Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nwzHjSoOS4rmc1sku2ZqGaL5ASg.roa
File: nwzHjSoOS4rmc1sku2ZqGaL5ASg.roa (raw, json)
Hash identifier: 8FfTBNdg4Z42q3SOZhroaGggc5S3FBcCujsouuBTd0A=
Subject key identifier: 9F:0C:C7:8D:2A:0E:4B:8A:E6:73:5B:24:BB:66:6A:19:A2:F9:01:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850B9D93C9488E6E11C5468AA6C86898B5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nwzHjSoOS4rmc1sku2ZqGaL5ASg.roa
Signing time: Tue 13 Dec 2022 13:12:34 +0000
ROA not before: Tue 13 Dec 2022 13:12:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:9d:93:c9:48:8e:6e:11:c5:46:8a:a6:c8:68:98:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 13:12:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f0cc78d2a0e4b8ae6735b24bb666a19a2f90128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:58:62:9e:02:84:da:d7:01:0d:6c:6e:1c:d3:
43:2a:9c:1a:a4:fd:99:20:2e:8d:3e:3b:2c:a9:b6:
01:f3:59:91:34:f0:d0:5a:68:b2:cb:fb:c1:5d:e8:
04:5d:42:a2:2f:c4:96:6b:4c:e8:ba:96:e3:64:96:
38:27:96:79:1e:23:30:b4:42:88:42:e0:21:7f:fe:
88:a2:4d:2e:b8:e0:34:91:02:35:6a:94:b6:30:85:
fc:e2:e3:d2:59:23:1e:69:5a:98:4c:f3:22:74:3a:
fe:78:19:46:98:a1:fe:22:62:c4:80:f6:fc:1c:5f:
87:40:db:b2:c4:bc:39:c4:99:99:b0:ae:c0:39:dc:
b5:25:07:db:43:9a:ab:65:44:39:d2:d0:f8:98:e5:
aa:e8:e8:70:51:92:24:11:33:22:e3:43:14:b1:cc:
29:15:cc:b8:2a:16:0e:1a:03:ef:76:d1:90:87:ed:
6f:3f:27:ac:dc:f4:f9:f6:06:7f:e5:47:05:d1:72:
d1:67:b3:f0:b8:27:a9:a8:31:53:c9:16:fa:55:1f:
eb:2e:92:92:3f:1f:4b:69:ca:82:7a:60:02:98:8b:
f6:98:07:52:68:58:90:fb:b5:c7:1d:0a:21:ae:12:
62:de:9a:ba:e1:23:14:41:d9:74:61:75:38:c1:0a:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0C:C7:8D:2A:0E:4B:8A:E6:73:5B:24:BB:66:6A:19:A2:F9:01:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nwzHjSoOS4rmc1sku2ZqGaL5ASg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:16:c7:e0:51:1e:0a:48:08:ee:01:4b:15:7c:4b:4a:1a:8e:
10:d8:c1:07:46:28:a5:b2:0f:b3:4e:9d:28:8d:69:7b:f9:93:
c3:de:4f:bb:80:85:3f:51:88:80:b1:6f:0e:e4:88:cf:2b:f5:
a7:e0:1b:34:fb:0f:17:07:36:a1:f0:e4:36:15:73:f6:44:f1:
49:20:c7:78:78:d5:b1:38:27:43:59:81:c8:f6:59:72:e7:59:
2a:ca:70:3e:ed:be:7c:d4:11:4f:2a:4f:3d:f3:4d:f9:bc:e9:
6e:53:60:d4:55:d1:ab:e0:8f:02:67:bc:35:05:25:5b:93:90:
90:f7:db:1c:3b:2c:e9:c8:0f:10:e0:6c:d5:8d:d6:2e:60:cd:
87:84:a6:f6:c0:12:98:7a:43:c3:0a:1c:2e:b1:d7:85:cf:5f:
6b:5f:88:96:73:4b:a9:7c:ca:1a:3e:8e:6b:51:5c:b4:76:c7:
0c:f5:3b:9d:70:fc:97:10:21:fc:08:10:88:ce:ce:64:b6:6c:
36:2d:7a:b4:fc:2d:db:a6:e0:3b:8b:a4:5e:a2:9f:04:c5:11:
d8:1c:64:03:86:48:a0:9a:8e:11:44:da:32:f2:8a:e5:14:e0:
79:a3:83:6a:06:ae:d5:34:9e:a1:5a:9c:31:3c:ff:67:88:77:
39:1d:e4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:18:04 2025 by rpki-client