Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N0e3c-58JunO2eToD9sCrHPUkZs.roa
File: N0e3c-58JunO2eToD9sCrHPUkZs.roa (raw, json)
Hash identifier: Od5iyvsgJvuvqfPy7vEsUwlLipBoRiNdnqTKyCUhmvE=
Subject key identifier: 37:47:B7:73:EE:7C:26:E9:CE:D9:E4:E8:0F:DB:02:AC:73:D4:91:9B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6FBBC982
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N0e3c-58JunO2eToD9sCrHPUkZs.roa
Signing time: Sat 05 Mar 2022 00:10:17 +0000
ROA not before: Sat 05 Mar 2022 00:10:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1874577794 (0x6fbbc982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 00:10:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3747b773ee7c26e9ced9e4e80fdb02ac73d4919b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:ba:16:fb:75:fe:91:2a:3b:ff:ed:37:59:
7c:eb:30:b3:a0:35:e0:75:ad:26:32:49:a8:9c:c0:
07:64:f5:66:04:f9:62:ca:e1:b7:88:e7:cc:69:f1:
70:da:3c:05:95:03:af:1f:48:90:11:cb:2e:12:21:
3c:d1:ee:e6:e1:5b:04:98:d4:4d:cf:39:44:6d:24:
86:e9:92:a0:94:ee:aa:25:41:11:16:6d:06:73:93:
fe:2b:f5:b3:3d:49:4a:d1:6c:d4:a5:92:91:9a:9f:
20:77:2a:4c:30:29:4c:e7:ef:fa:cb:72:51:a2:c1:
5b:4e:56:5b:92:1c:cd:4f:54:70:ed:2f:d7:84:a6:
e2:5e:79:a2:8d:53:b4:78:f3:69:43:26:ca:6b:8b:
04:68:e1:b8:2e:07:aa:f2:21:98:8d:2f:58:fb:2e:
11:d7:e9:11:f2:29:30:03:4e:34:44:1e:46:23:b7:
d5:d0:eb:31:b4:93:84:7d:13:b6:c6:8f:bc:e1:00:
20:97:76:7b:9e:42:fc:a4:03:5b:66:65:22:4a:a6:
c8:9f:12:3d:53:06:3b:c4:54:a3:e0:bc:47:f9:00:
b9:e9:ad:ac:4c:5e:4b:f6:01:3e:fb:71:9a:16:c2:
1f:b1:15:1d:ee:be:e1:9a:82:af:fd:03:df:68:0b:
73:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:47:B7:73:EE:7C:26:E9:CE:D9:E4:E8:0F:DB:02:AC:73:D4:91:9B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N0e3c-58JunO2eToD9sCrHPUkZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:79:ed:8e:48:99:24:b0:da:cc:6e:3e:82:a9:a6:54:45:a5:
1b:79:5b:a7:94:a3:bc:9b:2d:ec:8a:be:49:3e:16:9b:e9:98:
f7:23:1b:7c:3b:56:47:49:92:49:ae:47:9e:df:e9:e9:9b:b4:
0c:84:a9:f0:78:44:a7:04:4d:65:4d:b9:3c:fa:d2:0d:11:9d:
3c:08:a7:83:8c:d2:dc:f5:36:82:63:4d:d4:a5:cc:62:ea:80:
26:05:69:73:ad:e3:e7:d5:28:ac:6e:eb:46:e1:26:e7:c8:0f:
df:92:d6:10:04:2a:e8:9b:71:eb:09:68:4b:b6:5e:40:fe:16:
da:06:1e:3e:4b:b7:fb:f9:02:e3:9d:10:fd:5b:fb:7a:ab:12:
94:d2:c7:67:77:c6:57:34:a6:be:8b:ce:af:20:e1:e4:c0:a4:
db:0b:5f:b5:b3:25:72:70:83:7c:44:17:f0:8d:14:3c:72:e4:
0a:ce:06:e7:cc:29:64:25:e7:8a:f0:4d:c2:96:2d:28:4e:57:
93:3e:e1:35:bc:0c:fe:9a:63:0a:c5:e4:6d:5c:2d:6d:03:ae:
bc:f0:ba:b2:3b:92:fe:a9:8e:89:22:b2:ff:da:e6:e5:93:3b:
ea:1c:a4:f3:17:2e:29:ec:86:93:8f:89:84:35:66:32:70:6a:
75:99:84:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:13:06 2025 by rpki-client