71:cf:78:3d:f9:c1:13:cf:37:50:e9:4f:8d:
1d:57:67:5d:3c:a3:02:f4:b3:1a:ee:90:c5:79:4f:
e9:e8:a6:5f:f0:fc:97:19:55:ba:b4:02:18:c2:02:
83:23:c9:b5:1d:a3:ed:7f:0b:3d:82:5a:e2:89:84:
e8:31:57:0a:51:5e:40:77:b0:34:16:da:64:66:86:
99:f3:e0:b8:a6:d7:e7:55:82:61:29:be:20:4f:98:
dd:90:e7:ea:eb:3c:47:19:0c:e2:ca:38:f4:bd:81:
9a:aa:04:3c:93:65:40:27:08:2d:f0:cd:5d:65:d6:
29:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BC:6E:27:7B:91:D8:69:17:D6:5E:AC:8E:C7:07:35:93:F6:C1:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nbxuJ3uR2GkX1l6sjscHNZP2waA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:9a:48:9d:ba:a0:e5:a9:5d:eb:8f:b4:53:f7:1a:ec:fd:f8:
be:90:be:2a:21:84:7f:12:fd:19:ea:12:14:7b:5f:45:41:54:
65:4a:dc:72:bc:1f:70:63:b0:82:08:eb:83:05:c2:6c:ac:4c:
7c:50:03:82:5f:a4:9d:9d:06:15:85:8e:e6:eb:66:a2:27:17:
78:d8:0f:c3:b2:52:07:61:6e:30:c6:00:df:91:48:8d:b6:56:
6f:48:ea:91:6a:8f:6b:43:9d:7c:a6:c4:20:68:8e:0c:c4:8b:
bf:25:ce:f0:ea:e9:9f:ab:e8:d3:fd:47:d4:1b:c1:d1:c2:f7:
dc:2f:93:c4:c1:aa:54:cd:24:76:20:85:6e:b3:b0:96:fd:2d:
e1:7d:ff:6f:ba:10:68:2a:05:05:4c:ee:e1:18:1b:9e:7b:0f:
ab:00:8b:9c:0c:9c:b3:e8:be:e5:30:5d:a8:cf:0a:19:9a:69:
38:b5:05:95:a4:25:a9:9d:d2:ae:d1:e5:bb:b5:13:a4:51:ab:
b0:a4:38:0d:eb:84:ef:57:bb:32:bf:b6:17:7e:51:1d:56:82:
f8:23:8d:4b:b9:f9:42:1f:b5:90:d1:15:91:73:c2:1e:ae:d3:
b4:c1:dd:33:6b:f7:fe:52:0c:35:cb:d3:e5:b6:fa:bf:11:36:
ac:da:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:53:55 2025 by rpki-client