Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nfkt0Sap7KcSCbsbozFF-H0ekS8.roa
File: nfkt0Sap7KcSCbsbozFF-H0ekS8.roa (raw, json)
Hash identifier: E1D0gc9eugIr5WlTXt7T6YF6TRXVTbe32J0MjSeqZtA=
Subject key identifier: 9D:F9:2D:D1:26:A9:EC:A7:12:09:BB:1B:A3:31:45:F8:7D:1E:91:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898806B21B6F466D884E4E4ECC3555EFCB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nfkt0Sap7KcSCbsbozFF-H0ekS8.roa
Signing time: Mon 24 Jul 2023 13:11:27 +0000
ROA not before: Mon 24 Jul 2023 13:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:88:06:b2:1b:6f:46:6d:88:4e:4e:4e:cc:35:55:ef:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 13:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9df92dd126a9eca71209bb1ba33145f87d1e912f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:6c:0b:6d:da:1b:36:8e:7d:7e:7c:0c:b5:
b4:c7:31:95:23:66:5d:eb:33:1d:52:f7:a2:17:19:
63:9e:4e:70:92:85:d2:19:06:af:6c:a5:52:b1:03:
f3:76:ce:a3:b0:63:5f:4c:9a:7a:16:ca:60:ce:fb:
c7:3f:83:89:90:2c:35:d3:cc:69:ae:05:c8:b0:c2:
16:86:49:e1:b7:51:fe:10:94:b4:89:91:b4:29:38:
5f:c9:33:a4:8a:fd:d8:db:1f:02:68:f8:c6:b7:46:
f3:79:96:9f:f5:51:33:38:1d:19:a7:1a:5b:b6:f5:
77:b8:20:95:34:dc:61:1b:ad:e7:d8:cb:01:c4:d4:
dd:f7:94:dd:5c:6c:25:5e:40:f8:0b:c4:48:ee:af:
a3:24:7b:38:9a:88:8f:97:62:67:f3:04:ac:65:1d:
b0:fa:83:4c:87:90:10:38:28:06:d4:ae:96:13:81:
ad:57:ac:47:68:8a:07:f0:00:d2:73:31:6d:41:04:
13:66:e7:fc:a1:80:8a:97:29:c5:c8:8f:4c:fc:3d:
6d:48:01:6e:61:8e:34:18:76:59:26:38:86:5d:56:
f6:fe:f6:20:71:67:f5:37:08:49:d2:24:b4:c3:5a:
95:cc:40:fc:e9:52:92:8b:1a:d4:49:f4:35:53:6c:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F9:2D:D1:26:A9:EC:A7:12:09:BB:1B:A3:31:45:F8:7D:1E:91:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nfkt0Sap7KcSCbsbozFF-H0ekS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:f4:5f:a3:5c:79:75:60:3e:af:df:ad:9c:da:45:95:2b:1e:
cf:68:ce:43:6c:4f:34:a0:7b:0b:5b:0c:d0:6f:9e:0c:ea:e0:
16:c3:2f:b8:09:b4:d2:5e:91:31:18:56:fc:8a:19:d4:9e:64:
d8:6d:f5:c4:2c:97:23:a7:16:4a:8b:7c:da:fd:f5:07:8d:15:
70:b6:3e:62:aa:61:e8:20:b6:6b:d2:8e:b8:38:e8:42:43:a5:
8b:b8:4e:9c:95:ae:2f:d1:ea:c5:20:6a:30:21:a0:87:7a:2a:
ee:25:8f:ca:71:12:ab:5e:65:b1:eb:c6:b5:65:6e:ee:3c:3a:
5e:d3:09:79:92:43:f6:ce:1d:ae:90:00:9e:d6:74:95:12:c9:
f1:71:b2:55:fc:b4:3f:da:cb:1d:01:5f:1a:28:e8:32:9c:3b:
8a:66:7b:6e:31:ad:bd:1f:ca:08:01:99:63:08:9c:b3:1e:9e:
a8:f5:20:b8:96:4d:a5:18:db:a7:7b:e8:69:07:7f:47:02:2f:
53:70:76:e5:e8:4c:fc:24:3e:af:79:a3:98:1c:44:65:e7:56:
cc:5a:b5:ef:ad:2a:18:dc:bb:77:fb:5e:33:c2:84:78:f2:62:
fc:47:2d:0c:7d:22:19:d6:19:ce:97:c6:ef:a2:19:b5:de:fc:
84:84:24:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:36:27 2025 by rpki-client