Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nigqteI25TRQ2eP5ihNDxw9BAkw.roa
File: nigqteI25TRQ2eP5ihNDxw9BAkw.roa (raw, json)
Hash identifier: 3XQl5HN65RCbD0DiMbOOG9rdiSlOTJVjdWdX7ISPbLw=
Subject key identifier: 9E:28:2A:B5:E2:36:E5:34:50:D9:E3:F9:8A:13:43:C7:0F:41:02:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018793A168C388BC4AEA1784701A2093C5E1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nigqteI25TRQ2eP5ihNDxw9BAkw.roa
Signing time: Tue 18 Apr 2023 09:10:41 +0000
ROA not before: Tue 18 Apr 2023 09:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:a1:68:c3:88:bc:4a:ea:17:84:70:1a:20:93:c5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 18 09:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e282ab5e236e53450d9e3f98a1343c70f41024c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:2c:62:48:d0:09:70:55:a5:ad:d4:a2:17:
f3:2f:61:81:7b:cc:6b:0e:a1:a2:a0:f7:04:36:b6:
26:fe:15:4e:84:c1:4a:ca:99:8e:1b:3f:d7:c3:e8:
6a:2d:59:d5:c2:c3:ea:a2:26:89:2e:b3:a9:9c:9b:
22:1a:0c:87:d5:5d:9d:d8:39:69:b2:cd:2d:b6:01:
3c:36:42:03:a5:f2:8a:15:0b:02:81:97:92:46:89:
67:79:1c:e2:d7:7c:fa:d3:93:d3:5f:3b:13:43:52:
0a:0d:7e:6c:66:66:c3:61:b9:df:78:01:2a:bf:42:
51:b0:f8:d1:a5:60:9a:93:79:c4:6e:97:48:c7:df:
99:d9:3a:48:fc:8f:ea:db:18:1c:fc:fc:75:b6:ec:
ad:ba:d5:02:b9:b4:bd:10:0d:a4:12:6b:78:05:a0:
34:7c:e0:8f:78:3f:63:4e:03:57:d9:b5:ee:bb:9d:
80:5c:8a:72:f0:d4:20:5b:57:e7:5d:56:34:8d:55:
a6:0d:cd:18:3e:7a:0e:55:70:40:d8:8f:36:80:23:
a0:4b:80:d4:1f:0f:b9:26:63:74:5c:60:9a:31:75:
82:e1:41:d0:2f:04:57:a6:44:31:46:9d:ad:68:eb:
03:a1:e6:6d:4f:b9:26:2f:36:ac:96:6b:62:54:53:
29:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:28:2A:B5:E2:36:E5:34:50:D9:E3:F9:8A:13:43:C7:0F:41:02:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nigqteI25TRQ2eP5ihNDxw9BAkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:17:b0:30:1e:3d:34:61:7f:0c:9f:55:c2:7f:56:77:fe:78:
05:1a:a9:73:ce:36:b4:60:aa:b8:4c:82:a7:5c:4a:4c:16:f4:
5a:69:50:e9:6d:99:be:da:0c:38:ca:dc:48:75:3c:f1:87:d8:
3c:12:9e:7a:06:4c:12:a4:05:d4:42:33:78:56:c4:58:e0:2b:
33:6d:1a:a5:25:24:c9:53:bd:3a:e3:ba:aa:93:43:5c:3b:c8:
46:47:db:88:3d:60:9a:d7:22:dd:f5:c3:3f:a4:e8:fc:07:1f:
68:b3:3c:76:1f:30:4f:d4:8f:a1:1d:84:44:de:25:06:9f:1f:
5c:ea:b9:85:ff:e7:f9:01:87:7f:11:a8:b1:1f:90:a9:e2:9b:
40:96:e7:b4:a3:78:a0:ce:a0:1f:4e:a7:30:8b:82:b4:3a:62:
80:2f:e2:ef:69:b0:2d:56:32:b1:c4:5d:0e:09:aa:7e:a0:ca:
fa:48:a1:5d:0b:4c:fb:e6:96:0c:08:f4:bc:81:b2:6b:10:bd:
46:97:cf:eb:fe:4b:b8:5f:fe:f1:81:27:a6:6d:f0:00:2e:3c:
c7:ef:75:43:51:82:ab:16:16:c8:6d:d3:cb:16:11:a8:a6:b8:
56:62:2e:03:df:45:73:96:16:05:47:78:f1:02:2d:dc:6c:e0:
c6:0e:4a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:18 2025 by rpki-client