Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/njhc7zcsu8U6nX2UuAN9ZLB1VKk.roa
File: njhc7zcsu8U6nX2UuAN9ZLB1VKk.roa (raw, json)
Hash identifier: CsyEUTidXM0+hwzh9eO2WjrSiIPohYq8FiR6bQWudWg=
Subject key identifier: 9E:38:5C:EF:37:2C:BB:C5:3A:9D:7D:94:B8:03:7D:64:B0:75:54:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E03CA468DD2FDDBF0E72B84B0031E5A6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/njhc7zcsu8U6nX2UuAN9ZLB1VKk.roa
Signing time: Wed 03 May 2023 06:11:23 +0000
ROA not before: Wed 03 May 2023 06:11:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:3c:a4:68:dd:2f:dd:bf:0e:72:b8:4b:00:31:e5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 06:11:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e385cef372cbbc53a9d7d94b8037d64b07554a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:61:4c:88:9c:70:66:3c:e3:e3:94:46:45:30:
0a:49:62:78:a1:69:63:1e:fe:c7:69:25:75:75:4b:
67:e5:3c:a4:59:fb:45:fa:06:1b:7f:71:5e:00:cf:
93:f4:46:1e:cd:df:f1:d6:0a:d1:50:f1:6c:78:63:
a9:26:5a:76:9e:b2:d1:1a:b6:0d:d0:22:f2:c0:fa:
4d:25:82:69:35:64:4c:7b:d3:87:18:ae:74:40:f2:
d0:b6:a9:c4:a0:b1:a0:78:98:9c:fd:50:7e:ed:9a:
d9:4a:7d:b9:76:15:17:42:3d:74:e6:30:58:40:e1:
52:13:e4:72:64:76:00:c6:03:3d:53:48:af:e7:c1:
ed:7d:4a:2a:cf:5e:e6:47:ff:e2:0f:1e:cb:7f:84:
bc:af:08:f7:ad:07:74:a2:f8:3a:90:1c:da:a8:7d:
5e:b7:e5:19:9e:06:4e:b4:53:b4:30:ab:db:5f:b4:
c6:a0:5a:d5:82:2c:0a:13:1e:59:85:2e:db:a5:1d:
4e:a2:6a:5a:7d:a4:a8:bb:ee:7a:7b:a8:11:10:29:
7f:1c:b5:e5:f0:7a:8b:3b:50:8a:f5:3e:d1:cf:9e:
54:ce:ee:9c:a9:ca:69:b3:59:39:76:67:ff:e7:5d:
dd:02:f8:86:6c:80:14:af:57:c8:83:d1:7a:46:25:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:38:5C:EF:37:2C:BB:C5:3A:9D:7D:94:B8:03:7D:64:B0:75:54:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/njhc7zcsu8U6nX2UuAN9ZLB1VKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:f9:84:b0:39:5d:72:f7:a4:7a:c0:fa:82:2d:f9:7c:8e:eb:
e3:61:0c:24:e0:d8:90:93:bc:cd:63:7a:b7:3a:04:a4:47:90:
f4:e2:1a:b2:90:87:29:cc:a6:8f:4c:8a:0f:91:8b:67:ad:76:
b6:c8:88:6a:5e:d9:9d:20:da:81:06:e6:6d:7d:98:94:31:80:
87:82:88:d9:19:16:4d:85:63:12:41:33:36:87:ee:58:d8:1f:
1f:cd:ce:ac:49:48:1e:f8:8d:09:fa:c7:3b:92:11:13:f7:f1:
5b:6b:cd:b0:a6:a9:b0:65:b5:61:be:0c:fb:0e:3e:f6:2c:75:
2e:05:1e:27:fe:a5:34:67:47:27:3a:87:9b:b5:e6:6b:50:49:
03:4c:ba:c4:e9:a2:0d:b2:63:f2:48:cb:9f:f3:9d:6a:fe:f1:
e2:2c:51:ad:61:53:b3:a4:0a:aa:26:e1:4b:4b:f1:77:a5:20:
42:46:93:a6:60:d9:b1:cc:58:31:d0:57:4f:15:f8:2e:43:da:
77:25:c4:30:01:17:f5:0d:94:b8:ea:db:84:e1:51:c2:29:7a:
0a:3a:04:45:81:91:e4:dc:60:19:59:80:eb:f5:40:1f:66:e5:
16:be:a5:1b:a7:fa:6c:54:38:28:8a:d8:77:69:af:cd:5e:8c:
b9:ba:e6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:50 2025 by rpki-client