Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N2aum5H_GYGEvsoGkR_J2YzRHR4.roa
File: N2aum5H_GYGEvsoGkR_J2YzRHR4.roa (raw, json)
Hash identifier: YDsLXT7UQCEZbIAedSoTmveRsZpYenq7gxhkEJghu34=
Subject key identifier: 37:66:AE:9B:91:FF:19:81:84:BE:CA:06:91:1F:C9:D9:8C:D1:1D:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A7CA652906EA319DC9E989283707BC43
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N2aum5H_GYGEvsoGkR_J2YzRHR4.roa
Signing time: Sun 30 Jul 2023 17:13:26 +0000
ROA not before: Sun 30 Jul 2023 17:13:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a7:ca:65:29:06:ea:31:9d:c9:e9:89:28:37:07:bc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 17:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3766ae9b91ff198184beca06911fc9d98cd11d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:37:fa:df:bb:41:90:e1:f9:ba:57:22:14:50:
a4:3d:34:94:40:67:76:c7:f5:19:04:94:ad:dc:73:
2e:65:22:a6:7a:e7:6d:fc:59:a1:e2:bf:90:0b:da:
15:80:1c:f3:bb:c4:80:40:67:eb:e5:5d:a5:75:d0:
1e:17:96:5c:13:29:41:ef:e2:63:09:46:8f:61:fb:
9b:ea:e4:b1:80:99:99:66:36:14:3f:c1:10:f2:9c:
f1:5c:a2:43:57:53:ea:bd:f6:44:88:ba:54:94:da:
05:2f:bb:1e:1f:b0:e5:e0:02:38:2d:2d:6e:04:b0:
89:e4:55:d8:0a:1d:77:90:91:44:a9:84:19:4a:f2:
7f:79:61:6c:f1:be:9a:86:0c:b4:c0:ec:17:14:b0:
ed:a4:f6:e4:5a:88:5b:6b:60:c1:2b:58:b1:a2:af:
85:2e:ba:8c:82:a5:ce:70:3d:ec:e2:11:df:30:c4:
ab:61:60:a8:18:54:8d:4c:ae:ed:8b:06:9b:a8:5c:
a7:e2:c2:f5:6c:d0:76:92:19:07:77:bc:d2:46:bb:
6a:0a:f8:29:e4:cb:8c:57:0a:80:c6:43:bc:5b:b2:
ed:2d:3c:07:b9:8f:02:be:78:25:90:22:30:ad:82:
e7:bf:40:78:1f:c1:12:ed:11:24:ff:c7:8e:c8:23:
57:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:66:AE:9B:91:FF:19:81:84:BE:CA:06:91:1F:C9:D9:8C:D1:1D:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N2aum5H_GYGEvsoGkR_J2YzRHR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:6d:bd:46:b7:a0:90:17:98:09:8f:bb:05:f2:7d:55:ec:6c:
b6:12:cf:44:b0:8d:ff:e5:3a:1e:fd:75:8f:1c:a5:3c:dc:07:
0e:f0:0e:c9:d6:09:94:a9:7e:a6:8f:29:09:60:ff:1a:44:a6:
14:72:46:46:70:15:10:cd:9f:3d:54:c7:ac:1e:76:98:86:d1:
cd:25:3b:72:73:9e:c2:08:87:54:d6:f2:c9:2d:b7:02:88:4e:
2e:1a:8b:e3:fd:a2:39:2d:33:e2:aa:7c:12:d8:9c:0f:4b:e1:
58:e1:43:a5:3d:a7:e0:86:ab:c4:b4:8a:5b:f6:e2:9e:22:d7:
9f:f0:9e:23:31:85:dd:92:a2:48:c8:a4:a1:07:20:cd:53:a8:
02:67:ae:0b:00:2c:75:ce:f6:8f:d0:8a:14:f8:c0:bc:d3:63:
c5:3f:ca:26:7d:fb:5d:6a:18:66:34:f4:93:35:ca:f1:9c:26:
31:3d:a6:44:75:6c:03:fb:d9:e4:2d:db:9e:f3:38:2e:86:62:
f7:04:dc:83:16:96:6f:79:e1:67:81:99:1a:c0:c2:86:94:bf:
a4:fe:3c:c0:72:5c:da:2b:27:43:34:40:a8:81:5c:f0:17:59:
1e:c3:74:7b:ba:96:85:6d:4f:92:af:9b:9d:8c:98:3e:36:d4:
92:4b:42:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:09:47 2025 by rpki-client