Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nbKS2Cr2vOHLUNde2dwmOSWhlhw.roa
File: nbKS2Cr2vOHLUNde2dwmOSWhlhw.roa (raw, json)
Hash identifier: ItLZ+MpTgQ8ertpiu6Tnm/iFw9ZuExxrcuLC4ObymUw=
Subject key identifier: 9D:B2:92:D8:2A:F6:BC:E1:CB:50:D7:5E:D9:DC:26:39:25:A1:96:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854E56AF88260156D4BC48B8B359E35380
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nbKS2Cr2vOHLUNde2dwmOSWhlhw.roa
Signing time: Mon 26 Dec 2022 12:09:41 +0000
ROA not before: Mon 26 Dec 2022 12:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4e:56:af:88:26:01:56:d4:bc:48:b8:b3:59:e3:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 12:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9db292d82af6bce1cb50d75ed9dc263925a1961c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a4:15:10:d8:f8:2b:dd:ac:15:2d:ae:91:3e:
8c:2f:2d:53:f7:8f:4d:ba:b4:5a:5a:1c:55:8b:d7:
82:c6:1f:43:35:30:50:1c:9a:9a:b3:1f:e2:e1:bf:
45:cb:3e:92:8e:42:0c:51:6a:92:9a:f5:96:07:ce:
53:a8:86:d7:4b:df:21:00:cf:f1:3d:49:9f:9b:e2:
5f:cc:70:dc:90:a2:68:33:2c:10:c9:ce:eb:65:6c:
c9:73:1e:db:38:33:53:a5:a3:76:30:c6:2b:5b:e1:
39:48:ac:ef:28:53:22:42:b7:a5:c3:d2:7b:14:38:
f9:38:24:15:9b:fc:02:03:67:d7:69:34:83:8e:11:
96:f0:a8:35:28:11:c9:b9:86:66:60:cd:1b:02:03:
29:0e:4b:b9:c1:7b:9f:b7:0e:0c:f7:bc:f4:58:0e:
cd:06:ee:a9:92:fd:ac:ee:a3:e1:aa:c7:3a:05:5f:
e2:6d:40:64:42:e1:06:b5:52:69:5d:b9:5b:8b:69:
37:6d:0c:dc:4a:41:28:a2:5b:2f:13:0e:54:f9:e1:
81:71:87:15:6e:07:2e:ad:d9:2d:ad:64:8a:82:fb:
34:80:cc:a4:83:9b:e0:e6:ac:e3:eb:3c:d1:ba:47:
21:3c:a4:79:68:9f:16:a7:7f:de:df:85:a4:60:3b:
81:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B2:92:D8:2A:F6:BC:E1:CB:50:D7:5E:D9:DC:26:39:25:A1:96:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nbKS2Cr2vOHLUNde2dwmOSWhlhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:54:a6:89:c1:d6:6e:af:36:41:5f:cc:7c:40:25:24:af:2f:
fc:9b:25:a7:15:0e:d4:3f:84:7f:ad:55:67:60:cd:34:19:7c:
c0:b2:d6:f7:f5:e6:e6:7c:28:eb:80:76:8f:54:a0:3e:a2:07:
39:a8:73:07:08:29:d1:cb:9e:07:ec:c2:65:bd:14:64:1b:49:
e1:46:a7:27:6b:68:b5:7f:a4:51:75:0e:37:51:2a:3b:e1:91:
2e:cc:e6:2a:8a:fe:d4:fc:d4:e0:29:b1:7e:26:4c:5d:98:7c:
f0:90:c7:b7:cf:8e:0b:63:5b:63:aa:7a:db:7c:bd:49:b3:b4:
a9:65:5a:6f:76:c8:a9:35:4b:11:45:9a:82:80:6d:a2:67:5f:
2b:04:b3:ab:77:65:ba:e9:a6:36:cc:b5:cb:3e:59:00:d0:54:
cd:a0:9f:69:b4:1c:d6:b8:56:85:65:a4:30:21:23:b3:c6:e0:
4e:64:fa:fe:e2:05:7a:1d:26:41:62:82:f7:c7:8b:57:1f:5b:
39:2a:9d:fb:02:2b:64:03:1a:e3:56:56:2a:98:b8:23:bf:0b:
12:9f:cd:c5:46:59:cf:54:20:0e:bc:df:00:fa:ee:70:59:9c:
b5:b4:2e:75:6b:46:74:58:b7:27:3a:9b:7d:9e:c0:3c:d7:87:
96:41:5d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:37:23 2025 by rpki-client