Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nj5em9RoYWDIY2C6EhxJxy3Of8A.roa
File: nj5em9RoYWDIY2C6EhxJxy3Of8A.roa (raw, json)
Hash identifier: V/jtrpvqJzHiPCD/rtv1y7NUqPC36ST2WL3hH2bcF4w=
Subject key identifier: 9E:3E:5E:9B:D4:68:61:60:C8:63:60:BA:12:1C:49:C7:2D:CE:7F:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018848112B7B945B9F2D6F5653816D80E1F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nj5em9RoYWDIY2C6EhxJxy3Of8A.roa
Signing time: Tue 23 May 2023 10:04:24 +0000
ROA not before: Tue 23 May 2023 10:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:188:4811:226a/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:11:2b:7b:94:5b:9f:2d:6f:56:53:81:6d:80:e1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 10:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e3e5e9bd4686160c86360ba121c49c72dce7fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:75:7a:bd:52:7f:8e:9a:68:c4:37:1d:7f:ac:
8c:49:ad:16:85:e5:70:40:3a:c1:fd:1a:7e:59:04:
86:dd:10:e6:e2:9f:b6:ce:c6:b5:0a:85:57:68:35:
37:9d:d1:b5:7c:ac:15:23:db:db:e6:6d:7a:26:eb:
e3:ec:11:17:64:68:bd:20:7b:78:0e:07:cf:a1:19:
8f:35:93:1b:3d:49:c3:25:03:ce:b4:68:01:21:7d:
54:f1:b3:5f:06:b7:81:40:98:48:0c:c4:2b:97:a2:
89:9c:24:c3:49:79:3e:10:89:ec:e8:d2:7f:06:01:
47:aa:67:e8:99:3e:80:a0:7d:17:75:ad:11:cd:83:
fe:15:d3:a6:a4:fe:a1:c1:3c:ce:58:f3:e5:97:96:
9c:9d:e7:22:dd:79:3b:42:57:92:d1:40:fd:b6:56:
0f:48:9e:d4:20:ef:68:d2:d1:58:50:36:01:32:ae:
12:b0:b1:87:8e:d8:d8:23:d1:26:0f:f5:e8:a4:c6:
47:3e:32:c6:4f:be:96:7c:3d:c2:34:93:7b:67:e9:
d1:52:30:6f:7a:18:dc:db:36:69:f9:15:fb:a5:6c:
29:d8:31:fc:d6:5d:a2:a6:6d:e1:d0:ee:25:cb:fb:
b5:23:a9:79:3c:0c:44:fc:dc:44:8a:01:ce:58:9f:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3E:5E:9B:D4:68:61:60:C8:63:60:BA:12:1C:49:C7:2D:CE:7F:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nj5em9RoYWDIY2C6EhxJxy3Of8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:40:19:94:a4:5f:5e:c5:34:f1:4f:bd:9f:ef:1d:39:40:bc:
07:77:b0:73:b4:a2:51:5a:97:8b:33:39:cf:d3:3b:f7:21:39:
40:a3:cd:fd:58:77:b9:e9:27:ef:89:d6:4f:c5:c4:ff:9c:a4:
e2:33:00:c9:84:bc:3f:e1:63:e6:72:1c:e6:e4:ec:20:d5:ff:
b5:0a:14:76:c5:54:d2:e5:69:57:ab:f3:5b:d5:c7:29:a0:d6:
a3:a0:5f:b7:94:04:44:2c:f2:55:f4:c0:e7:81:18:6b:2f:18:
e1:f2:e9:82:e2:8d:d9:8d:5b:40:e3:ce:78:c1:02:bc:b3:27:
87:8f:09:f7:82:13:d4:51:c3:65:91:a3:e3:28:dc:14:74:af:
8a:ff:0e:70:12:f2:88:ca:e3:7f:ec:6d:cc:e2:33:59:77:d1:
d2:81:ef:3f:d4:56:d0:03:07:62:2b:99:03:60:1c:cc:ef:42:
8f:e4:34:53:62:1e:b8:15:0e:53:99:0b:d0:08:74:43:30:29:
81:a8:eb:54:19:da:f7:66:e4:5c:a0:40:86:f1:43:d7:57:50:
37:70:42:e8:c5:1a:4a:7a:3d:48:42:c7:d3:9b:45:9b:62:74:
d9:a4:c6:f1:e9:bf:ba:15:f1:80:c2:fd:e3:a7:d4:23:4a:99:
92:16:7e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:34:19 2025 by rpki-client