Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nle0E9VMC1BhdS55ZbYMkC8sGxg.roa
File: nle0E9VMC1BhdS55ZbYMkC8sGxg.roa (raw, json)
Hash identifier: 52V1GHYCobHCnlXjvQ+jrSfhPGXOzEv4tCyO9s18ycw=
Subject key identifier: 9E:57:B4:13:D5:4C:0B:50:61:75:2E:79:65:B6:0C:90:2F:2C:1B:18
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 925576A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nle0E9VMC1BhdS55ZbYMkC8sGxg.roa
Signing time: Mon 04 Jul 2022 14:12:26 +0000
ROA not before: Mon 04 Jul 2022 14:12:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2455074466 (0x925576a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 4 14:12:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e57b413d54c0b5061752e7965b60c902f2c1b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:95:89:23:47:d8:83:1b:d9:0d:db:d6:56:
f9:24:08:bb:2c:7a:2c:b3:87:b5:b9:f4:b2:a8:5d:
d7:d4:f3:a1:3f:75:1e:52:15:7d:c1:a2:71:b8:45:
86:92:97:90:10:ad:e6:09:d6:a7:fc:2c:67:e5:c2:
91:f7:3b:03:45:60:97:02:f7:e2:b3:99:94:8e:93:
56:1e:b1:27:60:aa:c0:47:55:1a:8f:13:fe:b4:a8:
6f:51:01:d1:8a:af:22:6a:d5:75:42:96:27:1a:46:
8f:2d:ae:2c:0f:ff:1a:b4:27:f7:1e:df:ad:8a:64:
04:51:94:4c:c7:b0:e5:10:21:e5:3c:00:47:a6:f7:
7d:df:67:03:ed:20:b3:e5:91:b9:5b:bf:d6:2e:cc:
05:12:b6:72:2a:f3:19:7a:40:fd:d5:d1:3d:9c:0d:
d6:87:a9:0e:0c:34:f4:ff:e2:ca:2a:ec:e5:50:4b:
63:7b:93:af:8c:2d:4b:ae:a2:d2:b5:30:38:7e:f5:
1f:2f:51:41:4e:55:6c:ff:6a:70:f5:86:ca:c9:6b:
9d:8f:9b:80:7a:57:f1:d8:8f:34:5a:ae:d5:3a:0e:
6c:24:17:cb:6f:63:35:31:e0:bb:30:ea:d9:3f:8b:
25:f1:72:33:82:99:66:81:c5:f3:9c:02:d0:11:8e:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:57:B4:13:D5:4C:0B:50:61:75:2E:79:65:B6:0C:90:2F:2C:1B:18
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nle0E9VMC1BhdS55ZbYMkC8sGxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:93:e2:1f:da:9a:cd:ac:5e:37:0e:fc:9a:41:7b:89:f5:5e:
ff:76:8f:44:28:dd:a6:7c:fe:4b:9a:83:d4:50:7d:79:8a:ad:
c8:fd:79:e1:77:3c:c6:df:7b:45:36:eb:db:58:c8:9f:50:58:
06:9a:ab:35:1c:00:39:48:fb:0e:4d:a7:fb:0d:4f:91:88:31:
1a:25:4e:4c:35:80:6e:1d:09:17:5a:98:98:66:31:f8:eb:69:
69:30:d5:08:9f:0c:e3:e6:2b:57:e7:6c:60:0f:5c:bb:4d:07:
09:a8:13:89:c9:74:60:59:69:c0:5f:85:74:62:e9:d6:c9:bf:
54:5d:01:bd:61:b0:00:6e:3c:ad:17:01:69:e2:1c:05:fa:f5:
0d:63:72:f8:61:0d:39:f5:87:7c:c0:32:66:b6:59:16:db:ab:
7d:f7:87:48:18:b7:8c:0f:2c:d5:4a:74:d1:05:e8:29:f3:95:
63:3d:3a:0a:c8:69:85:47:bc:ed:04:0e:b6:96:2f:bc:93:38:
4e:21:60:b5:8c:3e:3b:97:33:bd:46:52:0f:03:6d:b6:b6:93:
5e:ff:87:46:2f:15:39:4c:a4:05:3f:ce:db:52:ac:06:6e:e4:
ee:e2:30:c5:86:2b:ab:fb:a6:1f:36:df:ef:aa:55:b9:67:46:
01:17:98:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:33:38 2025 by rpki-client