Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nm9ZK6k0mzwJU7zEF1EIKvLCUTI.roa
File: nm9ZK6k0mzwJU7zEF1EIKvLCUTI.roa (raw, json)
Hash identifier: zYciei8HcORpmcqBJXvQFVRcep5F+m22BVBbSdfTfT0=
Subject key identifier: 9E:6F:59:2B:A9:34:9B:3C:09:53:BC:C4:17:51:08:2A:F2:C2:51:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FD96C8941A404A7C237CF63BE38DC74B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nm9ZK6k0mzwJU7zEF1EIKvLCUTI.roa
Signing time: Wed 16 Aug 2023 09:04:24 +0000
ROA not before: Wed 16 Aug 2023 09:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:fd96:a00d/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:96:c8:94:1a:40:4a:7c:23:7c:f6:3b:e3:8d:c7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 09:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e6f592ba9349b3c0953bcc41751082af2c25132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:9c:f3:1e:86:aa:52:22:13:5f:ae:0c:4b:
c5:ae:69:47:25:e2:bc:13:e9:30:e6:23:b8:78:2b:
0e:a9:9b:4e:b6:90:de:39:1b:cc:02:f2:b3:02:39:
93:01:cb:89:c9:45:a4:e6:d0:54:a6:34:d5:11:1f:
83:1b:cf:a2:d7:b7:2a:e3:04:4b:30:2b:03:4a:c4:
b6:bc:7c:62:33:d6:05:8a:4c:0a:88:3f:a3:f3:4c:
77:37:e3:6b:38:02:00:6c:6a:53:71:e0:f5:73:ba:
ad:c1:60:fa:1d:cf:5a:7a:d6:3d:c9:99:eb:bf:5a:
10:60:0d:2c:7b:0b:e0:a0:d0:ff:a5:81:11:84:81:
49:06:4a:3b:e5:9e:9a:e1:6a:06:fb:56:a3:e5:55:
60:44:27:61:68:9c:05:8c:db:f2:6f:71:d9:24:05:
b3:25:9f:4a:96:31:f9:48:92:ce:53:5d:09:39:ec:
3f:33:a5:28:c5:d0:59:ad:40:47:d0:f1:4e:4c:0b:
c4:e1:d2:3d:d3:55:57:36:dd:c6:73:95:5d:ca:14:
a8:da:bc:6e:18:c8:63:62:48:2b:bf:10:f1:3e:eb:
d3:ec:d7:a0:67:e2:eb:31:22:41:ba:45:c1:fc:9d:
59:f5:77:3f:c6:c2:f2:b1:a3:a9:36:05:4d:a5:7b:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6F:59:2B:A9:34:9B:3C:09:53:BC:C4:17:51:08:2A:F2:C2:51:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nm9ZK6k0mzwJU7zEF1EIKvLCUTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:de:42:26:b0:d8:e8:ae:bf:6a:4e:02:3b:83:76:3b:99:22:
ff:11:8c:97:5a:67:78:4f:ee:89:2e:52:89:36:f8:ee:a6:2a:
96:00:46:56:22:eb:23:94:99:70:45:7d:ca:e1:38:50:ee:f7:
86:b0:4e:7d:94:35:99:19:46:fb:7e:a8:58:d0:17:37:9b:43:
a6:4d:36:f5:e4:74:bd:50:0c:40:3d:63:85:ae:e7:2d:a4:49:
63:fe:52:ca:6e:2a:67:f2:5c:46:ad:5e:37:25:0f:00:ea:2b:
08:ef:61:d8:01:7d:0b:98:c5:1f:27:a7:44:c7:d7:6f:50:25:
d4:e0:9a:04:82:15:c9:74:0b:62:ee:61:0c:f8:5f:95:41:1d:
a3:67:44:5b:47:70:c8:9a:07:99:18:3e:bd:7f:f0:06:b7:c3:
4a:ee:a1:97:d2:be:75:3a:b1:ab:25:29:a4:08:69:25:58:91:
ad:72:54:7f:e6:a8:1d:16:9e:dc:d0:5b:09:7f:02:e3:cf:d2:
16:64:b4:02:c8:a8:00:94:48:ae:e5:8c:b3:c7:23:2c:44:85:
72:4a:4c:07:8f:02:c3:b8:af:49:d7:c3:04:4f:e9:10:21:41:
25:b4:7b:75:2b:91:4a:46:2a:d2:a6:06:f3:15:29:db:65:72:
6e:96:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:28:14 2025 by rpki-client