Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nlbzlj6miwYztQxHVdLcTDWBOuQ.roa
File: nlbzlj6miwYztQxHVdLcTDWBOuQ.roa (raw, json)
Hash identifier: UfuUaLh3eJdTgGNiniEKDsc59tyfLOXLfh/9i4y+1Jw=
Subject key identifier: 9E:56:F3:96:3E:A6:8B:06:33:B5:0C:47:55:D2:DC:4C:35:81:3A:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 83A4CF5D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nlbzlj6miwYztQxHVdLcTDWBOuQ.roa
Signing time: Fri 13 May 2022 12:04:40 +0000
ROA not before: Fri 13 May 2022 12:04:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:bd4e:4278/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2208616285 (0x83a4cf5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 12:04:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e56f3963ea68b0633b50c4755d2dc4c35813ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:c6:b5:7d:4a:11:de:4a:71:9e:1b:49:b2:
46:cd:c2:1f:5c:5d:76:d8:f2:88:dd:5e:a4:c4:31:
d9:c9:60:3f:9f:8f:15:12:c9:1d:e4:df:75:f5:71:
a3:cf:2d:32:a7:da:29:32:7d:a5:61:60:a4:b5:76:
24:97:a8:13:32:9f:85:30:e5:7c:8a:4d:16:d0:2a:
1f:79:e7:cc:7e:fd:09:9a:c9:5b:5a:8d:5f:31:90:
51:6c:f6:fb:a6:6a:99:11:11:df:fe:ac:a2:7c:f5:
72:a3:6b:8a:48:02:80:79:5d:6c:65:b1:45:fd:37:
8b:d7:58:bb:ab:e4:fd:74:a5:ad:d5:e3:85:97:79:
a9:d9:9f:3f:1c:21:77:f0:82:cc:74:2e:a7:e2:27:
1e:ab:6b:5f:61:11:b4:d7:ba:a3:10:78:1d:c3:fe:
58:f1:00:57:02:64:16:70:e6:0b:7a:5b:f1:2a:bb:
1c:68:f9:6f:9c:51:c7:5c:16:a2:54:8e:d8:d0:33:
ff:0a:04:e2:5a:c6:05:ce:c0:28:bd:da:26:50:fe:
35:26:f6:46:32:c0:f8:f4:da:70:f0:7f:84:28:3a:
26:e0:6c:95:7f:26:d1:36:c0:aa:06:1a:31:78:26:
c6:e3:6c:5b:68:a8:6b:67:48:4a:74:49:f6:a9:81:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:56:F3:96:3E:A6:8B:06:33:B5:0C:47:55:D2:DC:4C:35:81:3A:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nlbzlj6miwYztQxHVdLcTDWBOuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:f6:78:42:03:fd:32:f3:8b:6a:39:41:04:e7:14:a8:25:d5:
8b:fc:fb:1a:e8:c1:38:f7:cf:bf:c7:77:65:ea:4c:10:10:44:
2a:e3:9a:7f:f6:e4:63:ec:bc:05:10:05:69:e7:1e:1c:40:fa:
78:93:aa:41:2f:05:bd:85:1e:33:60:fc:93:bf:9f:ce:4d:be:
a9:fa:d3:6e:13:a9:12:fe:db:2a:b7:0f:05:04:03:fa:bb:7a:
0b:ee:cd:0f:3a:0f:aa:4f:df:58:ac:89:88:7c:69:31:41:96:
58:b1:e5:33:ba:ae:cb:cd:e4:9f:1e:e7:f1:ce:45:07:4d:5c:
16:8d:15:99:f0:84:c1:71:c8:82:85:00:89:a5:57:09:0b:bb:
cb:17:ca:54:e0:e3:6e:e0:0d:79:c5:0b:8a:bb:ba:3a:cd:0f:
9d:9a:38:b4:fa:21:a2:d3:05:f1:44:cc:f6:6d:0c:87:3b:de:
35:47:ba:6a:6e:9a:a5:41:3c:59:89:84:bb:f9:54:83:a6:70:
46:54:66:63:e1:88:3e:58:83:6b:6a:52:ce:19:71:2a:32:f1:
e3:c5:6b:2b:98:1b:36:44:e9:20:92:4d:c1:3d:3d:e9:1c:74:
ad:56:4e:74:29:45:7a:f7:8c:70:57:f1:79:36:89:f3:50:52:
89:bf:90:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:33:53 2025 by rpki-client