Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ngXA9vQlLEvNmmUbYIqP-UiEm7I.roa
File: ngXA9vQlLEvNmmUbYIqP-UiEm7I.roa (raw, json)
Hash identifier: 6jc1Y6h5jqGNKru1MqZiR7I6s7izozLcoEGXfifY38k=
Subject key identifier: 9E:05:C0:F6:F4:25:2C:4B:CD:9A:65:1B:60:8A:8F:F9:48:84:9B:B2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6BE31975
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ngXA9vQlLEvNmmUbYIqP-UiEm7I.roa
Signing time: Sat 19 Feb 2022 06:15:33 +0000
ROA not before: Sat 19 Feb 2022 06:15:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1810045301 (0x6be31975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 06:15:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e05c0f6f4252c4bcd9a651b608a8ff948849bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:c8:ea:ca:66:b4:69:78:75:25:8b:25:4a:
92:bc:33:7e:e5:50:30:ef:9a:b1:4c:2f:85:50:1e:
1f:c6:1a:18:19:3b:2c:11:4f:cf:99:20:dc:07:b7:
fb:7b:05:52:b5:64:43:29:1d:42:c2:1d:45:c9:d0:
8c:b7:5d:bf:90:a4:2f:cf:0c:6b:2b:62:15:3a:2c:
83:cd:41:b0:9c:bc:af:75:b6:91:1f:be:b0:ad:67:
54:6a:5e:65:d4:a3:a9:fd:f4:79:5c:a5:93:67:e5:
0e:dd:c7:4b:87:4e:bb:08:3a:e9:f4:2d:8d:10:42:
1d:54:d4:b3:34:a6:33:c5:49:d9:4d:ac:45:11:4f:
03:30:0d:11:a2:e9:1a:ae:1c:b5:2f:5b:8f:17:69:
a3:8e:14:3d:95:83:3f:a4:44:04:4f:3b:97:91:77:
4f:ed:b0:33:dc:a0:3c:c7:dc:8d:3d:c7:13:53:d0:
29:a1:bd:96:8a:91:09:cd:eb:b4:49:bd:c3:c8:54:
14:ea:af:88:b7:f3:c9:78:7a:9c:02:e8:2c:d9:1d:
fd:83:c8:6e:bc:4e:e0:97:4a:75:a6:70:a3:d2:ea:
36:c1:20:d9:c5:e9:f9:13:3e:85:d1:cc:3a:6b:be:
27:d9:82:a7:37:71:67:8b:93:33:30:c1:b5:bf:04:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:05:C0:F6:F4:25:2C:4B:CD:9A:65:1B:60:8A:8F:F9:48:84:9B:B2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ngXA9vQlLEvNmmUbYIqP-UiEm7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:d7:20:10:05:5f:3e:23:13:e9:69:e0:c1:85:9b:e9:b8:9e:
b3:8c:9d:ec:a2:e9:37:85:0e:20:c6:b7:67:72:11:a6:1d:13:
3e:05:fc:ab:30:89:c6:f5:76:cd:8f:f0:f1:ed:e7:23:03:0e:
92:92:38:94:2a:b0:35:ae:6c:42:36:9e:3d:1e:bb:87:ca:0e:
ba:a2:5f:23:ac:f0:06:0a:dd:a5:2d:c2:36:ee:ad:06:eb:cf:
d0:71:8b:b2:6c:95:54:e8:95:8a:f7:26:2c:94:f2:1d:b6:94:
0f:24:f4:d9:c4:61:2a:2e:15:ee:fa:d9:1a:e2:d9:0d:1b:2c:
10:9d:6b:e8:a3:30:fd:0e:ec:b9:88:83:c1:15:3d:40:c0:3f:
3e:7d:83:20:b6:00:10:85:89:78:84:25:2f:16:75:eb:e2:ae:
88:55:a7:de:e4:26:c9:d0:d7:ee:74:bb:76:74:f6:b4:a3:66:
4a:77:53:19:5f:f7:c3:e2:08:c4:70:e1:69:7a:f8:cd:12:bf:
05:e8:25:cb:e9:90:b8:16:b1:f2:33:83:6e:60:02:38:d4:7c:
3d:56:7a:43:90:a9:b7:87:1c:25:01:ee:35:a0:47:56:4d:1e:
a1:b7:dd:cf:60:4f:6e:68:0f:a0:24:03:7f:1c:85:08:50:c9:
e7:47:2c:71
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEa+MZdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIx
OTA2MTUzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWUwNWMwZjZmNDI1
MmM0YmNkOWE2NTFiNjA4YThmZjk0ODg0OWJiMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKnGyOrKZrRpeHUliyVKkrwzfuVQMO+asUwvhVAeH8YaGBk7
LBFPz5kg3Ae3+3sFUrVkQykdQsIdRcnQjLddv5CkL88MaytiFTosg81BsJy8r3W2
kR++sK1nVGpeZdSjqf30eVylk2flDt3HS4dOuwg66fQtjRBCHVTUszSmM8VJ2U2s
RRFPAzANEaLpGq4ctS9bjxdpo44UPZWDP6REBE87l5F3T+2wM9ygPMfcjT3HE1PQ
KaG9loqRCc3rtEm9w8hUFOqviLfzyXh6nALoLNkd/YPIbrxO4JdKdaZwo9LqNsEg
2cXp+RM+hdHMOmu+J9mCpzdxZ4uTMzDBtb8ERmMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSeBcD29CUsS82aZRtgio/5SISbsjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L25nWEE5dlFsTEV2Tm1tVWJZSXFQLVVpRW03SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBO1yAQBV8+IxPpaeDBhZvpuJ6zjJ3souk3hQ4g
xrdnchGmHRM+BfyrMInG9XbNj/Dx7ecjAw6SkjiUKrA1rmxCNp49HruHyg66ol8j
rPAGCt2lLcI27q0G68/QcYuybJVU6JWK9yYslPIdtpQPJPTZxGEqLhXu+tka4tkN
GywQnWvoozD9Duy5iIPBFT1AwD8+fYMgtgAQhYl4hCUvFnXr4q6IVafe5CbJ0Nfu
dLt2dPa0o2ZKd1MZX/fD4gjEcOFpevjNEr8F6CXL6ZC4FrHyM4NuYAI41Hw9VnpD
kKm3hxwlAe41oEdWTR6ht93PYE9uaA+gJAN/HIUIUMnnRyxx
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:20 2025 by rpki-client