Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nkI8OziO_gQbs2IDrfydhcR2xzo.roa
File: nkI8OziO_gQbs2IDrfydhcR2xzo.roa (raw, json)
Hash identifier: UjKonqi7vmpr3/0ha3kUplm9tiQSN7JcrZM3mN+qPRw=
Subject key identifier: 9E:42:3C:3B:38:8E:FE:04:1B:B3:62:03:AD:FC:9D:85:C4:76:C7:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F0C4FE058BE26116D62BD5F27DD549A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nkI8OziO_gQbs2IDrfydhcR2xzo.roa
Signing time: Fri 17 Mar 2023 18:11:27 +0000
ROA not before: Fri 17 Mar 2023 18:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f0:c4:fe:05:8b:e2:61:16:d6:2b:d5:f2:7d:d5:49:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 18:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e423c3b388efe041bb36203adfc9d85c476c73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b1:2a:6d:06:7e:97:93:72:9e:e8:05:b6:c2:
04:3e:ae:8a:94:be:93:bb:f8:d7:99:42:77:c1:90:
8e:7f:59:39:ca:18:32:92:89:5c:98:4b:44:e8:ba:
ad:4c:b2:6a:67:b7:bc:94:7e:ce:06:9f:76:64:d0:
ba:1d:dd:9c:43:e1:d1:06:a4:14:b0:c3:8b:cd:53:
36:fe:a7:d0:b8:c5:25:69:d0:bb:ee:f0:d9:bc:cc:
31:8c:99:c8:2f:4f:b6:f4:eb:83:d3:69:7f:2c:0a:
0f:2f:29:90:e7:57:4b:2c:82:05:97:97:de:a1:a6:
7a:59:79:b6:60:92:89:25:57:b0:3a:d5:4b:e1:7c:
d9:74:52:8a:60:ea:20:39:88:6a:09:26:32:d6:2e:
b8:29:8f:8c:55:6e:55:a7:ec:74:56:95:bf:ae:c0:
c2:78:14:73:ec:4c:12:e9:1d:fb:30:39:cb:f7:9c:
c5:5d:e6:16:aa:97:1a:fa:bf:ff:92:a4:c7:e5:93:
79:92:ce:4b:bc:e0:65:e7:6f:9a:52:e9:67:cf:e6:
64:9a:ac:73:42:dc:4a:6e:f6:6b:5a:d1:cd:b8:b1:
85:e2:15:bf:c6:66:6f:ae:b0:0b:c1:ef:86:bc:2c:
a2:75:53:0a:05:0a:dc:89:f3:f3:9c:19:5c:93:8c:
68:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:42:3C:3B:38:8E:FE:04:1B:B3:62:03:AD:FC:9D:85:C4:76:C7:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nkI8OziO_gQbs2IDrfydhcR2xzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:55:bb:bf:0d:54:d0:d9:41:21:b5:ea:1f:b0:74:f2:10:3c:
5e:8e:a7:29:6a:ce:54:4b:f2:34:9f:30:a4:0e:5a:77:e6:bb:
7a:f9:97:b8:aa:43:f0:43:6e:b7:df:99:ac:4b:a1:c7:d1:30:
cc:bd:ea:7f:2b:b3:3c:9e:cf:fa:4c:d1:77:d3:a0:b8:44:e3:
94:d2:be:e6:de:b0:70:8f:09:b6:47:e8:04:45:be:fa:00:4e:
9a:bf:10:28:6e:29:34:09:7f:28:d3:c0:f3:35:43:28:d1:95:
8a:73:4c:c3:d2:2f:29:4f:69:07:7b:fb:cd:85:f5:d3:19:7d:
ef:79:bd:82:68:a5:67:c7:c9:19:b2:d9:57:01:15:96:3e:ba:
9b:0d:c8:82:c9:ac:b4:7d:03:63:de:99:b5:fc:82:d9:5b:79:
da:26:bf:5a:8c:5b:6f:c2:44:e0:20:cd:04:90:9e:ea:e9:d3:
70:d3:8d:50:f6:76:1f:d0:b6:93:6c:ad:4b:fa:16:e7:46:e8:
36:e8:06:9a:1c:46:c6:28:4a:3d:9c:8b:f3:28:57:9e:50:64:
87:7d:35:93:45:e8:11:5f:c2:52:c0:76:28:57:4a:66:29:19:
ba:ae:f1:0a:a6:95:03:27:3c:e8:cd:a7:a3:62:b4:6b:3d:3a:
d5:41:c6:13
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbwxP4Fi+JhFtYr1fJ91UmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE3MTgxMTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTQyM2MzYjM4OGVmZTA0MWJiMzYyMDNhZGZjOWQ4NWM0NzZjNzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLEqbQZ+l5NynugFtsIEPq6KlL6T
u/jXmUJ3wZCOf1k5yhgykolcmEtE6LqtTLJqZ7e8lH7OBp92ZNC6Hd2cQ+HRBqQU
sMOLzVM2/qfQuMUladC77vDZvMwxjJnIL0+29OuD02l/LAoPLymQ51dLLIIFl5fe
oaZ6WXm2YJKJJVewOtVL4XzZdFKKYOogOYhqCSYy1i64KY+MVW5Vp+x0VpW/rsDC
eBRz7EwS6R37MDnL95zFXeYWqpca+r//kqTH5ZN5ks5LvOBl52+aUulnz+Zkmqxz
QtxKbvZrWtHNuLGF4hW/xmZvrrALwe+GvCyidVMKBQrcifPznBlck4xoVQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ5CPDs4jv4EG7NiA638nYXEdsc6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbmtJOE96aU9fZ1FiczJJRHJmeWRoY1IyeHpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAtVu78NVNDZQSG16h+w
dPIQPF6OpylqzlRL8jSfMKQOWnfmu3r5l7iqQ/BDbrffmaxLocfRMMy96n8rszye
z/pM0XfToLhE45TSvubesHCPCbZH6ARFvvoATpq/EChuKTQJfyjTwPM1QyjRlYpz
TMPSLylPaQd7+82F9dMZfe95vYJopWfHyRmy2VcBFZY+upsNyILJrLR9A2PembX8
gtlbedomv1qMW2/CROAgzQSQnurp03DTjVD2dh/QtpNsrUv6FudG6DboBpocRsYo
Sj2ci/MoV55QZId9NZNF6BFfwlLAdihXSmYpGbqu8QqmlQMnPOjNp6NitGs9OtVB
xhM=
-----END CERTIFICATE-----
Generated at Sat May 3 07:44:17 2025 by rpki-client