Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R-NSNcHR5xM9MaiY4VmaG4j1PbM.roa
File: R-NSNcHR5xM9MaiY4VmaG4j1PbM.roa (raw, json)
Hash identifier: klH4RPO948WqFg5+IKdLGKZt2zkzADabiKw9rvlWdyA=
Subject key identifier: 47:E3:52:35:C1:D1:E7:13:3D:31:A8:98:E1:59:9A:1B:88:F5:3D:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188CA8834C3A06F536B7BF822CB823B2EFE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R-NSNcHR5xM9MaiY4VmaG4j1PbM.roa
Signing time: Sat 17 Jun 2023 18:05:03 +0000
ROA not before: Sat 17 Jun 2023 18:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:188:ca87:6cf1/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ca:88:34:c3:a0:6f:53:6b:7b:f8:22:cb:82:3b:2e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 18:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47e35235c1d1e7133d31a898e1599a1b88f53db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d0:e7:d5:cb:5f:84:b4:9b:49:77:e1:74:ab:
13:97:4e:64:0b:92:34:0d:b9:20:f7:49:9d:de:20:
1c:97:b8:71:e8:cf:65:91:bc:a2:ba:7c:91:a7:78:
1e:3e:1a:5d:ad:6b:8a:e4:72:2a:66:af:32:89:e2:
43:6b:da:91:5a:2f:51:10:a5:13:fc:90:b6:ed:89:
e2:75:ea:6f:e6:f5:98:9b:38:c7:4c:e0:bf:40:0b:
33:38:3c:47:97:29:46:2e:c1:ce:f5:c6:12:bd:d1:
9e:73:84:75:93:1b:00:00:0a:10:87:0e:97:80:c8:
64:2c:1d:4c:94:5a:b7:14:0d:d6:63:43:c4:c1:60:
cc:ca:e5:c3:75:40:4e:de:73:17:29:a4:0f:58:5e:
4b:e9:b9:8c:71:1a:d6:2f:14:58:2e:b7:af:98:0f:
cb:f7:ad:16:ec:a3:bc:e4:89:e0:ff:38:52:e5:5c:
1f:87:04:f4:0f:d5:fe:bd:2c:71:7e:48:e4:27:fb:
4b:5b:dc:66:41:49:c2:07:ba:78:ed:ba:2b:8d:34:
14:63:c4:59:17:4d:44:49:93:dc:b0:86:71:0f:e4:
2f:64:b8:42:9a:be:c0:02:9d:30:b0:be:df:e9:16:
93:11:d9:bd:0d:d8:14:d1:11:a0:30:bb:3c:ef:fc:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E3:52:35:C1:D1:E7:13:3D:31:A8:98:E1:59:9A:1B:88:F5:3D:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R-NSNcHR5xM9MaiY4VmaG4j1PbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:22:68:65:f8:76:b2:eb:f8:92:99:fc:9a:9f:a4:b6:ca:95:
2b:ac:ea:62:d2:17:1e:7d:93:4d:ed:19:d1:91:d8:15:2a:06:
c9:90:67:df:3a:d0:30:94:1e:32:81:91:19:7c:9a:e7:98:e2:
3a:fd:55:8f:e0:43:58:0f:f4:4e:da:9f:f9:16:0f:3c:af:c3:
08:61:45:69:75:cd:0d:3a:4b:30:99:ec:0b:07:13:c9:b0:1d:
bc:3b:78:72:02:4c:d0:16:c5:99:2a:b4:04:6b:c1:21:89:ea:
a1:38:af:45:b0:6f:b3:d9:00:bc:1e:d5:53:ad:f8:c2:b0:18:
2f:3c:3f:a9:e9:bf:cb:b3:f5:8b:07:93:00:4c:9e:66:27:51:
15:21:14:e6:43:05:d8:ab:fa:02:f2:0a:25:51:51:c2:6e:cd:
45:83:3b:52:0a:e1:90:ba:81:1b:ad:64:40:3b:04:5b:a3:50:
c2:07:a8:2d:c9:85:03:3a:4f:1e:3c:da:7c:31:1b:bc:04:10:
27:5d:8d:8a:30:fd:9b:3a:15:fa:b3:ca:50:38:81:c2:87:0a:
c7:dc:97:61:1f:d9:e1:91:fa:4d:be:0a:6b:7d:c1:e6:a3:db:
c2:27:fd:f3:20:31:ff:1c:0c:57:b6:e3:1a:b4:30:07:c6:de:
1f:f4:69:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:29:10 2025 by rpki-client