Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nnA0AywCgM5kUfonrKsRkrdmvzQ.roa
File: nnA0AywCgM5kUfonrKsRkrdmvzQ.roa (raw, json)
Hash identifier: FXmbb0vXN482Tot5DQvrrk9N3KIvntM8YDlXol4K8UM=
Subject key identifier: 9E:70:34:03:2C:02:80:CE:64:51:FA:27:AC:AB:11:92:B7:66:BF:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854284DBD38AE504B2A857CEEB394853BE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nnA0AywCgM5kUfonrKsRkrdmvzQ.roa
Signing time: Sat 24 Dec 2022 05:04:41 +0000
ROA not before: Sat 24 Dec 2022 05:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:4284:9af8/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:42:84:db:d3:8a:e5:04:b2:a8:57:ce:eb:39:48:53:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 24 05:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e7034032c0280ce6451fa27acab1192b766bf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:0b:06:81:93:3a:88:4a:5b:7f:1e:95:01:
27:25:3f:03:23:da:df:22:e3:f4:aa:af:af:72:4b:
f9:bb:08:db:7f:f9:92:f0:40:48:e3:5a:12:84:86:
a9:09:e8:7c:9e:d5:24:58:1c:c0:a9:49:99:1e:5b:
cd:79:72:fa:c0:12:6a:52:33:6a:b9:57:a3:16:82:
83:23:91:a7:ed:09:7f:0d:c8:e1:39:f2:5d:a4:67:
78:f1:37:d3:22:de:83:85:15:a9:49:99:91:81:39:
08:a0:70:ee:88:b7:63:41:fe:0c:ee:5b:ad:1b:d0:
76:a2:0e:ed:59:67:d9:78:95:0a:5c:8c:8d:11:db:
4a:4f:1d:c8:9c:38:ed:5a:6b:53:4d:cb:a4:c6:37:
ae:8d:a6:af:b7:a5:0c:f1:f7:70:b6:41:24:09:4e:
6b:20:d7:14:95:ac:76:14:39:5f:35:61:34:72:71:
76:e4:da:f3:68:f6:2c:93:58:11:b7:55:b1:52:1a:
c7:03:72:bc:07:4a:d6:e9:4f:c3:a5:db:78:f7:73:
db:5b:d2:e1:6c:8f:58:dc:f1:f3:3f:1e:c1:cf:b4:
27:56:16:31:6b:60:63:d1:c2:35:ae:51:9c:f4:b2:
df:ea:e9:86:2b:bd:63:55:d4:c0:f0:9d:ec:49:81:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:70:34:03:2C:02:80:CE:64:51:FA:27:AC:AB:11:92:B7:66:BF:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nnA0AywCgM5kUfonrKsRkrdmvzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:f1:1c:e9:10:9e:ee:50:9a:9d:bb:26:cd:09:30:e5:2a:71:
53:f4:6a:5a:fa:93:58:5e:65:28:ac:73:0d:16:1a:6c:78:7b:
1b:dc:e0:15:c2:35:5e:70:db:18:92:f2:b5:26:eb:e3:5a:a8:
4f:0c:72:42:69:bb:c9:63:05:be:5f:51:0b:a3:9e:ec:c9:b6:
48:99:b4:da:1e:21:c1:3d:03:7f:5d:83:16:57:a0:c3:49:0f:
2c:ad:a0:6c:ed:fc:1f:02:fd:d0:bf:15:e8:8d:ba:18:5d:05:
54:05:f5:a9:cf:0c:ca:45:91:07:d0:77:b2:a3:22:da:cd:01:
7c:16:74:47:ea:b5:da:9b:b7:3a:23:da:1a:b4:0a:96:33:c5:
5e:8f:2a:19:19:75:4a:b8:a9:de:ba:2d:14:25:b0:4f:89:22:
ce:c7:cb:02:cf:07:a4:a0:6e:3c:e2:40:7f:9f:f1:2b:fc:a0:
6d:68:57:f4:55:4f:fe:41:fe:70:25:64:13:75:84:b8:bd:96:
cf:6f:82:ab:a5:58:ee:f4:91:59:01:dc:83:1c:dc:4d:9e:1d:
67:91:db:23:81:8d:51:4d:2a:91:f9:1e:61:07:f1:d4:68:5e:
78:e1:7c:c9:cd:7a:0c:5e:2a:6b:02:56:18:f4:53:9b:64:53:
fb:ef:12:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:36:30 2025 by rpki-client