Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nkeBCJvS60fVJQS4Ti-6FIViL7U.roa
File: nkeBCJvS60fVJQS4Ti-6FIViL7U.roa (raw, json)
Hash identifier: dcRxgMyjOHzlLecxBQI8djlaSlGACDYGeun0cxtWsQo=
Subject key identifier: 9E:47:81:08:9B:D2:EB:47:D5:25:04:B8:4E:2F:BA:14:85:62:2F:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018953DC4720F8A7D988022F98E2129FB672
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nkeBCJvS60fVJQS4Ti-6FIViL7U.roa
Signing time: Fri 14 Jul 2023 10:04:52 +0000
ROA not before: Fri 14 Jul 2023 10:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:189:53db:c1a0/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:53:dc:47:20:f8:a7:d9:88:02:2f:98:e2:12:9f:b6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 10:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e4781089bd2eb47d52504b84e2fba1485622fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:e4:e7:6f:78:b0:8c:1c:c0:e2:f8:be:15:
9b:6d:03:13:40:4b:73:3f:f4:31:fc:8a:77:64:6b:
6c:eb:cd:c5:4d:2a:1f:a0:f5:c4:8c:c6:cd:3d:18:
77:21:ef:e7:ab:ce:1b:0f:8d:28:a3:a4:17:d9:d7:
47:46:73:81:2e:bd:5e:80:b9:b8:db:00:9d:25:39:
ad:be:80:43:66:ae:64:58:09:6e:0c:c7:1a:d6:2c:
cb:fe:f3:50:2a:ec:94:54:b3:56:23:15:9c:cd:a5:
29:18:55:f6:43:ce:bf:69:6b:ee:40:ff:24:da:1e:
11:df:4d:e1:1c:f4:7d:83:c5:9b:1a:2a:14:c7:cc:
3a:48:7e:49:74:4b:2b:b1:fc:dc:4a:09:87:81:58:
b1:c5:0c:88:c8:67:12:9f:c0:09:46:09:53:10:15:
6b:b0:fb:70:a1:92:2a:84:21:e3:a4:64:f6:71:e1:
fb:f9:10:a2:72:43:9c:63:7e:a8:ed:cc:ec:56:57:
19:75:d1:15:9d:8d:ff:cc:a5:83:7d:37:03:5d:ed:
94:23:f3:13:26:a4:f9:24:a7:ce:97:6a:ed:eb:1b:
61:6c:f9:11:2a:59:ff:63:02:6a:be:63:a9:90:f2:
b9:07:d6:3d:4c:5c:8b:25:29:3a:90:1e:06:2a:c2:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:47:81:08:9B:D2:EB:47:D5:25:04:B8:4E:2F:BA:14:85:62:2F:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nkeBCJvS60fVJQS4Ti-6FIViL7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:b3:fd:21:e3:82:c7:24:79:1b:00:c5:98:25:12:51:42:47:
b0:d0:58:12:d8:47:a6:96:b8:7b:51:03:2d:bf:4c:88:5b:02:
b2:a9:bd:d2:5d:9a:2a:06:3f:98:49:93:59:56:e6:27:1a:d0:
73:56:fb:87:6a:21:78:d7:2e:d2:b0:d7:43:d9:d5:23:d9:b9:
08:04:11:de:fa:95:6c:80:88:d1:84:f2:88:dd:46:9c:47:56:
bb:31:a3:0c:59:52:ec:2b:71:0b:a6:f1:47:ae:af:01:d3:6d:
7e:f6:50:63:17:4f:74:8a:5d:fc:8c:c4:7c:34:b2:fb:8a:c7:
89:4c:4e:a7:18:99:a7:7c:42:45:2d:9a:65:86:cf:85:2a:1d:
ec:02:2d:fc:c3:2d:5a:a5:7e:25:24:b5:ec:cc:56:b8:d4:42:
17:ce:9a:bc:b1:b3:a1:45:89:0b:8a:57:48:11:70:01:44:ba:
bb:51:28:e8:bc:7c:34:d0:de:ee:cd:65:e5:95:7b:db:30:9c:
9e:39:d8:37:a9:72:6c:bd:8f:ae:f8:3f:13:36:a4:81:50:fc:
94:8f:d8:e4:5f:b8:b3:f4:2b:77:2b:b4:81:ab:05:77:b7:32:
df:00:d9:ad:bd:2e:4d:60:08:2d:68:6e:95:9f:bf:bc:7c:0a:
af:fa:49:6a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlT3Ecg+KfZiAIvmOISn7ZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE0MTAwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTQ3ODEwODliZDJlYjQ3ZDUyNTA0Yjg0ZTJmYmExNDg1NjIyZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDHk5294sIwcwOL4vhWbbQMTQEtz
P/Qx/Ip3ZGts683FTSofoPXEjMbNPRh3Ie/nq84bD40oo6QX2ddHRnOBLr1egLm4
2wCdJTmtvoBDZq5kWAluDMca1izL/vNQKuyUVLNWIxWczaUpGFX2Q86/aWvuQP8k
2h4R303hHPR9g8WbGioUx8w6SH5JdEsrsfzcSgmHgVixxQyIyGcSn8AJRglTEBVr
sPtwoZIqhCHjpGT2ceH7+RCickOcY36o7czsVlcZddEVnY3/zKWDfTcDXe2UI/MT
JqT5JKfOl2rt6xthbPkRKln/YwJqvmOpkPK5B9Y9TFyLJSk6kB4GKsK+owIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ5HgQib0utH1SUEuE4vuhSFYi+1MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbmtlQkNKdlM2MGZWSlFTNFRpLTZGSVZpTDdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACaz/SHjgsckeRsAxZgl
ElFCR7DQWBLYR6aWuHtRAy2/TIhbArKpvdJdmioGP5hJk1lW5ica0HNW+4dqIXjX
LtKw10PZ1SPZuQgEEd76lWyAiNGE8ojdRpxHVrsxowxZUuwrcQum8UeurwHTbX72
UGMXT3SKXfyMxHw0svuKx4lMTqcYmad8QkUtmmWGz4UqHewCLfzDLVqlfiUktezM
VrjUQhfOmryxs6FFiQuKV0gRcAFEurtRKOi8fDTQ3u7NZeWVe9swnJ452Depcmy9
j674PxM2pIFQ/JSP2ORfuLP0K3crtIGrBXe3Mt8A2a29Lk1gCC1obpWfv7x8Cq/6
SWo=
-----END CERTIFICATE-----
Generated at Thu May 1 11:05:08 2025 by rpki-client