Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NmVCu0i21NKNYm6m_a7kYJWLJJc.roa
File: NmVCu0i21NKNYm6m_a7kYJWLJJc.roa (raw, json)
Hash identifier: BGNTIVsGVaO2AlRI0QJSprtULXUArsG7za8CS3jVgTg=
Subject key identifier: 36:65:42:BB:48:B6:D4:D2:8D:62:6E:A6:FD:AE:E4:60:95:8B:24:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185CF47F4D1C277756F85A5FB96883C5F7E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NmVCu0i21NKNYm6m_a7kYJWLJJc.roa
Signing time: Fri 20 Jan 2023 13:04:37 +0000
ROA not before: Fri 20 Jan 2023 13:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:cf47:cf72/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cf:47:f4:d1:c2:77:75:6f:85:a5:fb:96:88:3c:5f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 20 13:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=366542bb48b6d4d28d626ea6fdaee460958b2497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:75:cf:ba:91:db:29:ee:cc:be:59:f3:23:
7a:c9:9f:10:28:93:7f:ae:70:4f:c5:35:dc:30:e0:
85:8f:e9:04:5a:b4:48:c5:c6:70:8c:8c:8e:1a:3f:
71:1c:b3:cb:67:fb:4a:68:26:3f:7f:d9:e7:47:b6:
5a:8e:28:4c:7b:3d:d2:44:fa:f2:5f:83:4e:85:31:
c9:a6:95:5f:86:d6:e8:d2:a9:74:b7:cd:81:b1:9c:
67:c3:d2:e8:16:17:47:e4:07:72:d8:4d:cc:b9:13:
56:aa:86:b2:31:da:47:e1:06:ba:cd:00:da:bf:dc:
f2:56:c3:ba:bb:48:36:7f:b2:4c:61:56:46:23:e3:
95:84:9e:f6:69:b8:11:f9:78:16:ef:cf:02:00:b0:
b8:a8:62:08:30:bf:08:45:1a:82:d4:43:f6:67:f5:
82:23:2d:41:8d:97:01:99:ce:b8:44:56:d6:33:9e:
09:1f:eb:96:20:32:72:dc:8c:86:34:14:7b:9e:f8:
59:ca:dc:54:a0:26:62:54:14:37:a1:97:11:9c:51:
df:c2:94:1a:a7:ed:77:5e:f3:bb:2d:14:24:a3:43:
a1:fc:bc:3c:5e:7c:7f:a6:f3:6e:c7:2b:a1:8b:1e:
19:df:13:f6:21:88:da:0d:8d:21:f7:0f:f2:ce:8e:
ba:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:65:42:BB:48:B6:D4:D2:8D:62:6E:A6:FD:AE:E4:60:95:8B:24:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NmVCu0i21NKNYm6m_a7kYJWLJJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:67:3f:b7:c5:a2:5d:5e:f6:0c:d2:82:4b:09:02:fe:a5:d8:
d5:0e:dc:d7:f8:8b:e7:ea:59:d1:bf:40:90:cf:29:83:3b:0c:
03:04:ad:e5:88:f9:78:e8:4d:78:a9:62:e6:fd:a0:f9:d5:8b:
09:63:33:56:ab:7b:3f:43:49:ce:cf:0a:64:84:68:4f:21:8e:
10:58:a6:d9:82:c7:63:19:bb:4c:6c:b6:6c:19:e4:1e:ae:14:
22:c4:de:51:03:87:2f:c0:fd:22:7e:3f:14:62:a0:57:26:5b:
0d:eb:78:5e:a2:86:79:47:fb:3c:16:3f:17:bb:f7:b6:ea:67:
47:0b:63:3e:a5:ba:9a:16:38:34:bb:fc:81:55:0f:f4:16:c7:
2a:56:d6:40:9a:b0:8e:6d:5f:4e:13:eb:e6:ed:f5:53:75:0c:
6a:e1:62:79:1f:14:71:4a:75:34:48:00:62:2b:8d:3a:5b:28:
03:0e:33:10:67:67:7f:dc:a6:c1:ff:a1:23:e1:ad:57:a2:3a:
dc:71:d7:3d:c5:27:ab:38:7c:56:af:ca:6c:e6:e7:af:be:6d:
b9:f8:1a:fe:ef:08:d9:44:29:44:87:d8:e2:f4:c4:c3:93:44:
8c:28:8d:88:f2:3e:f1:93:5e:27:cc:c3:39:56:39:e5:65:ee:
05:07:2f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:04:50 2025 by rpki-client