Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/niip2eu5Bj6UdHhDBuySSqRE7rE.roa
File: niip2eu5Bj6UdHhDBuySSqRE7rE.roa (raw, json)
Hash identifier: eh981vI0T1bkTBOpzy0IRfCLR6iWbY7eMDaHCkJSzIc=
Subject key identifier: 9E:28:A9:D9:EB:B9:06:3E:94:74:78:43:06:EC:92:4A:A4:44:EE:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F01D4EA4749CE6A41302194B5C086196
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/niip2eu5Bj6UdHhDBuySSqRE7rE.roa
Signing time: Sat 06 May 2023 08:11:05 +0000
ROA not before: Sat 06 May 2023 08:11:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f0:1d:4e:a4:74:9c:e6:a4:13:02:19:4b:5c:08:61:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 08:11:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e28a9d9ebb9063e9474784306ec924aa444eeb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:8c:8f:5f:c2:81:25:32:27:ef:50:a3:53:
1b:4c:5b:41:b3:14:f1:05:af:10:fc:39:cd:85:aa:
c4:28:a5:84:e2:59:9a:ec:35:70:34:6c:f8:5f:6d:
b1:73:e9:97:b7:44:e9:9b:19:82:fd:fe:b9:58:aa:
e3:e6:f5:c2:2c:2c:29:f4:fa:93:43:c3:77:9f:15:
fb:75:3a:a5:8c:72:41:d3:96:42:85:5c:07:1c:e7:
94:4e:6e:70:0c:be:86:d1:e1:cb:7f:74:fa:12:60:
8b:64:28:b7:d8:6b:53:5d:31:b2:7e:42:b9:23:fd:
5e:4c:ab:8f:64:62:9e:24:cc:0e:f7:28:fb:72:33:
8b:2b:e0:7c:48:35:e7:e5:bf:5c:c9:ab:a4:8d:7d:
d9:e1:8b:89:49:c2:a4:7b:e8:c5:9b:f2:39:9d:85:
d7:50:04:c8:f5:a0:e0:12:41:a4:08:8c:b7:5b:8e:
57:99:5b:f2:32:6b:40:be:07:30:08:e2:09:ec:3a:
4a:2a:b3:34:df:81:57:ae:6a:65:03:00:12:12:59:
7e:f6:7f:77:66:b2:d6:ad:ba:b3:c4:ad:22:23:db:
1a:ad:8d:c2:ae:1d:dd:a7:df:d3:fb:d3:ce:a4:3f:
d9:b8:da:3b:76:a8:2d:ec:54:54:47:aa:29:f5:6c:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:28:A9:D9:EB:B9:06:3E:94:74:78:43:06:EC:92:4A:A4:44:EE:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/niip2eu5Bj6UdHhDBuySSqRE7rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:21:13:de:4b:54:53:63:1e:c4:bf:f4:75:ed:e5:20:c0:96:
53:fa:d4:55:96:5f:6a:f1:7e:31:be:97:ce:44:8b:f8:87:2a:
f6:8c:c3:cc:f4:be:08:2f:4f:76:ed:a8:36:8b:79:d9:47:c0:
ad:7b:c5:a9:30:17:1d:6a:f0:32:61:e4:43:da:ac:39:47:56:
28:0d:83:a7:fd:13:a4:71:45:93:e7:9d:78:be:ee:2d:6c:26:
bd:59:b1:df:c7:74:25:28:d0:14:f7:54:b2:f0:62:bd:77:a7:
db:65:3b:28:f2:08:85:91:a6:a0:41:5c:26:5f:c6:0c:ac:73:
6c:91:c2:db:0a:b0:aa:e4:46:cb:25:e1:43:a4:97:ff:cb:60:
92:1b:99:52:66:7b:3f:2a:b4:cc:5e:b3:70:77:61:12:08:98:
9f:ab:3b:1d:4f:10:45:62:5f:8e:99:b2:90:b1:bd:07:13:cc:
3f:10:cf:6f:d9:97:a4:39:b7:51:38:56:49:69:80:8e:69:39:
76:e6:47:a6:7c:56:cf:76:26:c9:c3:31:b8:1f:4e:60:76:c5:
84:f6:eb:b1:28:21:6f:8b:f2:97:3e:33:f6:fd:df:ef:9a:7a:
e8:1b:66:b6:05:5b:00:c5:cb:d4:91:61:59:e1:52:2e:e6:c2:
b0:dd:59:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:46:09 2025 by rpki-client