Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nrghQZslZCqMYvwtKAZm3mUsGng.roa
File: nrghQZslZCqMYvwtKAZm3mUsGng.roa (raw, json)
Hash identifier: Y+z0H4MVWOF6RqY62mqxkQvzxGjtn3TSil6ssR/IkCA=
Subject key identifier: 9E:B8:21:41:9B:25:64:2A:8C:62:FC:2D:28:06:66:DE:65:2C:1A:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186873530CD5F47C782E946B7263DB10EEE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nrghQZslZCqMYvwtKAZm3mUsGng.roa
Signing time: Sat 25 Feb 2023 06:14:15 +0000
ROA not before: Sat 25 Feb 2023 06:14:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:87:35:30:cd:5f:47:c7:82:e9:46:b7:26:3d:b1:0e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 06:14:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9eb821419b25642a8c62fc2d280666de652c1a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:59:bb:08:b7:71:97:e2:98:45:44:b3:3d:
95:04:e3:b2:a1:6f:61:28:37:c6:b9:e2:28:27:c0:
9b:89:52:e0:91:ca:fa:97:a0:5c:c5:00:db:66:0f:
42:6c:46:ab:45:6f:8f:19:1c:11:2a:4d:fe:60:f4:
d8:f7:d3:54:c5:ef:f5:02:79:b5:2e:20:3b:77:c2:
f9:03:7e:5e:f6:a1:70:17:fc:55:48:4a:c4:b4:a2:
e2:97:7d:19:ac:22:e4:c3:22:e1:41:15:fa:25:54:
9c:0e:35:73:43:f0:f9:f1:20:4a:6f:73:a8:68:94:
25:4e:0a:cc:13:e4:e2:e9:7e:53:70:6d:db:ba:ef:
aa:7f:a5:93:b9:f0:3a:fa:09:00:e4:d3:ad:d2:fa:
2b:3c:d2:4d:6b:72:d9:7c:1f:20:25:3f:5f:a1:09:
af:79:9f:dd:51:04:4b:35:dc:95:be:1e:ee:20:03:
6a:1a:c1:14:bc:3c:d6:b6:06:45:02:f2:4b:86:d0:
77:69:e2:d5:83:b6:84:3f:b4:36:7c:ab:a0:16:c6:
4a:e2:c6:5f:cf:0d:4e:7b:06:f2:89:dc:db:f8:90:
a7:d8:ab:4d:91:d2:13:fe:e0:60:a7:a2:e9:65:db:
29:a0:9e:b6:3a:37:4a:5c:e4:82:d0:8a:7f:19:91:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B8:21:41:9B:25:64:2A:8C:62:FC:2D:28:06:66:DE:65:2C:1A:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nrghQZslZCqMYvwtKAZm3mUsGng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3d:e0:3a:ab:b2:da:6b:aa:92:4f:99:d6:93:1b:1b:97:df:66:
e7:bc:3a:66:77:28:6c:9a:ad:3f:3e:26:94:96:0b:30:5d:98:
2d:b1:01:fb:94:ee:79:e5:73:f2:0a:ca:6a:19:6a:12:5b:62:
eb:9d:2a:b4:4c:31:7d:f4:83:89:c4:95:33:ea:f0:1f:a9:b8:
28:9b:bf:06:e8:2b:ee:00:b3:ab:03:c7:4f:5f:6e:9c:1b:1c:
bc:fd:4c:fb:ef:a0:3e:63:1e:d4:1d:58:da:ce:d8:9c:ab:35:
e2:57:1c:f4:c3:df:dd:b0:bb:ac:8b:70:43:d4:d7:04:48:df:
11:ea:dc:9c:c3:de:77:21:08:5c:39:ea:ea:95:e6:22:a0:86:
b5:3c:bd:2a:29:0a:81:49:13:e1:fe:24:06:7e:ea:2f:b9:69:
49:0d:3b:3b:c8:d0:64:d5:1f:a2:7b:e0:50:51:5d:44:69:bd:
ad:09:26:d3:57:c1:64:c9:dd:49:b5:a2:78:a8:1f:a9:c3:66:
8f:1b:3e:64:6f:69:98:4d:bc:59:5e:56:86:ef:74:ea:46:07:
16:85:60:82:2d:e7:e2:d9:2e:bc:6b:81:4b:17:95:fd:80:7f:
6d:76:f2:c1:dd:84:e7:6b:89:87:f5:ee:84:bf:63:fe:83:38:
80:59:c0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:19 2025 by rpki-client