Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nCV5DVt_gAD1zaYqE7Rbt8c_QXc.roa
File: nCV5DVt_gAD1zaYqE7Rbt8c_QXc.roa (raw, json)
Hash identifier: V7b13IHSuVHPuWkuIrUxek0/hn/ZoipKcxHykjkBDyY=
Subject key identifier: 9C:25:79:0D:5B:7F:80:00:F5:CD:A6:2A:13:B4:5B:B7:C7:3F:41:77
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182D55A61A50867975A51FE087FB995C0BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nCV5DVt_gAD1zaYqE7Rbt8c_QXc.roa
Signing time: Thu 25 Aug 2022 14:14:06 +0000
ROA not before: Thu 25 Aug 2022 14:14:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:5a:61:a5:08:67:97:5a:51:fe:08:7f:b9:95:c0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 14:14:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c25790d5b7f8000f5cda62a13b45bb7c73f4177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8e:c9:58:7e:33:a6:03:c1:66:8a:f8:53:b1:
06:c2:1a:83:a4:4d:10:4c:19:28:f4:9b:0c:dc:0d:
a6:c5:c7:be:96:90:de:70:43:ca:6c:62:a0:20:3c:
df:ee:6e:91:2a:ae:ce:e4:59:33:c0:ae:d7:74:ed:
3a:d7:70:1d:10:7b:9e:d8:34:2c:bd:31:20:eb:e6:
d2:d8:34:98:71:24:b8:d0:37:78:c0:7c:e0:16:c8:
0f:7e:70:b1:21:f4:7d:6b:4d:1b:d8:63:d0:c6:81:
40:e4:7b:fb:78:c0:ec:ea:e1:8e:8e:2d:ef:18:66:
bb:e1:bf:51:e6:e4:e5:30:0e:d4:fe:8e:dd:fa:a4:
9c:b9:85:e4:44:c1:1a:bf:b6:2c:32:08:bd:1b:06:
17:b2:d6:c6:af:4a:53:ec:74:d7:db:b4:d6:03:27:
dc:f5:29:ce:98:3c:43:4c:10:32:95:a9:ab:58:5e:
7a:8f:7d:2e:bf:23:f2:ca:8b:4b:ba:16:c6:0a:7a:
93:66:a4:5c:ae:7f:5b:1d:4a:45:2f:ae:1e:32:78:
3b:c9:03:d7:59:6f:8a:c7:d3:15:51:8e:d6:4c:cf:
39:16:17:62:3e:56:57:15:50:44:44:2c:b5:d8:7f:
f0:b2:50:bf:29:5d:d4:e3:3a:fa:82:09:48:f7:e5:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:25:79:0D:5B:7F:80:00:F5:CD:A6:2A:13:B4:5B:B7:C7:3F:41:77
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nCV5DVt_gAD1zaYqE7Rbt8c_QXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:f0:5d:89:98:79:5b:c1:4d:6e:12:5b:8d:a0:ba:55:ef:0e:
7b:03:69:cb:5d:d5:32:d3:f8:4a:b2:5d:67:6d:0f:d1:91:5a:
a1:ef:33:d0:06:63:4b:b9:2c:ba:f7:1d:08:08:ea:7a:d4:8d:
ef:5c:a9:1c:95:c0:d5:23:f3:7e:4b:23:13:44:cb:f6:48:d9:
fa:b1:36:bb:06:35:bb:24:bc:36:90:8f:bc:5d:d0:cf:70:4a:
22:e1:c0:e2:ca:31:4e:58:84:12:95:51:d8:45:38:cc:ee:18:
96:32:71:04:d0:e3:5a:af:42:cd:69:f8:c5:c8:ed:48:1d:1a:
1d:a4:0f:b9:66:c6:7c:62:71:14:c9:6b:e3:b8:72:0a:3b:93:
fc:1e:91:22:c1:75:20:10:b3:11:7d:80:79:18:ec:1e:77:fb:
41:c3:7b:b5:63:df:31:95:1b:c1:a5:b3:f6:f9:51:81:ff:a0:
f4:33:9c:c9:a7:44:83:f9:93:b2:cc:6a:18:c4:9f:f6:e2:5f:
70:24:e1:ba:4a:6a:23:a1:3d:7e:6d:90:1a:78:eb:c7:d8:78:
1a:ec:eb:82:39:d0:09:0b:fb:26:b5:3f:21:88:0f:f0:34:d5:
bf:23:0a:ea:29:4d:61:21:bf:e2:f0:1c:ed:e7:0f:e3:c1:bf:
ac:87:50:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:09:40 2025 by rpki-client