Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nWb74pk_4nu2RbN15WtKANn74DU.roa
File: nWb74pk_4nu2RbN15WtKANn74DU.roa (raw, json)
Hash identifier: PCaTwd3JaOBetz5ITDgZtFc7fO1ODPUuwMRAsNwR/H8=
Subject key identifier: 9D:66:FB:E2:99:3F:E2:7B:B6:45:B3:75:E5:6B:4A:00:D9:FB:E0:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 76BFF528
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nWb74pk_4nu2RbN15WtKANn74DU.roa
Signing time: Tue 29 Mar 2022 18:09:31 +0000
ROA not before: Tue 29 Mar 2022 18:09:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1992291624 (0x76bff528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 18:09:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d66fbe2993fe27bb645b375e56b4a00d9fbe035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:32:67:f9:68:c0:da:6e:de:0d:38:37:24:44:
56:75:be:7e:72:fd:ca:40:24:be:4d:e8:b2:62:98:
80:f4:32:72:2d:99:6a:4e:2b:30:f2:ca:f5:e7:4b:
d5:70:ae:c1:80:33:a9:a0:aa:34:e0:e4:af:a2:2f:
f6:79:cb:05:5a:cf:ed:b7:ce:ac:2c:59:eb:7e:f8:
72:10:08:7c:7e:56:12:6c:4f:92:b8:a0:2a:50:f6:
0e:e5:c9:6e:d9:46:50:40:c6:90:d8:63:1e:60:31:
4e:4b:ab:c7:dc:37:74:c9:38:38:51:75:c5:99:53:
9c:2c:cd:d0:66:fd:24:6b:64:81:fe:c2:42:8d:fa:
f0:e3:88:57:d0:66:35:50:95:9d:bb:c7:c8:77:f4:
64:30:fe:1a:3a:d7:6b:8a:87:c7:52:65:a2:9b:4b:
df:24:3c:ba:c1:f0:38:3f:b3:10:57:38:43:dc:13:
55:2c:45:95:4e:fa:b4:41:45:a1:2a:56:98:01:e5:
15:3d:71:4b:af:38:ef:fe:13:57:b4:a6:ee:64:45:
30:c9:28:0b:72:c9:86:7e:b2:c1:d1:50:d6:0a:24:
04:37:57:0f:dc:e0:39:32:4c:ee:e0:72:31:b5:f1:
eb:eb:03:16:48:5e:44:db:4e:19:7d:bf:7c:ef:d5:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:66:FB:E2:99:3F:E2:7B:B6:45:B3:75:E5:6B:4A:00:D9:FB:E0:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nWb74pk_4nu2RbN15WtKANn74DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:c2:e0:96:47:4e:6b:3b:8b:a7:9c:2e:19:82:7d:28:0c:de:
37:80:c3:00:ca:88:d3:12:f1:b5:63:d4:94:e2:f2:4f:6d:07:
10:23:72:a9:f4:78:82:f6:c1:7e:a0:0b:5d:8e:82:77:32:89:
02:d8:84:af:e1:1f:00:75:59:c4:64:45:77:c1:3a:d9:0a:5f:
fc:6c:d9:4d:4a:a1:42:ae:a8:f2:e9:a4:fc:cb:f9:f6:3e:f9:
fc:4d:dd:fa:9a:eb:37:30:f1:56:83:7e:54:27:39:7b:c9:40:
de:dd:a5:49:b5:fa:95:84:0c:b5:39:0b:df:d3:f0:b5:e5:bc:
4a:f1:6b:e6:1b:5b:b0:e9:c0:96:8a:b5:73:0f:2b:dd:fe:38:
48:29:36:15:7a:3a:fc:f6:fb:43:63:8c:bb:bc:f0:04:e9:ad:
c3:7f:64:3b:64:cb:74:77:34:ae:31:e9:ee:d8:a0:e8:5f:50:
76:93:c6:55:6a:ed:29:c4:01:19:42:14:f8:89:6a:41:48:af:
e0:2a:c5:de:58:41:de:87:1f:31:f2:ac:08:c7:0f:85:03:ee:
5a:8f:14:b7:68:70:58:28:d9:9e:92:32:d9:aa:35:0d:d9:5c:
26:95:1c:69:c0:5f:5b:f1:f1:b8:17:53:93:19:5e:8d:18:30:
be:27:41:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:36:29 2025 by rpki-client