Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/niWp9JaHbHDVE5TBkUSONEGrs3o.roa
File: niWp9JaHbHDVE5TBkUSONEGrs3o.roa (raw, json)
Hash identifier: /ZD7ZOMAchozB+B2mJdC7cniVs0Mq8K6o5FtxJI+Yds=
Subject key identifier: 9E:25:A9:F4:96:87:6C:70:D5:13:94:C1:91:44:8E:34:41:AB:B3:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7289F7C0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/niWp9JaHbHDVE5TBkUSONEGrs3o.roa
Signing time: Mon 14 Mar 2022 21:10:47 +0000
ROA not before: Mon 14 Mar 2022 21:10:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1921644480 (0x7289f7c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 21:10:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e25a9f496876c70d51394c191448e3441abb37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6a:26:95:e0:e5:2b:31:17:4e:84:ea:50:13:
9e:c9:1d:2b:04:3a:49:75:40:b6:cd:84:88:9d:7a:
97:45:54:6b:11:70:69:8b:1a:c8:da:3f:32:59:94:
95:e1:f0:c9:a1:af:2f:53:99:5c:7e:4d:c4:8e:c7:
c0:e1:1c:58:d6:c3:cf:5e:8e:76:32:8c:13:5e:e6:
35:f1:22:9e:73:7f:d0:1e:58:89:f4:c9:39:b5:bc:
dd:3c:ac:60:3f:a3:0f:69:22:ff:e8:7b:af:f7:79:
7f:28:1b:4f:52:57:bc:90:08:19:d7:b5:30:64:ec:
62:d1:e4:a0:85:0b:e8:7a:78:98:53:54:21:8a:b4:
77:26:a9:c6:e0:bd:8a:f3:48:d5:de:c6:e2:4e:ca:
9c:63:67:36:df:55:cf:8b:7d:8c:0c:41:ce:e6:09:
0f:81:6b:f8:f6:83:60:e7:10:ce:6f:9e:5b:56:1c:
f2:dd:7f:b2:fb:9a:c3:26:4b:b6:98:ec:08:08:c7:
9c:4c:9c:1a:f4:2a:0b:67:a0:4f:4a:7e:53:39:dc:
cb:48:5c:a5:22:87:ad:a8:c5:4d:0f:dd:7d:8d:80:
29:5a:c7:a1:73:f2:b9:6e:e7:55:27:e1:48:4a:15:
71:74:ee:c2:9d:c7:1a:2d:45:40:bb:17:fa:7b:b1:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:25:A9:F4:96:87:6C:70:D5:13:94:C1:91:44:8E:34:41:AB:B3:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/niWp9JaHbHDVE5TBkUSONEGrs3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:b9:74:46:5f:63:65:33:cb:1f:d2:9a:9a:a3:93:43:32:52:
3b:35:01:f7:d7:5d:e1:ae:00:85:50:6d:80:d7:a8:73:55:e3:
12:da:5d:af:fe:9b:96:d3:c2:02:fe:85:53:b9:b1:d9:36:7d:
22:ed:26:3c:5c:79:8f:81:d1:49:7a:e3:31:b8:65:b4:6b:b9:
14:ea:c2:3d:cb:f8:c9:ba:78:8e:e4:52:c3:69:99:16:86:cf:
2c:b1:47:85:08:3c:b9:69:34:b6:ee:54:c6:64:97:f2:a2:1e:
d2:c4:f5:04:05:de:8d:8a:63:f3:1f:9e:f3:62:91:70:04:c4:
2a:7c:ed:15:a7:1b:13:84:f7:2e:a7:49:78:43:83:c4:aa:2f:
ba:bc:24:00:6c:94:c8:c7:21:69:d6:6f:27:a9:0d:2a:fa:d3:
4a:d9:3b:44:62:52:9e:f9:2c:ea:94:f2:97:3b:11:a5:2f:47:
9a:10:8c:0f:28:04:2f:db:cd:ef:d8:17:72:d4:bc:3b:14:7b:
c2:6f:f8:f9:45:67:1c:55:a5:35:d9:f1:58:ac:de:18:3d:6b:
00:8b:f5:6e:0a:40:1c:09:2e:ca:03:8f:02:82:eb:cd:c3:18:
5d:ca:d9:a6:56:b9:07:8d:83:3f:c1:95:1f:91:fd:00:12:28:
d6:78:74:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:24:20 2025 by rpki-client