Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NzvwItelO6Y7QXeuqljRlD_hN4E.roa
File: NzvwItelO6Y7QXeuqljRlD_hN4E.roa (raw, json)
Hash identifier: MIyr/52ZGX7QDZpFFvEMXVv4CYBu8WmLn5O282h8qIo=
Subject key identifier: 37:3B:F0:22:D7:A5:3B:A6:3B:41:77:AE:AA:58:D1:94:3F:E1:37:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A324448
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NzvwItelO6Y7QXeuqljRlD_hN4E.roa
Signing time: Sun 13 Feb 2022 07:08:42 +0000
ROA not before: Sun 13 Feb 2022 07:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1781679176 (0x6a324448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 07:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=373bf022d7a53ba63b4177aeaa58d1943fe13781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:52:de:6f:01:e4:43:63:81:a8:10:a3:91:
2f:1f:d6:b3:4f:72:25:24:0c:1f:3c:62:89:1b:87:
ce:bf:07:50:37:28:72:3a:99:7f:bc:b0:a5:0c:5a:
97:e7:1e:28:d6:3a:d8:d2:e5:71:68:39:81:a3:d1:
e4:b7:cf:e9:21:39:9b:55:00:e7:87:31:4f:68:bc:
64:72:21:df:5c:a2:3a:5b:30:29:b6:01:ca:c4:fb:
3f:4a:c3:3d:16:b7:79:c8:ed:3b:e4:cc:69:26:16:
e0:8d:6e:c3:80:69:2c:89:b3:3f:de:ad:45:2e:a5:
19:c5:f7:67:0e:0e:5b:e6:34:89:45:6f:8a:92:6a:
79:97:0a:b4:fc:32:93:30:a7:97:0e:5f:7e:65:9c:
11:4f:6e:65:73:17:18:6b:cc:6f:98:62:7d:fd:ab:
2f:c0:1e:61:7c:2c:e1:cb:54:49:b0:43:16:a5:5b:
bf:6c:4c:15:ac:1e:69:5a:f8:7f:3e:54:da:8a:84:
c3:34:09:62:31:62:a4:cc:c5:8a:51:58:c9:d4:0b:
5a:81:42:3c:cb:5f:57:e6:a9:92:2f:a2:32:87:db:
2a:78:bd:ea:ce:45:0a:b8:fa:50:b4:f2:5b:de:16:
a5:a7:af:3d:ae:c9:d3:3d:67:df:14:f4:c2:b1:4b:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3B:F0:22:D7:A5:3B:A6:3B:41:77:AE:AA:58:D1:94:3F:E1:37:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NzvwItelO6Y7QXeuqljRlD_hN4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:bb:c7:61:77:da:79:a5:b7:68:d2:1c:eb:a9:6b:54:68:b1:
8c:2a:c6:0f:cb:e5:ae:fb:18:11:e1:5a:eb:ca:c0:39:ee:87:
a5:7a:a8:92:c8:30:e0:d2:71:2e:d3:f9:ac:b3:80:cc:06:41:
97:29:2e:12:d0:69:3f:a4:b6:4f:4a:f6:f9:5f:54:bf:44:06:
85:22:d5:0f:1e:4f:7d:10:c9:ea:26:4a:a6:2d:1e:1b:cd:fb:
c1:fd:95:65:ef:9b:f8:22:b7:f2:ce:b6:8c:87:66:94:7a:f8:
54:b0:02:6b:9e:85:ce:9f:27:c0:8f:1d:43:c5:94:62:4c:3e:
0f:40:84:e7:60:b3:cf:af:f2:92:e4:66:03:1f:cd:96:f8:34:
a2:af:fd:ed:f7:d1:b0:57:16:88:27:f4:6b:00:ef:c7:21:e4:
67:e9:47:cc:f6:28:ee:ed:61:ce:f9:34:90:85:53:00:40:65:
57:05:a6:34:ac:d2:84:c4:01:7a:30:b1:f1:a2:46:2a:36:b4:
d5:ca:b5:2d:83:02:3e:0d:08:20:eb:e5:87:93:de:36:12:f1:
18:99:ea:a0:45:55:88:7b:6a:e2:98:95:09:ba:0c:c4:16:34:
79:97:81:05:4a:45:28:c4:a7:66:d8:e5:1a:12:62:59:1b:d2:
bb:5d:2f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:23:34 2025 by rpki-client