Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nk3qOOz7F8j-kJMrhwNzj_aDGAo.roa
File: nk3qOOz7F8j-kJMrhwNzj_aDGAo.roa (raw, json)
Hash identifier: VUDl+Z1qWsnXe5TfEG72TtgG4E0ov10RSNI8ZIOxCAE=
Subject key identifier: 9E:4D:EA:38:EC:FB:17:C8:FE:90:93:2B:87:03:73:8F:F6:83:18:0A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7B223234
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nk3qOOz7F8j-kJMrhwNzj_aDGAo.roa
Signing time: Thu 14 Apr 2022 05:09:54 +0000
ROA not before: Thu 14 Apr 2022 05:09:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2065838644 (0x7b223234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 14 05:09:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e4dea38ecfb17c8fe90932b8703738ff683180a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:08:bc:4c:28:f5:81:81:ed:2f:af:b5:7c:
51:95:23:11:5b:8e:17:fe:77:60:ac:0a:a6:a1:a7:
2f:bd:97:d6:40:4b:8c:59:2b:09:cd:74:b8:a3:3a:
d4:b2:4e:e1:04:b6:ce:22:bd:45:d2:94:e4:72:ab:
e4:0b:3e:75:c9:7a:86:9b:c6:d1:8c:01:58:66:ee:
5f:9b:30:16:cc:03:6e:99:e3:95:a5:47:50:26:33:
05:d2:c3:b4:c5:ec:5d:08:2a:b6:87:25:dc:38:e7:
ca:e0:43:64:cc:1c:96:7f:6e:02:26:27:e6:58:73:
d9:40:db:dd:81:a6:b8:98:94:f3:d1:52:fc:4a:61:
37:2a:f8:32:43:c8:ba:6f:91:75:1f:90:79:aa:e5:
a7:0a:7e:14:da:9f:d7:1a:fe:03:b4:c7:1a:81:9d:
f8:d4:fa:c2:88:18:30:33:5a:fa:86:26:d2:67:a4:
35:4f:84:2c:db:f3:63:63:42:74:91:6f:30:13:ee:
f9:cd:b8:66:d7:23:e9:44:4b:ad:06:3c:82:a7:4c:
5c:b6:42:e5:04:24:e1:ad:03:26:72:43:6a:2d:09:
b4:6e:bc:87:bf:e1:98:0e:ea:81:8c:fe:96:42:21:
48:a5:eb:bf:84:53:84:82:cb:e6:f2:83:3e:8d:da:
ed:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4D:EA:38:EC:FB:17:C8:FE:90:93:2B:87:03:73:8F:F6:83:18:0A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nk3qOOz7F8j-kJMrhwNzj_aDGAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:fc:82:29:df:5c:44:72:a7:af:89:11:5f:aa:dc:4c:9d:f8:
1e:17:06:8d:63:95:8d:3b:cd:b4:6a:8d:1e:44:ce:f8:07:62:
3b:7b:d9:28:fc:82:41:6e:56:77:aa:4f:9a:08:c2:09:b4:3e:
03:b7:55:fa:50:ff:b4:08:8e:49:3c:91:dd:1f:e7:40:b0:72:
59:74:ca:80:15:9b:3d:ac:f1:04:51:65:ef:f6:22:97:a4:99:
31:c2:ae:6c:ac:51:f8:d8:dc:ed:6e:25:d4:59:b7:ef:f6:55:
bb:5e:9a:ee:37:48:21:15:2a:78:c1:35:86:19:b8:ab:75:3d:
7a:f2:f4:78:99:74:c3:9e:8b:e5:96:df:e4:b7:62:01:a3:16:
1d:b3:06:9d:21:43:76:2d:ea:af:9c:4a:3b:2b:ab:71:54:34:
eb:41:67:c3:93:f2:b6:7c:39:85:85:95:83:32:1d:69:de:86:
a4:76:ed:66:1d:81:60:20:4f:94:02:11:29:56:3c:b7:31:f1:
a9:38:e5:13:b4:bb:c2:21:d7:00:ff:81:f5:55:06:55:44:70:
13:c3:0f:34:dd:9a:8e:c8:07:2e:b4:c8:d2:51:5e:6e:8b:36:
d0:9b:31:10:94:1e:70:78:b7:6d:47:c5:08:c2:4c:f7:2d:a5:
50:4e:7e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:04:00 2025 by rpki-client