Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/np4gk9Y_bQb3HxkJ-TVnswa46Fo.roa
File: np4gk9Y_bQb3HxkJ-TVnswa46Fo.roa (raw, json)
Hash identifier: Mfk6ISB/8kgCMjeMxGkoArBo2JUvhNA3D2ItfG5eMkM=
Subject key identifier: 9E:9E:20:93:D6:3F:6D:06:F7:1F:19:09:F9:35:67:B3:06:B8:E8:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185187628F3F2B6785F103BE75880E62251
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/np4gk9Y_bQb3HxkJ-TVnswa46Fo.roa
Signing time: Fri 16 Dec 2022 01:04:34 +0000
ROA not before: Fri 16 Dec 2022 01:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:1875:db13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:18:76:28:f3:f2:b6:78:5f:10:3b:e7:58:80:e6:22:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 01:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e9e2093d63f6d06f71f1909f93567b306b8e85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b4:4a:56:c8:b1:85:62:46:63:91:72:2f:79:
92:fd:c2:da:e4:90:f0:87:e1:2e:37:5a:90:13:48:
dd:ae:1d:73:01:11:63:2c:ad:43:3e:68:53:ee:24:
3d:5c:b8:59:5b:32:ab:f4:62:05:79:9f:bc:27:e5:
f1:5e:ad:21:f1:68:1a:f7:a4:19:8a:12:61:d3:95:
6e:e7:d5:fd:b5:26:c9:f9:26:a2:f0:10:b4:51:53:
ec:39:f8:34:7e:43:d9:93:65:d5:f6:8c:50:55:28:
f6:e9:b7:03:8a:0a:cd:75:79:9f:32:be:d2:29:7d:
ad:82:36:11:a5:1b:54:ea:22:af:f9:3a:ad:1d:57:
86:8f:01:79:6f:30:9b:0c:1e:6d:e2:5b:79:22:97:
e3:42:f5:ab:e0:9e:75:77:e0:39:a1:d8:21:e0:79:
43:55:6d:31:61:cc:db:b6:d8:6f:24:36:76:f3:f7:
17:84:bb:98:19:62:c8:41:9a:ad:a3:7e:66:36:ae:
02:8d:54:3f:76:be:d6:8d:b5:10:6f:a4:ef:42:0a:
0f:12:d2:07:f3:ff:36:24:5f:97:d0:da:8b:f3:eb:
bc:bc:a0:95:37:f1:ba:29:34:f3:1d:8d:39:a0:1d:
9a:69:57:cc:3c:a2:bf:6a:73:4e:1c:70:0e:a9:87:
f2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9E:20:93:D6:3F:6D:06:F7:1F:19:09:F9:35:67:B3:06:B8:E8:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/np4gk9Y_bQb3HxkJ-TVnswa46Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:e9:7b:5b:c0:12:c1:c5:db:17:a3:bb:49:06:d5:68:81:08:
e2:6e:fb:40:da:32:de:77:41:af:e3:25:b0:5d:d8:5e:0c:06:
4c:2b:d9:34:77:a1:4c:38:fe:33:83:12:8f:cd:14:7b:88:2d:
54:b4:f4:f1:2d:2c:bf:c6:06:8d:18:b7:9e:07:6b:59:85:11:
a6:7a:f8:dc:3b:8e:a3:e3:b2:53:87:f9:72:fb:04:46:9d:08:
c9:e9:e4:0b:ef:92:b0:53:17:a1:d6:ca:74:ec:a8:08:fa:8e:
b7:af:51:88:1d:04:60:ab:0e:3e:79:30:a7:8c:e8:8a:28:d8:
34:c8:f9:30:f9:6f:10:bc:df:e7:a1:08:3c:e5:be:50:27:d3:
bb:c0:fd:86:2d:c1:15:da:5e:db:90:77:0b:d0:f1:30:e4:51:
9c:8c:89:38:c1:aa:3e:7b:10:ed:16:b0:1c:f7:0d:7f:84:8b:
8d:cf:67:be:05:5e:ec:0d:02:6b:07:3e:73:ab:6f:ad:70:63:
4b:fc:9f:3d:b1:18:b9:f5:6c:2a:71:47:a0:0b:32:b4:84:d6:
a8:50:ed:27:46:95:36:2a:1d:6f:01:f0:3d:a0:ed:16:02:f2:
4b:6e:9f:4f:58:cb:93:98:e3:30:91:b2:99:b2:f0:5a:7e:9c:
aa:b3:47:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:37:35 2025 by rpki-client