Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NSZ7p0H3fUuDXcPxMN48Cw7e2EY.roa
File: NSZ7p0H3fUuDXcPxMN48Cw7e2EY.roa (raw, json)
Hash identifier: ya+v5hLzLlFQ/T8B3i4DRg1esHnGbfNYZz9bF2P35vk=
Subject key identifier: 35:26:7B:A7:41:F7:7D:4B:83:5D:C3:F1:30:DE:3C:0B:0E:DE:D8:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018673394186BBAF8F9DA24DC1CF4E90BCCA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NSZ7p0H3fUuDXcPxMN48Cw7e2EY.roa
Signing time: Tue 21 Feb 2023 09:06:17 +0000
ROA not before: Tue 21 Feb 2023 09:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:7339:28d/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:39:41:86:bb:af:8f:9d:a2:4d:c1:cf:4e:90:bc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 09:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35267ba741f77d4b835dc3f130de3c0b0eded846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5b:da:04:97:6a:b3:64:7d:1e:73:1f:00:4b:
57:7f:1a:29:2d:f2:81:10:20:c3:0d:96:38:64:5a:
d8:cf:bc:ca:94:2f:bb:dc:08:ce:32:b2:f0:f7:1d:
b6:b8:45:55:58:3d:67:ef:9d:88:fb:1d:77:3c:e7:
93:a3:dd:6a:29:54:66:74:3f:12:53:70:29:17:8b:
0f:85:90:ed:5d:d6:67:99:59:ce:30:25:2b:3f:87:
fb:fe:5a:c7:40:33:7c:5c:65:d8:e2:dc:fe:fa:54:
e1:f0:07:fe:37:e3:69:b1:73:d1:95:0a:9b:10:3f:
14:61:ad:fd:d1:67:ba:5c:a2:97:97:06:42:f4:bf:
ec:58:7e:ec:c9:d4:25:1f:45:54:3b:e1:6a:c7:f7:
92:3c:ce:2e:f2:87:84:40:25:24:1f:0c:81:4b:db:
e2:a0:0e:59:88:36:de:b7:3b:61:c9:e1:79:a2:4a:
a1:de:96:f9:aa:0e:b1:34:68:91:d2:82:05:6c:4a:
f4:9a:5c:81:2a:03:d9:ac:ec:19:6c:90:0c:f8:51:
89:96:ba:b6:fc:c4:a4:12:e5:c0:e1:2e:b9:0a:12:
be:10:55:78:fb:e9:4f:24:46:a7:46:aa:a1:a8:03:
7c:28:9d:fd:44:db:ad:d7:3f:12:42:5e:37:49:7d:
bc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:26:7B:A7:41:F7:7D:4B:83:5D:C3:F1:30:DE:3C:0B:0E:DE:D8:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NSZ7p0H3fUuDXcPxMN48Cw7e2EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:a2:a2:f5:a1:ea:71:b5:92:7e:4e:b5:e6:80:2c:3f:1f:a6:
af:f5:73:b3:9e:33:67:8b:f4:24:65:96:ec:17:a5:84:32:dd:
a5:9e:88:9a:86:e6:bd:eb:98:83:af:59:be:34:1c:94:6e:3a:
31:14:d9:8d:ce:b4:f0:b3:75:37:eb:b1:ea:79:83:56:f7:75:
b3:3d:da:5a:c8:b5:7c:e5:03:84:4d:0d:d4:79:e6:ed:b0:79:
6d:dc:d2:ff:14:b2:72:b6:ae:b9:24:09:51:db:94:f3:89:a8:
ad:7c:2a:2c:50:12:84:69:f8:48:7d:d4:e5:0d:83:1a:85:47:
3c:02:d0:34:a9:f7:87:41:54:61:d4:2a:85:ea:cb:7d:7b:9d:
8f:46:49:81:7e:73:8d:d2:ce:ec:de:79:9e:96:71:3e:b5:51:
51:8c:27:cc:e9:a7:53:26:59:32:e1:61:19:8f:26:f7:f8:35:
fc:f3:10:83:8d:e2:bb:9d:da:44:83:07:e6:18:3d:9e:bb:27:
ef:88:09:7e:2e:37:10:72:26:9f:fc:33:d7:6c:7e:ba:8f:b2:
11:35:5f:41:44:cc:7b:b9:1c:2a:bd:f7:75:58:a7:5a:d7:9b:
ef:8d:b1:8f:8d:1a:95:f5:53:f7:17:2b:51:83:22:00:bf:77:
8a:49:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:35:56 2025 by rpki-client