Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ns2cvV4jOSwa5tIXtNDTznK1hEU.roa
File: ns2cvV4jOSwa5tIXtNDTznK1hEU.roa (raw, json)
Hash identifier: zivWZEM1DEL0lYWsULdGkCqttmeeNhcinmJLwB0V0Jo=
Subject key identifier: 9E:CD:9C:BD:5E:23:39:2C:1A:E6:D2:17:B4:D0:D3:CE:72:B5:84:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181E23A58A723B3FECCECDFA6680D94DDCD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ns2cvV4jOSwa5tIXtNDTznK1hEU.roa
Signing time: Sat 09 Jul 2022 09:11:23 +0000
ROA not before: Sat 09 Jul 2022 09:11:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e2:3a:58:a7:23:b3:fe:cc:ec:df:a6:68:0d:94:dd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 09:11:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ecd9cbd5e23392c1ae6d217b4d0d3ce72b58445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:68:b0:05:63:bb:69:f5:32:3e:99:48:f1:
dd:bc:00:5d:b2:52:cf:fa:bf:09:35:a4:e2:af:20:
03:2e:8a:7c:d6:81:f6:a4:15:e5:21:d4:b3:0a:64:
e6:55:29:2d:4b:c2:92:ca:77:ef:c2:37:1e:e4:1d:
d4:22:4b:c5:f0:78:dc:30:11:e7:05:6f:ad:26:3e:
e1:8d:bd:a2:a2:1b:ab:75:c9:bc:37:04:b3:f6:5a:
99:7f:ec:2c:00:1d:55:35:8f:f4:6a:26:5b:0a:9c:
50:3e:d3:3c:ba:eb:2a:02:78:8f:27:80:13:8a:40:
2f:87:bf:51:f0:51:6b:8b:c4:53:7f:56:1f:f0:87:
05:28:d3:3d:e8:2e:ac:20:40:54:8e:1b:eb:b9:80:
96:6a:ad:bd:06:47:35:e8:cd:80:c1:3b:ba:67:6d:
fd:d5:13:0d:1b:f2:eb:a4:31:36:38:07:75:26:91:
8d:b9:07:dc:9d:0a:7d:9c:31:1b:7a:49:c9:83:f4:
55:00:21:c4:9c:7f:11:ec:45:6d:f3:85:64:b7:b8:
25:c4:52:0f:50:31:66:9a:f2:62:f1:0f:c7:18:21:
c8:2e:76:49:8c:af:f7:9d:39:a1:b2:a1:a2:b7:75:
c7:9f:38:af:9b:8a:38:e0:a3:b9:dc:3b:30:63:4e:
8b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CD:9C:BD:5E:23:39:2C:1A:E6:D2:17:B4:D0:D3:CE:72:B5:84:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ns2cvV4jOSwa5tIXtNDTznK1hEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:d5:36:1b:47:01:45:39:b7:f1:fe:dc:a0:df:3d:af:aa:a5:
d6:c1:33:26:20:94:02:57:ee:b6:61:06:65:86:3a:75:5d:74:
be:47:0e:23:9d:b9:5c:05:10:fd:29:d3:34:40:fc:8c:2a:6d:
48:fd:09:de:88:d6:f9:33:e5:04:6c:61:b8:e5:13:83:19:a4:
7e:c9:d2:4a:c2:5a:11:39:26:22:f8:1e:5d:d8:9b:24:7e:c2:
95:89:4b:16:b3:0b:e9:9f:7f:8e:4c:2c:1b:68:00:cd:12:be:
15:eb:e7:1c:1a:d9:55:50:6d:dc:71:ef:31:9d:3a:b0:49:01:
83:a9:17:a1:3d:c5:8f:89:3a:11:0c:bd:84:1c:fd:1e:0b:9b:
95:3a:f1:00:88:f5:e4:8b:b3:f1:5e:6b:c1:e8:3e:ad:4e:a8:
f8:84:84:5c:e6:83:04:33:a8:56:7c:cc:07:75:3b:de:d0:9e:
6c:56:13:3b:82:b0:b9:bc:6c:ac:df:07:d5:ba:5b:40:73:5e:
9b:ac:2d:ba:f8:e7:9c:c9:b1:15:33:f9:7c:9c:48:6b:52:a5:
0e:3c:52:26:f5:f5:25:e5:ce:a2:f0:11:eb:63:31:d8:e2:da:
64:c4:8a:d5:8f:7a:a7:ab:90:8e:f4:60:ef:bf:fb:f7:22:d9:
f3:e4:8a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:48:42 2025 by rpki-client