Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NShT8Fo3OCoC1SvWoxnvR9zbZR0.roa
File: NShT8Fo3OCoC1SvWoxnvR9zbZR0.roa (raw, json)
Hash identifier: xCd6gUO2Mewn2moQIfYbniZC2HQJdKnrBdES7x1Q+Ho=
Subject key identifier: 35:28:53:F0:5A:37:38:2A:02:D5:2B:D6:A3:19:EF:47:DC:DB:65:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DD0713F8B2D5ABB0160D86526E52BBCF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NShT8Fo3OCoC1SvWoxnvR9zbZR0.roa
Signing time: Mon 13 Mar 2023 22:11:13 +0000
ROA not before: Mon 13 Mar 2023 22:11:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:dd:07:13:f8:b2:d5:ab:b0:16:0d:86:52:6e:52:bb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 22:11:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=352853f05a37382a02d52bd6a319ef47dcdb651d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:e6:bf:7f:27:81:1f:f2:ae:d8:15:3b:2f:
49:80:4a:11:92:9e:92:06:bb:f0:cd:ef:cc:22:92:
57:54:dd:e7:f4:81:fd:15:04:87:90:37:93:5f:1d:
c9:e5:1a:15:e9:6d:69:42:d0:21:a2:fd:72:5a:d7:
80:5f:31:73:37:74:f9:d5:45:e7:83:68:df:f2:ba:
34:9c:a9:d4:b3:d1:1c:6c:8e:47:60:75:54:6a:2d:
80:6c:a5:5c:4d:c8:9d:ca:98:8d:79:b3:32:dd:43:
b4:00:93:a7:77:c4:c6:30:d6:f9:1e:17:e5:22:1b:
19:42:45:a4:4e:4e:8a:04:5f:18:9d:53:cb:f3:6b:
14:93:1f:c3:90:9e:9f:da:93:8d:72:2c:49:2d:a7:
ab:73:a5:d1:d9:92:86:e8:6f:19:3e:bc:b6:89:2e:
16:47:33:63:6b:74:c7:9b:5c:e6:72:50:33:ff:63:
f7:88:9e:4c:54:fc:d4:c8:b4:fa:1e:f4:ce:54:ff:
43:cf:f7:09:64:e9:3e:63:e9:2c:79:ae:ca:68:fc:
5a:dc:a9:63:18:f3:f1:79:d6:f2:2f:99:82:31:5d:
e7:03:28:52:de:b2:fd:94:b7:d4:88:17:73:0f:03:
41:7d:f0:7f:f9:2a:79:74:d6:69:fd:77:18:2e:26:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:28:53:F0:5A:37:38:2A:02:D5:2B:D6:A3:19:EF:47:DC:DB:65:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NShT8Fo3OCoC1SvWoxnvR9zbZR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:83:a4:e6:dd:37:5b:8f:ab:bc:5c:69:77:cc:a6:b6:40:f2:
60:49:9b:3e:10:8f:16:d3:5f:6c:28:5b:8f:0e:46:19:33:86:
c9:eb:44:9f:a5:ed:eb:2e:13:a9:85:62:d6:bd:3e:97:f3:95:
09:ba:a8:73:29:8b:e4:6c:75:2c:84:82:1d:2a:02:ee:fd:b6:
ce:13:b8:7e:17:da:f6:37:e6:e0:44:b1:b2:03:e3:1b:1e:b1:
fc:21:f5:f1:f3:09:38:9d:69:08:0a:79:de:01:c6:99:35:f8:
e1:bb:24:90:8a:b4:19:a8:fd:b8:4b:78:03:38:88:e4:ea:73:
2f:c2:fd:9a:64:c6:e0:b1:27:10:c2:e4:be:39:b1:3d:ca:65:
23:47:0a:dc:95:d7:5f:36:f8:f5:bb:61:85:2f:f3:3b:e2:cc:
3a:fb:62:d8:c3:dc:2e:25:dc:48:16:19:4b:f4:78:5c:75:4b:
32:a4:76:57:d2:bb:eb:2b:22:d5:83:0f:96:ef:8e:b1:df:48:
93:e7:24:a9:c7:71:b0:f9:5b:37:9f:93:67:21:c1:fc:ff:02:
b9:7d:bc:81:fa:bb:17:ce:30:24:26:64:c4:be:59:c7:59:e9:
f7:3f:29:eb:46:ba:b1:57:e7:ba:57:dc:32:13:21:62:39:9a:
d3:e1:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:18:04 2025 by rpki-client