Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nfnFxxw8NyIXk3FOzR-w88qpiEQ.roa
File: nfnFxxw8NyIXk3FOzR-w88qpiEQ.roa (raw, json)
Hash identifier: WLcqroDxziaLtYpu3wuhVI/gg/2penEi+E8mNieykPE=
Subject key identifier: 9D:F9:C5:C7:1C:3C:37:22:17:93:71:4E:CD:1F:B0:F3:CA:A9:88:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185DAE2DA7C09FF21EBB4417DB1BDD89091
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nfnFxxw8NyIXk3FOzR-w88qpiEQ.roa
Signing time: Sun 22 Jan 2023 19:09:38 +0000
ROA not before: Sun 22 Jan 2023 19:09:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:da:e2:da:7c:09:ff:21:eb:b4:41:7d:b1:bd:d8:90:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 22 19:09:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9df9c5c71c3c37221793714ecd1fb0f3caa98844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:b4:0f:51:e2:61:86:f8:54:6f:98:bc:a3:
2f:59:5d:21:8b:ad:39:ea:22:7c:e2:a7:9b:7a:e6:
d8:1a:98:0b:2b:23:ab:4c:36:fd:4e:38:26:49:88:
2f:11:42:c8:d2:89:da:5c:79:1a:5d:df:cc:4b:02:
e6:5b:1d:18:a7:ea:11:e0:1b:5f:12:09:c8:54:17:
82:3d:d1:58:e4:0b:3a:af:e4:af:fe:bc:ef:39:06:
2d:0c:e1:20:f7:d9:1d:0b:b9:2f:8a:6b:cd:69:90:
e1:f3:66:b2:c0:68:f0:94:00:87:4e:5a:3d:d7:97:
eb:0d:25:41:f9:d5:d7:b0:ff:80:85:39:97:f8:9d:
f7:54:cb:37:6f:ba:59:ec:6b:dd:e1:79:e1:01:07:
9b:60:fd:86:c5:3c:e0:9b:bd:c5:3a:b8:55:80:4e:
ef:66:2d:c5:e2:58:d1:bc:08:dc:39:f5:7f:e7:1e:
0f:e6:5c:af:14:c2:7c:53:d8:48:1d:4e:40:e3:ea:
5b:ab:32:11:35:b3:e5:2d:29:59:a9:7d:47:22:79:
af:19:23:11:18:53:b1:b7:4d:d9:ac:a6:29:ab:79:
25:7d:74:c6:39:c2:ca:91:15:e2:97:f1:ab:88:55:
4a:dd:34:95:88:a0:a5:06:60:64:af:c6:c6:35:d3:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F9:C5:C7:1C:3C:37:22:17:93:71:4E:CD:1F:B0:F3:CA:A9:88:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nfnFxxw8NyIXk3FOzR-w88qpiEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:fe:da:1c:54:1b:7b:ad:3d:5a:31:59:22:53:e1:9a:8d:a1:
02:57:86:d8:9f:63:d1:00:14:bf:28:87:dd:fd:05:ac:7a:69:
4a:23:19:8b:4f:24:e9:3c:fc:3f:81:76:ea:db:0c:69:e1:e4:
88:08:e3:bd:51:5f:d2:99:ef:4d:c0:3e:8d:93:36:6a:91:95:
bb:cf:ce:8d:11:fe:0b:20:24:97:ac:99:1d:0e:5b:5c:de:14:
0a:66:f1:8b:38:36:b7:b1:a6:9b:96:55:ae:71:d8:49:8f:68:
26:d8:76:e5:09:36:a9:e6:bc:f7:2f:a1:0e:59:ec:58:83:22:
1d:28:5f:bc:a0:04:4f:be:7f:db:72:f2:91:2c:13:30:13:8b:
5e:70:b3:59:bd:f7:74:3f:db:5a:16:6a:fe:dc:de:22:33:37:
03:34:84:0b:8e:06:50:2a:4f:02:21:99:30:bf:c4:77:1b:77:
03:55:93:8e:05:b6:03:7e:e5:d7:fc:b8:df:29:a0:34:0b:a1:
a3:eb:36:57:56:84:72:19:7a:68:f7:2c:39:4b:00:c4:ea:0c:
8f:3b:68:df:32:fa:90:fc:fa:42:f2:37:32:30:d8:88:a2:3d:
bc:2a:ce:30:0a:c1:7e:52:3b:0e:58:47:78:cb:ac:b4:26:aa:
b2:5b:00:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:35:43 2025 by rpki-client