Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nhKgGPScDxt5z246w3UhS__A20Q.roa
File: nhKgGPScDxt5z246w3UhS__A20Q.roa (raw, json)
Hash identifier: +3iDNt7XiChhjIqcfrQjLceIKLhNNMC11PQW096Yj+U=
Subject key identifier: 9E:12:A0:18:F4:9C:0F:1B:79:CF:6E:3A:C3:75:21:4B:FF:C0:DB:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7D429D69
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nhKgGPScDxt5z246w3UhS__A20Q.roa
Signing time: Thu 21 Apr 2022 13:12:43 +0000
ROA not before: Thu 21 Apr 2022 13:12:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2101517673 (0x7d429d69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 21 13:12:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e12a018f49c0f1b79cf6e3ac375214bffc0db44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e2:ca:11:2c:d1:7e:ea:ad:00:a0:55:6f:ea:
42:53:de:a8:9b:76:0c:28:91:b5:ec:8a:31:20:68:
dc:bc:fc:2a:9c:3a:d3:6f:4e:7a:43:43:7a:2a:1c:
2f:24:39:cd:b1:c4:2d:6d:c3:d6:c8:76:9a:fc:6d:
74:73:05:d3:e6:c2:22:b0:20:b8:d8:cb:cd:49:68:
a9:06:a8:56:2a:49:4f:55:58:e6:ba:25:7b:24:5d:
c1:3d:34:cc:c9:65:9a:14:2a:07:62:34:b1:37:af:
66:51:26:7d:b3:a6:a7:4b:2b:a9:3a:d1:11:92:57:
5d:27:10:4a:3b:ec:2d:3b:13:94:b4:0e:f0:5f:3a:
6b:6b:e2:60:3b:92:17:a8:72:e4:c0:f2:b6:0e:1c:
5b:8d:e2:d0:e1:2f:06:b5:ce:51:13:42:ac:d1:73:
a4:07:13:81:d1:b4:1a:8d:91:47:2d:b9:e4:88:1c:
9b:24:64:01:4f:34:c2:a9:6d:53:48:4e:cc:b8:61:
22:58:02:40:f1:64:ec:1a:a2:d1:96:7c:6d:19:54:
bf:9d:fa:90:05:52:05:7b:93:60:4c:d4:81:84:87:
80:c3:e3:de:e0:22:36:e3:85:f1:b1:47:76:e1:cd:
71:d0:54:bb:bd:dc:75:51:73:52:eb:01:7b:8c:e5:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:12:A0:18:F4:9C:0F:1B:79:CF:6E:3A:C3:75:21:4B:FF:C0:DB:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nhKgGPScDxt5z246w3UhS__A20Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:57:65:80:5e:8a:2b:e5:67:9a:a8:f7:6f:f1:30:db:07:51:
37:7f:63:3a:da:5c:6d:96:ff:4c:e0:79:fd:6b:1f:80:31:ee:
83:03:ea:bd:cb:ae:5d:d5:05:2e:27:17:ac:6a:3c:6f:c3:72:
51:f7:37:c6:6f:dc:1a:81:33:74:78:f6:a9:46:2c:a7:dc:5e:
2e:d2:9d:33:36:e6:44:97:f7:a7:7b:57:9d:a5:a2:57:35:6b:
c2:bb:20:02:13:f2:6f:f9:b1:3f:ee:21:e3:15:96:a5:4e:bf:
31:b9:8f:e4:c7:9d:a6:8b:ba:a1:50:28:66:f2:96:90:c7:c5:
9e:46:45:1b:38:4d:61:49:87:ae:53:12:f2:c8:e4:a3:5f:de:
96:25:3a:10:d4:6d:f6:24:58:0d:33:e5:fb:56:d7:56:30:99:
fb:a1:11:9b:73:ee:30:0e:ff:bc:0a:c5:5f:de:e3:34:a9:35:
d9:df:7e:ed:a5:f7:e3:f7:8a:d6:c2:00:e7:3f:51:d8:53:12:
cb:fe:e9:60:d3:bd:eb:29:2f:25:32:a3:b6:ee:e5:9e:27:84:
a8:3d:6d:60:13:a6:e8:5f:cc:6a:dd:94:85:1c:7d:af:83:5b:
b2:0f:89:7d:13:19:09:d5:6a:27:c2:5f:c6:d0:6f:49:dc:98:
3a:80:70:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:21 2025 by rpki-client