Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nc0-nWZWZxbGELNKWbHbYm2VApI.roa
File: Nc0-nWZWZxbGELNKWbHbYm2VApI.roa (raw, json)
Hash identifier: +pvEtWgBQbfG3/3t9znzdCF5YT93CvnFDMs+EP2TBLY=
Subject key identifier: 35:CD:3E:9D:66:56:67:16:C6:10:B3:4A:59:B1:DB:62:6D:95:02:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018236C73DB02E29F4E8452D4ACF382A761C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nc0-nWZWZxbGELNKWbHbYm2VApI.roa
Signing time: Mon 25 Jul 2022 19:13:23 +0000
ROA not before: Mon 25 Jul 2022 19:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:36:c7:3d:b0:2e:29:f4:e8:45:2d:4a:cf:38:2a:76:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 19:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35cd3e9d66566716c610b34a59b1db626d950292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:57:a2:b7:99:89:9f:65:33:1a:be:39:5d:
3d:97:f4:25:d3:72:22:d0:58:e1:98:41:c6:9b:51:
a9:9b:95:dd:3f:81:65:0b:c5:e7:08:63:65:e8:c1:
ed:75:78:c4:41:89:ad:02:4d:3f:1b:2b:68:b0:44:
ae:93:b5:9d:11:13:35:03:a5:12:a8:16:c4:27:94:
6c:20:75:93:b1:a2:7f:a9:1a:d6:fe:67:19:f5:a7:
eb:d4:65:5a:b3:21:43:56:4f:2e:eb:5d:3d:52:49:
35:d3:c6:57:5d:77:33:4c:83:80:e4:e4:dc:45:41:
48:d9:82:cf:b7:6d:3a:5c:f1:89:c3:bc:28:22:0a:
41:ed:d8:78:60:e5:b9:c6:62:30:96:ae:36:d1:01:
6b:f6:4a:b8:20:cd:47:c8:05:01:e6:f3:99:3f:d1:
33:b7:65:82:da:51:ca:8e:c9:f6:b5:22:df:d4:ca:
a2:25:5d:9f:b6:6e:6c:50:6f:6f:73:33:dc:16:d7:
59:49:27:1d:91:fd:49:c9:34:ba:c6:fc:96:ab:3e:
70:b9:5e:11:97:d9:cb:fa:3f:3d:c1:e7:6f:1c:b8:
ba:84:d9:92:9d:cc:7d:e0:d4:7f:d8:8c:97:cc:4f:
ea:c4:42:8f:be:b0:b4:d8:e7:92:19:ab:9a:83:42:
df:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CD:3E:9D:66:56:67:16:C6:10:B3:4A:59:B1:DB:62:6D:95:02:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Nc0-nWZWZxbGELNKWbHbYm2VApI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:79:e0:54:e2:01:e6:9f:65:a8:33:e4:de:0a:a1:96:55:ff:
3e:86:42:20:83:8b:5f:fb:34:c8:f2:a7:d2:e1:0a:13:77:c2:
9e:44:c8:c2:21:1e:2f:75:89:0a:22:23:95:a3:92:1c:10:91:
c5:1a:98:26:3b:f8:ab:b3:f7:bc:50:70:b5:9f:8f:c0:22:86:
f8:3d:e0:f4:90:69:9e:de:b8:28:ac:8b:51:b9:91:85:de:f4:
2d:19:23:74:02:84:ca:aa:b2:de:de:ae:f1:d4:a6:b7:87:2c:
69:13:68:5f:5c:14:f7:e4:c3:2c:47:a9:f2:c7:93:11:78:5e:
88:8a:03:5e:f0:48:f2:02:ed:f2:e7:66:39:62:bd:0c:b7:63:
25:49:bc:4f:90:f6:d6:60:98:32:ae:51:fe:53:c1:2f:a7:06:
c6:18:d6:fb:a5:59:ed:6b:31:3c:76:3d:10:c3:dd:c2:99:62:
dd:f9:4e:53:12:de:5e:0c:fb:c4:95:7c:11:3b:07:08:d6:60:
d6:cf:31:ef:53:db:ed:16:28:59:06:dd:cf:eb:0e:82:ee:82:
fe:82:a5:72:07:5f:8e:37:a1:f5:40:04:30:36:c8:49:6c:d3:
47:67:b1:30:1b:0e:22:a0:1c:1b:8e:e2:2e:5d:3f:3f:7a:57:
ce:b0:4c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:19:12 2025 by rpki-client