Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nx_Rkv22hi9JHAwX9K9w0-58wuM.roa
File: nx_Rkv22hi9JHAwX9K9w0-58wuM.roa (raw, json)
Hash identifier: LjTjsVCkLYUx1hxQNiSnIWPLH88VMq7rg1s/+JC8Bjc=
Subject key identifier: 9F:1F:D1:92:FD:B6:86:2F:49:1C:0C:17:F4:AF:70:D3:EE:7C:C2:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68378851
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nx_Rkv22hi9JHAwX9K9w0-58wuM.roa
Signing time: Sat 05 Feb 2022 19:09:29 +0000
ROA not before: Sat 05 Feb 2022 19:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1748469841 (0x68378851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 19:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f1fd192fdb6862f491c0c17f4af70d3ee7cc2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:cd:41:67:4c:88:c0:77:74:10:03:cf:d1:
93:94:32:ab:ed:30:b4:74:85:76:5e:ca:20:cb:94:
f5:72:33:a2:88:4a:ee:93:7e:02:16:a4:fd:d9:82:
e9:3a:86:c9:0a:cf:c8:ea:43:8b:5b:49:2b:10:85:
e3:5a:d8:c3:e3:22:c2:4a:f3:38:f5:19:49:7d:3c:
ea:6d:5e:39:58:a3:16:f9:a7:76:c3:56:be:06:25:
13:f2:49:bc:ab:83:00:c6:c6:55:19:ea:f9:b8:e0:
7f:5c:b4:25:cb:09:e1:25:48:20:e1:6b:1d:ef:cb:
1b:89:da:cc:07:2c:05:6e:f1:c4:86:12:44:49:cd:
ec:5d:55:a1:99:e2:46:c7:c3:d1:70:7d:71:40:c3:
13:51:c5:e5:07:47:ce:26:2d:78:35:d0:a8:04:89:
aa:55:9f:80:8c:aa:68:d7:49:92:12:3e:09:53:47:
68:41:a9:45:45:88:ad:9b:c3:73:0d:f0:f7:1f:1f:
eb:c6:30:a9:9a:8c:a0:b2:4c:fd:cf:a8:b5:d4:39:
7c:06:a6:77:40:89:ba:2b:5f:45:2e:76:75:ba:fb:
43:3d:d6:a2:d4:c0:47:06:05:08:60:f9:df:44:f8:
d8:98:25:f7:3a:83:23:50:07:b3:44:ae:0f:7e:0b:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1F:D1:92:FD:B6:86:2F:49:1C:0C:17:F4:AF:70:D3:EE:7C:C2:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nx_Rkv22hi9JHAwX9K9w0-58wuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:77:34:32:79:dd:f7:bb:e8:ed:e7:7f:bb:f5:f3:f0:66:16:
ba:90:31:48:0c:33:9c:ed:69:9e:b8:96:4e:17:c9:a0:68:17:
0b:50:93:b1:13:92:95:57:6f:c0:b3:3f:55:ab:60:a7:a4:f5:
dc:d9:ef:98:bd:fd:aa:b8:ca:c3:7f:af:8e:74:d2:69:4f:6c:
10:26:54:4b:c4:42:90:c3:60:a7:01:43:46:47:38:98:64:7b:
5d:bf:d6:9d:c7:0b:50:63:a8:a0:4a:2d:87:d1:ad:d9:4b:1c:
6f:40:94:70:93:4d:55:e6:5d:e3:ca:53:ca:26:2e:1e:57:72:
2f:98:c8:76:f2:83:03:8d:d1:43:c9:51:fc:1f:aa:3b:2b:70:
13:ca:cf:fd:e9:88:c9:b9:0d:e8:e5:a7:60:c9:3a:e2:31:39:
76:21:24:59:87:a2:f9:8d:74:e1:c3:b5:83:66:1c:60:10:6d:
15:95:31:e8:f8:fc:d4:1f:f6:bd:b1:9c:9d:82:ef:35:0c:4f:
45:0b:c9:63:0c:85:54:74:40:48:42:73:a7:f0:4c:1a:ee:ec:
d0:cc:9e:85:e8:29:88:6f:dc:2e:2b:03:e4:fd:75:f1:be:7e:
08:37:59:01:c8:ad:2b:cd:0d:87:b4:63:5c:21:d4:55:d6:61:
93:f9:46:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:50:48 2025 by rpki-client