Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NzoeC5vkOvOXu_vwh16GI58hDFI.roa
File: NzoeC5vkOvOXu_vwh16GI58hDFI.roa (raw, json)
Hash identifier: 5rl521OLyYpN9TPQPsrsxJubIpseGzHcBSZPAXEqEsc=
Subject key identifier: 37:3A:1E:0B:9B:E4:3A:F3:97:BB:FB:F0:87:5E:86:23:9F:21:0C:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 76AE371E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NzoeC5vkOvOXu_vwh16GI58hDFI.roa
Signing time: Tue 29 Mar 2022 12:11:43 +0000
ROA not before: Tue 29 Mar 2022 12:11:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1991128862 (0x76ae371e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 12:11:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=373a1e0b9be43af397bbfbf0875e86239f210c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:3d:d7:52:e2:a5:9a:a8:9d:d6:38:03:0e:
67:a1:d7:65:be:1f:fc:c3:f0:17:1c:63:60:f5:4a:
5e:cd:bb:1a:b2:64:58:b8:fe:c0:4b:ef:b6:54:48:
41:2f:2e:6c:f8:b5:55:b5:c0:fb:e1:38:ba:2a:b7:
86:09:aa:32:e0:33:f3:9b:f2:ea:82:f5:56:ee:30:
73:31:97:9d:14:6d:c5:47:91:44:1d:f0:3e:e5:25:
80:b0:48:d9:d9:b7:5f:3e:de:01:a9:9d:bb:99:9f:
b9:10:3f:14:08:42:04:7d:40:91:8d:96:a1:80:1e:
d9:e5:29:f8:a0:9c:b7:2f:bc:05:2a:00:a3:cd:59:
20:63:c5:4a:e1:87:01:5c:8a:30:b0:4f:11:28:8b:
45:79:31:5c:b5:3d:b6:c7:e1:a8:1a:0a:e2:b9:05:
8d:b4:e2:e7:f6:14:e5:1f:05:d6:74:88:0c:e7:11:
94:74:b9:c2:c6:ad:bb:13:e5:04:a1:3c:ca:83:70:
30:2c:61:23:fc:3c:21:e7:45:e6:45:94:88:1a:6d:
11:fd:d9:d9:fd:31:fb:e5:d6:6c:48:41:50:8c:c5:
af:b8:c9:db:43:a0:40:10:b6:0b:32:ef:40:89:17:
cb:8a:09:29:64:a0:00:5c:81:83:a5:07:6d:41:36:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3A:1E:0B:9B:E4:3A:F3:97:BB:FB:F0:87:5E:86:23:9F:21:0C:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NzoeC5vkOvOXu_vwh16GI58hDFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:ba:b4:31:93:bf:70:25:3b:76:24:3a:f1:38:54:b2:fe:0a:
90:85:31:dd:09:bb:aa:a8:ea:21:91:74:8f:27:d9:c5:18:04:
6b:68:28:d0:76:15:e1:7b:04:b8:63:b2:cd:9e:b7:10:85:22:
db:e9:4c:3e:85:08:05:ae:af:32:ab:e3:1c:1a:58:c4:52:df:
8d:bf:f7:18:0a:97:b4:79:97:45:92:d4:a0:90:76:91:9c:78:
1a:41:7e:b0:41:0f:6e:09:9f:c2:7c:2d:e2:23:70:1c:16:5a:
cb:24:be:d3:ce:1d:ae:a4:0d:51:05:0a:c0:64:ca:34:03:c4:
16:16:97:b7:42:63:7e:a1:55:79:b5:45:cb:06:79:60:99:bd:
67:66:5c:8f:1a:0d:08:97:c6:42:b1:de:40:ba:9c:b8:5c:58:
39:fc:f4:8d:4b:81:42:16:51:65:38:a1:cd:9e:d9:33:85:86:
43:30:6e:2a:92:8e:98:4c:dc:e5:b6:d5:40:84:2d:81:1d:e6:
c2:ec:e7:08:46:84:ba:35:5a:33:26:48:ec:c2:71:27:a6:e1:
37:e0:0d:6f:7a:9a:ad:e9:d3:92:c3:0c:63:4b:40:5e:ce:a3:
a1:25:eb:b2:50:70:92:47:13:4a:53:5e:66:0d:8e:ae:94:d7:
ad:8d:1f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:11:21 2025 by rpki-client