Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nn99Y7-vF-ucrTGSF30TXCKwENw.roa
File: nn99Y7-vF-ucrTGSF30TXCKwENw.roa (raw, json)
Hash identifier: FIoentwM8IsCqe3EZtq0xl65KezobZhlSa+VOraf/k4=
Subject key identifier: 9E:7F:7D:63:BF:AF:17:EB:9C:AD:31:92:17:7D:13:5C:22:B0:10:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DBB666EDFC7E2750BD8DD9FD70EBC071
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nn99Y7-vF-ucrTGSF30TXCKwENw.roa
Signing time: Wed 21 Jun 2023 02:09:04 +0000
ROA not before: Wed 21 Jun 2023 02:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:db:b6:66:ed:fc:7e:27:50:bd:8d:d9:fd:70:eb:c0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 02:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e7f7d63bfaf17eb9cad3192177d135c22b010dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:4a:47:cf:ce:4c:a4:d3:55:6e:8f:18:ae:
f3:e8:f7:34:04:da:d5:7c:4f:92:1f:6c:05:25:a0:
3e:9e:ff:d2:0f:a4:5a:3e:43:6e:bb:20:43:21:b7:
56:b5:b5:4f:c6:df:03:98:58:17:eb:f7:ea:d0:01:
5e:b6:89:53:14:f5:08:48:b8:37:eb:91:5f:8c:cb:
94:7a:24:fe:c7:52:13:94:0c:8b:c9:8b:b3:5e:b3:
23:08:d8:d6:15:16:e1:b0:8f:86:d7:23:78:78:10:
56:a3:ec:2a:9d:d8:9e:1b:93:a1:93:64:6d:97:0b:
71:82:fe:c6:b0:1e:40:05:5a:5d:b2:ba:42:47:59:
9b:d0:03:24:fc:fb:5e:6f:4f:86:1e:b6:ff:19:31:
d5:f6:b6:7c:3c:ac:49:ec:3c:63:94:fc:3f:a9:9a:
32:e1:25:2b:99:54:24:98:08:db:2b:5c:af:75:e9:
a2:b5:64:de:b8:52:59:23:53:09:31:4e:c6:33:9a:
79:b1:32:2d:ea:c0:2f:d2:3c:cb:82:df:36:5b:8d:
bc:b0:5f:fd:16:d2:b4:72:33:bf:e3:28:f5:b4:c8:
c9:9c:18:89:48:55:a3:ff:28:bd:a5:9c:32:a9:f4:
83:22:3c:a2:6d:b5:22:73:29:92:a5:d3:99:3f:68:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7F:7D:63:BF:AF:17:EB:9C:AD:31:92:17:7D:13:5C:22:B0:10:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nn99Y7-vF-ucrTGSF30TXCKwENw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:98:bc:ff:a8:98:28:0c:61:54:ff:ba:8b:b5:0e:00:6b:23:
5f:a4:72:5b:41:66:b8:e0:bd:e1:f4:fa:77:de:03:80:c4:ff:
8e:02:dd:a1:a9:ad:9c:a4:5b:2a:f0:97:fd:bb:5c:f1:05:9e:
82:d5:aa:a7:be:c0:8f:4f:9f:67:34:4a:81:d3:3a:0e:3b:94:
43:04:50:6c:cf:ac:1a:3b:dd:e2:58:6e:13:d9:5f:10:e6:4a:
e8:4e:91:a7:96:a4:2f:c1:84:5f:e9:9a:23:84:3c:7b:b4:df:
58:27:77:51:b0:29:1f:9a:4a:19:35:53:12:f7:93:49:17:eb:
17:98:5b:d7:77:2f:be:58:cb:31:c6:95:22:09:06:e9:87:4b:
46:7e:87:43:6b:b3:61:40:86:e7:53:0b:47:cb:81:55:6d:20:
52:dd:15:e8:b6:b4:b6:a1:fa:4e:80:18:bd:d3:96:1d:0d:d9:
89:da:d0:a0:08:98:72:93:73:ac:a8:81:e3:0f:17:3a:ad:80:
58:fb:a7:ab:1c:e9:29:a6:9d:ea:ac:12:4e:e2:0a:44:5d:fd:
a2:a0:22:a3:e9:03:f1:41:bd:a2:33:ae:6f:da:02:2a:15:82:
1e:54:25:7b:9a:fe:6d:c9:07:fb:fc:ca:08:c9:71:b5:46:eb:
2d:25:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:25:05 2025 by rpki-client