Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NdykSOtNyNJY5kxu64eT8mQT7q4.roa
File: NdykSOtNyNJY5kxu64eT8mQT7q4.roa (raw, json)
Hash identifier: Ea9vPvMKV423COF/KdrgQl/5d/bpgscGA8ZBtsvXBgc=
Subject key identifier: 35:DC:A4:48:EB:4D:C8:D2:58:E6:4C:6E:EB:87:93:F2:64:13:EE:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185DD3F171BE5AE1066B2230D80747640EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NdykSOtNyNJY5kxu64eT8mQT7q4.roa
Signing time: Mon 23 Jan 2023 06:09:37 +0000
ROA not before: Mon 23 Jan 2023 06:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dd:3f:17:1b:e5:ae:10:66:b2:23:0d:80:74:76:40:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 23 06:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35dca448eb4dc8d258e64c6eeb8793f26413eeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:7e:62:43:58:83:8d:f8:93:c1:bd:3e:27:
d5:8f:93:ad:6c:c2:b7:74:9b:d0:3f:1d:64:09:ac:
d6:13:97:b4:6f:c9:aa:f5:ce:2c:31:59:07:09:44:
43:0c:7d:f7:43:fc:2c:69:9b:36:0d:03:55:f3:ac:
50:0b:51:87:b2:88:29:0c:da:2c:67:6d:9e:98:1b:
01:32:a7:49:9b:c4:4b:9c:90:94:aa:fb:07:b7:15:
ff:ce:66:71:85:9e:58:fb:3f:97:c4:56:fc:0a:5b:
f5:ce:cb:17:4e:5f:16:4a:e9:85:0d:45:f2:51:1c:
79:53:f4:5e:54:ca:79:22:1f:8c:56:87:45:0b:21:
9a:57:9e:b3:6b:3a:6e:30:e1:35:32:58:0b:9d:fc:
79:d8:6a:18:0e:6a:e7:d2:4f:cd:95:2a:21:19:d4:
83:f5:39:1e:7e:4e:e6:05:09:7e:11:09:1f:79:77:
84:21:21:a3:51:59:43:95:8b:3b:34:a6:96:c4:70:
08:fd:fd:73:9a:b6:a8:ef:02:6b:68:36:a8:8e:d2:
28:a9:ee:d9:70:52:0c:b5:a7:a0:01:c4:32:98:f2:
10:7c:04:04:69:ea:66:4b:c2:83:a1:43:60:9d:cd:
44:5e:6a:05:b9:48:9e:47:a6:96:59:cf:27:38:bf:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DC:A4:48:EB:4D:C8:D2:58:E6:4C:6E:EB:87:93:F2:64:13:EE:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NdykSOtNyNJY5kxu64eT8mQT7q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:fc:f5:19:05:33:c0:6b:15:ea:9e:98:ad:22:44:0d:fd:c5:
ba:0e:3f:96:3b:ac:a7:ba:77:fa:9e:b9:f8:97:36:62:73:1f:
ec:7b:2b:70:27:18:b7:b6:af:5f:d0:73:ec:bb:aa:3d:58:49:
98:ed:71:b3:34:9e:87:24:8a:ff:40:7f:c8:12:4a:7c:a0:ac:
a0:d3:a4:31:96:b2:db:c5:6c:61:4d:89:a1:35:e2:12:25:03:
82:c8:a3:82:5e:dd:d6:c4:cd:27:ff:98:2b:11:9f:8a:16:72:
34:cb:69:ff:0c:a5:36:ff:49:22:d4:df:57:11:f7:85:79:83:
01:dc:e1:a8:08:79:72:82:e4:c9:fc:c1:5f:0d:93:9e:e7:7a:
98:bc:ed:a5:d8:f5:53:40:62:fd:e6:66:a2:58:db:cc:3c:43:
68:d1:b2:41:32:30:3f:c4:0a:53:9f:1c:bb:f5:a5:4d:56:5d:
00:22:b7:3b:a1:e0:f4:e5:49:c0:c2:ce:a1:8c:79:e7:8f:59:
46:dd:55:62:9d:7d:3a:85:54:ca:38:c7:02:0f:f4:f5:2f:96:
36:d1:73:02:ed:02:55:04:8e:2a:65:ae:bf:1f:9e:31:ba:f7:
dd:ba:ce:1e:07:69:78:34:1d:c1:d6:24:f9:3e:1f:ec:db:96:
95:8c:b9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:36:28 2025 by rpki-client