Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sNgkaMeAsaZGd-84ujnZHOKauxU.roa
File: sNgkaMeAsaZGd-84ujnZHOKauxU.roa (raw, json)
Hash identifier: AiWSEru63HNpZQUFCUgN3gDDOFgurfkuIy7RB6TfLEU=
Subject key identifier: B0:D8:24:68:C7:80:B1:A6:46:77:EF:38:BA:39:D9:1C:E2:9A:BB:15
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 88B73085
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sNgkaMeAsaZGd-84ujnZHOKauxU.roa
Signing time: Tue 31 May 2022 11:09:13 +0000
ROA not before: Tue 31 May 2022 11:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2293706885 (0x88b73085)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 11:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0d82468c780b1a64677ef38ba39d91ce29abb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f2:ee:bb:aa:4a:a6:b0:7c:d7:5d:6e:21:53:
6b:71:79:a9:9f:75:09:3d:21:0e:26:c7:4a:86:4a:
ff:55:27:eb:c5:8f:89:4e:93:40:42:0e:85:08:ba:
4d:22:d7:60:fb:c5:b8:4e:af:8e:b2:07:1c:f5:5c:
43:53:97:48:a6:e3:f7:b7:0b:16:f3:40:65:65:c1:
ec:e1:8e:d1:31:02:18:bb:72:78:b1:7e:af:3b:a2:
bc:7d:b7:8e:e2:b6:5e:2e:77:98:b2:b8:03:75:90:
aa:47:0e:b2:06:08:aa:ce:25:4b:89:74:3b:4e:e1:
64:1f:06:53:8c:2e:b8:40:2f:4b:27:81:cc:f3:6c:
b0:90:c2:0f:8d:18:4c:29:94:62:41:6b:20:1e:59:
ad:53:80:8e:20:4c:41:ed:ee:54:d4:1f:a8:1d:75:
85:25:ae:11:3b:6f:08:a5:e4:1f:f4:c4:50:e5:f3:
50:fa:79:6d:78:fe:91:c4:0b:81:1e:0e:e1:9f:a9:
f8:5d:36:71:d8:19:11:11:c5:d6:d5:a3:56:15:7e:
74:7b:01:b7:8f:94:c2:f9:6e:ba:28:75:63:80:6d:
90:58:ef:f1:39:c4:d9:76:7f:70:9f:fe:93:dd:cf:
eb:bf:3d:3c:bf:70:98:7d:e4:30:0d:b8:79:33:15:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D8:24:68:C7:80:B1:A6:46:77:EF:38:BA:39:D9:1C:E2:9A:BB:15
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sNgkaMeAsaZGd-84ujnZHOKauxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:dd:42:83:27:18:08:a2:8d:c0:9f:ff:00:0c:56:13:6a:18:
01:bd:b1:d5:b0:dc:c8:f0:45:83:4b:5f:41:e2:18:79:64:eb:
68:d6:10:1a:ee:49:df:9e:98:21:57:0b:24:79:6d:83:7f:99:
bd:bb:df:b1:16:13:08:36:1b:c5:0c:9f:9c:3a:20:a7:a4:e0:
17:30:76:93:a3:de:fa:9f:e8:ea:90:b1:51:46:90:48:96:06:
00:d7:92:d6:ee:8e:50:80:8a:fa:19:36:77:b3:74:94:bc:d3:
80:26:55:f3:81:b7:9d:60:fa:2d:f6:0d:f0:62:5f:89:8b:cc:
39:47:a1:3c:3a:1e:99:b0:98:ea:de:ab:66:cb:26:a5:8d:ca:
e6:43:bc:63:05:17:d6:d6:7f:16:13:22:a2:f2:2f:82:97:04:
f9:60:6c:f4:35:b9:57:ce:5a:1d:b3:f0:9f:22:54:9a:78:b6:
08:69:11:a3:a7:c5:98:1b:2a:d8:d8:e3:79:ca:f4:4f:b7:2d:
87:90:41:f3:79:32:fd:4c:ab:af:b8:56:d2:1c:c7:6f:4c:21:
77:44:6d:b1:34:fb:b8:ff:e7:a9:0d:5a:47:08:9a:68:70:4b:
88:51:f1:25:6f:91:c3:08:ab:96:5e:1f:b4:17:dd:3f:e0:4e:
2f:7b:6c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:10:51 2025 by rpki-client