Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N49pNgbSY71oGtI8EMoDybUgbi4.roa
File: N49pNgbSY71oGtI8EMoDybUgbi4.roa (raw, json)
Hash identifier: dalNvYTIxmvdx5vlvaWv4IMLCix5QdGy5lWWcXXVdjY=
Subject key identifier: 37:8F:69:36:06:D2:63:BD:68:1A:D2:3C:10:CA:03:C9:B5:20:6E:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851AA1E1B6224B8B65BFEBF53FA1336EB9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N49pNgbSY71oGtI8EMoDybUgbi4.roa
Signing time: Fri 16 Dec 2022 11:11:34 +0000
ROA not before: Fri 16 Dec 2022 11:11:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1a:a1:e1:b6:22:4b:8b:65:bf:eb:f5:3f:a1:33:6e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 11:11:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=378f693606d263bd681ad23c10ca03c9b5206e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ab:df:31:c8:19:95:e8:4e:c1:97:e2:3f:13:
6f:05:b6:0d:76:a3:12:0e:20:22:e5:91:45:cb:3e:
37:76:54:aa:5e:9f:e3:8f:1c:93:14:55:ed:9b:5e:
e3:5c:b6:b0:c9:98:72:b1:6b:43:a9:34:14:26:88:
da:ad:e5:2b:a1:a7:7e:81:d3:73:b0:82:dd:b2:1a:
c4:8b:77:1d:c0:7e:f5:e5:f8:6d:c3:1c:f1:33:c6:
20:5d:0f:42:26:2c:ed:3b:b5:16:1b:49:ad:87:59:
a7:2a:b5:7c:7d:f6:46:d8:c9:6e:5e:8a:74:a2:df:
d0:96:12:b4:ef:ee:ec:f2:01:26:d4:5d:36:a8:3a:
5a:1e:6a:a2:8e:96:5f:c2:6f:4c:78:e7:b2:a0:76:
81:1d:d7:00:0d:10:9d:ec:64:36:8b:fc:c5:e3:3e:
e9:e6:57:dc:63:ef:81:1e:f1:e5:80:81:55:76:9f:
a8:d2:65:7f:47:d0:ae:81:0c:2e:01:02:ff:14:8a:
fb:f9:01:1b:05:09:f5:2c:6f:49:64:8f:eb:cd:5d:
bf:7c:e5:1c:73:68:8d:1d:88:1b:ea:ab:7a:c2:86:
9e:d3:ce:da:eb:99:16:1d:cf:54:5e:e2:17:99:26:
dd:ce:52:71:2a:4a:aa:7a:cb:ad:c7:15:23:72:05:
64:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8F:69:36:06:D2:63:BD:68:1A:D2:3C:10:CA:03:C9:B5:20:6E:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N49pNgbSY71oGtI8EMoDybUgbi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:0f:22:bd:7c:6e:cc:3d:bf:9d:c2:2c:a4:83:c4:6e:a6:46:
f8:01:17:45:1b:f1:4c:0f:54:76:40:b2:27:69:2c:19:41:fa:
e9:02:89:1a:f1:da:6e:e1:0c:30:c2:62:6e:bb:f9:f9:65:23:
d5:48:28:87:29:c1:b9:f8:61:00:2b:f8:79:14:37:2e:3c:e1:
5d:c5:21:76:bd:4b:c1:9b:aa:ca:a3:95:ae:5e:d2:fe:96:05:
01:27:68:14:dd:1a:e7:ff:d9:63:1a:88:ab:27:e5:3b:0c:4f:
ac:27:76:7a:f2:1a:4d:ca:f1:1a:99:f8:ba:a1:b2:e6:bc:f0:
45:a0:6d:b5:c9:14:1a:50:78:7c:61:e8:39:8c:f4:52:10:84:
35:42:81:86:3c:1a:a1:d7:8a:9c:5a:a0:d7:ff:a3:c4:1c:44:
64:6f:ba:7c:a9:7c:34:03:23:13:ae:fd:52:0b:f3:33:73:d7:
da:5c:fb:a8:3d:c2:03:94:46:99:0b:57:c3:8c:80:62:0f:2e:
0e:d0:6f:41:bd:fd:13:b6:34:d7:e3:ac:09:2b:1c:22:6b:3b:
d4:a9:06:41:1a:d3:6e:ae:8b:15:43:79:fb:27:d7:c7:30:24:
63:04:49:b4:0e:24:f5:86:d6:4e:c6:82:31:ba:ad:2c:7b:bb:
4a:fd:58:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:23:57 2025 by rpki-client