Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nrHRLhr7VDAKpd1lSFl7w1kX4BI.roa
File: nrHRLhr7VDAKpd1lSFl7w1kX4BI.roa (raw, json)
Hash identifier: NFP8sl0qaiX8YoTfmu6LtZcxzbPFF9c9CBI7sq2wbcY=
Subject key identifier: 9E:B1:D1:2E:1A:FB:54:30:0A:A5:DD:65:48:59:7B:C3:59:17:E0:12
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874DB0A32C13DB8FE7381430DFBFD747E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nrHRLhr7VDAKpd1lSFl7w1kX4BI.roa
Signing time: Tue 04 Apr 2023 19:13:54 +0000
ROA not before: Tue 04 Apr 2023 19:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4d:b0:a3:2c:13:db:8f:e7:38:14:30:df:bf:d7:47:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 19:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9eb1d12e1afb54300aa5dd6548597bc35917e012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:39:79:ad:a6:54:b0:60:66:aa:19:b9:b8:cb:
b2:f4:47:da:8e:73:09:b9:e6:55:c8:95:84:cf:48:
b0:04:26:51:30:5b:56:53:fe:f4:d5:f9:6c:6f:ae:
ac:15:d8:03:f6:d1:76:a1:7e:b7:04:ae:c8:12:50:
19:1e:61:04:c9:0e:31:51:10:e5:2f:84:9d:81:e5:
fb:e8:b7:aa:21:26:ae:65:df:c3:cb:b8:d7:93:22:
d2:8a:5d:46:17:be:71:99:74:8c:1b:00:73:26:4c:
c6:c7:a2:54:47:09:02:93:6d:69:18:1d:bc:b6:37:
93:08:a4:50:44:14:21:14:0c:25:3c:08:8a:3d:98:
96:61:31:4f:f0:a1:7e:da:e7:46:b3:a9:3a:89:0e:
7b:20:6c:c4:70:e0:72:df:8f:53:34:8f:36:b3:a5:
0d:8d:93:36:06:af:d2:13:60:c4:e1:8d:df:c4:fb:
46:07:3a:78:68:7f:ac:39:71:1d:3f:a0:6f:cf:cf:
56:2e:90:8d:cc:53:92:0b:48:29:3c:d8:e3:87:ff:
05:d3:64:9d:a3:55:a0:23:c5:d8:b4:e0:8d:9f:83:
32:de:c9:90:47:87:bf:d0:1a:ad:60:85:1a:28:ce:
ed:6a:1e:81:0e:fa:ea:37:66:ca:ce:d9:c2:9a:4c:
39:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B1:D1:2E:1A:FB:54:30:0A:A5:DD:65:48:59:7B:C3:59:17:E0:12
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nrHRLhr7VDAKpd1lSFl7w1kX4BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:69:e4:97:69:d3:b3:46:6b:71:79:35:df:a0:7a:33:45:73:
24:c9:00:92:24:ef:f2:7e:47:76:c3:a6:70:d0:83:a7:fb:f9:
be:2e:0e:c4:81:53:95:04:5f:3f:32:01:d9:ce:94:fb:bf:d7:
3e:f6:02:15:e6:73:8d:c1:2d:aa:5a:e8:f9:6b:34:de:9b:a2:
a9:fe:2a:29:51:8c:d0:79:3f:7f:b4:8b:52:16:e8:b5:28:5a:
67:70:d1:ef:5a:6b:2e:24:43:86:5a:07:76:13:f3:1e:10:c0:
e9:58:b9:0f:ab:a8:3e:04:8f:9e:1f:9b:ec:4b:ba:09:0f:99:
eb:bb:8f:46:b0:8b:62:81:fa:ea:0c:68:61:ff:be:7c:5e:00:
51:1c:80:bd:d2:8e:c8:63:26:10:79:60:1e:88:f3:a3:3e:37:
d1:63:be:21:b8:98:a4:d6:93:f7:03:79:a3:30:69:86:a4:53:
40:d0:4f:e3:5d:d4:18:a8:7d:10:c2:1d:bf:e4:a5:e4:f7:9b:
f9:9a:3d:54:01:a7:bf:c6:f4:16:1c:c6:53:61:f0:66:7c:b6:
e3:4f:de:6b:b9:05:dd:e5:d9:90:96:13:69:d8:f1:d2:64:7f:
69:52:5d:8a:03:56:2f:54:97:9e:3e:9f:a8:d2:5b:62:cc:3f:
c1:5b:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:20 2025 by rpki-client