Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nxhOXAQH2mnsYT36_EeA97riLYo.roa
File: nxhOXAQH2mnsYT36_EeA97riLYo.roa (raw, json)
Hash identifier: MIl8VWEGKPZ73oqbH7xHrOleaiSV6vs5JlvfjE3+yTk=
Subject key identifier: 9F:18:4E:5C:04:07:DA:69:EC:61:3D:FA:FC:47:80:F7:BA:E2:2D:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 729FCB14
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nxhOXAQH2mnsYT36_EeA97riLYo.roa
Signing time: Tue 15 Mar 2022 04:11:27 +0000
ROA not before: Tue 15 Mar 2022 04:11:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1923074836 (0x729fcb14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 04:11:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f184e5c0407da69ec613dfafc4780f7bae22d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:2d:2d:43:87:74:83:37:11:cd:50:b2:ec:
94:7d:c2:66:2c:fa:a8:c4:19:44:b2:a1:63:2b:e4:
27:9f:62:62:8c:35:68:92:a3:bf:90:69:43:94:c8:
fb:cc:13:71:1f:b3:ea:96:5b:81:60:b9:3a:c6:bb:
8b:26:88:10:1a:ea:99:0c:81:67:a4:dc:ae:88:cd:
c4:b0:49:e0:53:93:1f:d6:55:7f:bf:08:16:4d:a1:
85:cc:ee:7f:f7:16:5d:23:16:82:eb:c0:68:60:23:
54:68:bf:08:02:ff:d0:7c:4d:48:5c:dc:9f:e0:07:
7e:7d:b3:34:ff:a4:66:00:ab:5d:31:df:62:df:8b:
42:88:a7:6a:74:2b:8f:dd:44:26:15:42:0f:50:ac:
2d:6f:b0:37:88:f9:c3:81:47:36:90:f6:ff:4c:c9:
d4:35:c1:60:53:30:aa:48:2a:01:ed:5d:d1:0f:37:
e2:c1:ed:ea:aa:05:d0:29:ee:41:5e:5d:15:df:a7:
30:89:db:d7:7a:27:1f:0b:a9:67:ba:1d:15:fb:6a:
c1:ad:18:d4:75:bd:1e:5c:41:23:8d:45:0c:7c:2d:
9a:b4:37:db:bb:75:ac:ca:8b:8b:ce:e1:5d:eb:fd:
d7:08:a6:d7:90:5b:36:32:f9:47:01:96:d2:a2:03:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:18:4E:5C:04:07:DA:69:EC:61:3D:FA:FC:47:80:F7:BA:E2:2D:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nxhOXAQH2mnsYT36_EeA97riLYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:5c:cd:5c:cf:ed:b4:35:3a:36:c1:cc:7e:b4:19:a4:67:99:
c4:46:b2:ee:fa:bd:e1:cf:4d:19:62:01:36:7a:7b:82:ce:9b:
96:05:2c:67:1f:0a:27:c0:fe:68:ae:2b:76:b1:84:7d:7d:28:
c3:7d:e1:e6:6c:7b:f2:2b:45:a9:dc:27:d2:0b:66:98:a6:21:
7e:2d:dc:df:db:97:b8:fc:02:1e:f2:05:33:2c:40:55:be:33:
c2:33:b1:8b:c8:ae:29:53:5d:e1:5d:59:af:35:6d:2d:22:5d:
26:98:58:dc:b6:4a:d3:55:11:63:af:0f:38:5c:ad:eb:d1:e3:
ab:63:1a:ed:eb:1d:e9:9e:23:bf:21:31:fd:e1:18:4a:01:90:
55:6c:de:de:35:d9:1c:8c:7e:2a:f2:1e:7f:0c:35:a8:39:f9:
53:02:39:1c:b6:2b:6e:21:16:c5:1f:54:67:aa:0d:f3:63:66:
98:ef:cf:8f:55:8d:8c:fb:8e:50:7d:11:56:73:4a:8b:83:a4:
97:17:69:ee:de:df:c1:38:5a:cf:da:a6:1e:2f:96:48:ac:45:
3e:51:a5:db:9c:0c:17:9a:35:34:c2:6f:85:db:c9:33:6a:cf:
6f:4a:73:d1:73:2a:06:a0:ba:5a:55:80:cb:3a:28:29:ba:9d:
ab:33:e2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:53:36 2025 by rpki-client