Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nbmZWci4ax4mm0yy6oQf9HThFH0.roa
File: nbmZWci4ax4mm0yy6oQf9HThFH0.roa (raw, json)
Hash identifier: +SCdiYtZg6Qo1e4xxrfFUk9k2Y00K9WEV4xpAbLT7Sw=
Subject key identifier: 9D:B9:99:59:C8:B8:6B:1E:26:9B:4C:B2:EA:84:1F:F4:74:E1:14:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878BB1DB6F46CF2BDE98976C3945F12DFE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nbmZWci4ax4mm0yy6oQf9HThFH0.roa
Signing time: Sun 16 Apr 2023 20:11:41 +0000
ROA not before: Sun 16 Apr 2023 20:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8b:b1:db:6f:46:cf:2b:de:98:97:6c:39:45:f1:2d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 16 20:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9db99959c8b86b1e269b4cb2ea841ff474e1147d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:0c:97:57:eb:a4:4d:05:3a:91:7f:67:81:
44:ac:f0:d9:0f:f1:04:97:f5:15:1f:76:00:49:58:
c9:9a:c8:6e:b4:b5:24:36:c7:21:fb:48:c3:4e:4a:
f3:e6:8b:2b:2d:60:52:14:38:14:ac:76:8c:3f:7e:
5c:10:e0:4a:33:e4:a7:22:e4:43:d4:b1:93:3d:25:
13:0a:30:e3:3f:7e:11:8e:a3:7d:ac:19:fb:91:86:
a4:6b:05:3f:05:67:a0:6a:7f:fa:c0:9e:a6:f0:9e:
87:f5:26:e0:19:35:57:b5:c0:9f:a7:3f:6a:f9:c4:
22:41:fc:2e:87:d2:f5:f6:a8:d7:29:f4:a4:c1:d4:
85:8e:f9:59:6a:0c:43:46:a1:dd:5e:54:2e:98:03:
e0:81:3b:6a:9b:59:9e:55:ac:4e:39:6d:fc:14:c6:
11:6a:5c:8d:19:fd:9f:41:55:4f:a8:22:87:c0:2d:
ff:0a:ff:46:da:0c:1d:09:74:bb:5e:5a:07:3e:f4:
18:2c:a4:38:22:59:0d:17:c4:ae:43:44:31:ea:76:
15:9c:21:0a:fe:d5:ad:09:fe:8d:7f:1b:c0:92:06:
ef:d4:80:22:08:83:4d:e4:37:8b:d2:ef:c7:d5:f4:
0c:ff:bf:b3:c8:3b:4f:42:f0:b7:cd:02:08:8f:8b:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B9:99:59:C8:B8:6B:1E:26:9B:4C:B2:EA:84:1F:F4:74:E1:14:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nbmZWci4ax4mm0yy6oQf9HThFH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:8e:d1:96:4d:44:e8:dd:d2:26:ae:09:4d:9b:d5:c9:cf:e5:
ec:18:d9:5f:8b:f3:e1:5f:41:8a:bc:8c:7c:ed:5b:68:b9:0d:
0b:b2:76:b0:aa:12:71:25:b9:16:d1:51:3c:e3:eb:77:b5:68:
c3:58:1d:b3:1f:dd:03:bd:16:54:dd:62:a7:5f:d0:af:d9:ed:
ba:04:3e:f3:5f:9d:ec:8b:9f:f9:2e:50:ff:24:01:72:04:38:
ef:92:56:ec:87:22:dd:63:6f:ef:07:6d:e8:e6:75:ef:bb:d1:
29:a6:bc:e8:76:ec:f5:82:52:18:e0:e2:38:ca:57:78:27:8d:
4e:27:ef:85:21:54:3f:ad:12:b1:66:d0:d1:6c:4c:31:07:70:
3a:92:a6:4a:25:f1:34:e9:12:97:12:e5:49:3f:6c:85:97:6b:
df:51:e4:f9:92:44:1d:6f:46:9a:37:a1:b3:4d:ea:77:2d:7c:
53:57:14:0a:eb:33:fa:89:75:b4:3b:e5:e3:85:0c:0a:ee:b3:
3e:fb:dc:4f:41:ce:15:a0:b2:d4:58:60:eb:38:45:ab:5f:13:
9c:8a:e2:7c:50:ab:d5:51:60:be:0d:4a:fb:de:56:2d:c3:73:
55:a3:d1:1c:0a:21:76:1b:79:5e:19:46:06:9e:37:3c:55:00:
9d:05:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:53:11 2025 by rpki-client