Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/09eI_EQzNp5-geJQ3f4YvUbN86Y.roa
File: 09eI_EQzNp5-geJQ3f4YvUbN86Y.roa (raw, json)
Hash identifier: 9p0ThtLbBKvM3fsAANA6sxi/lfOH//jehXk8zVQeA4Y=
Subject key identifier: D3:D7:88:FC:44:33:36:9E:7E:81:E2:50:DD:FE:18:BD:46:CD:F3:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F88405A9E016A193BFEAA28B081563EF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/09eI_EQzNp5-geJQ3f4YvUbN86Y.roa
Signing time: Sun 19 Mar 2023 06:17:27 +0000
ROA not before: Sun 19 Mar 2023 06:17:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f8:84:05:a9:e0:16:a1:93:bf:ea:a2:8b:08:15:63:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 06:17:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3d788fc4433369e7e81e250ddfe18bd46cdf3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:db:87:3b:b0:f7:c5:36:e7:21:91:4f:f9:
8b:96:ea:a1:8a:c6:8e:2a:b8:e2:de:6f:bb:bd:e8:
94:f6:2f:ed:be:b5:23:62:cb:6a:52:6f:a3:7d:39:
96:78:02:eb:63:f6:da:14:95:28:2c:83:57:c2:2f:
dd:1a:4b:4d:49:75:8b:e6:98:30:9e:3a:fb:40:4d:
de:b0:35:d3:1e:7b:2b:ec:70:6d:27:06:31:73:b8:
bc:3a:84:d7:a7:e8:36:54:97:ca:d5:5a:be:88:de:
10:2e:e5:a4:fc:77:68:83:7d:e7:1f:83:47:9a:17:
dc:1e:2f:48:36:a1:c0:67:b3:f4:f6:bf:85:5f:78:
09:8b:f8:0b:32:95:77:98:ae:3e:63:43:40:4e:b1:
35:5b:73:fd:c1:30:88:61:3a:9f:5a:4d:61:4e:72:
c5:23:24:61:55:38:ad:ba:47:ae:40:a7:4f:2b:1f:
f2:d4:5f:d4:5a:0d:c9:1f:67:a5:a7:30:12:22:98:
28:3b:a4:b1:42:cd:2c:92:86:e0:52:b6:d1:6b:19:
69:af:e1:50:52:8a:e8:0b:ba:15:46:60:01:80:95:
d9:26:fd:a5:0d:9e:76:52:99:ab:cb:2a:f4:b4:64:
4b:42:8b:62:6b:8f:a2:8b:e7:59:36:91:1f:71:ee:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D7:88:FC:44:33:36:9E:7E:81:E2:50:DD:FE:18:BD:46:CD:F3:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/09eI_EQzNp5-geJQ3f4YvUbN86Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:0b:cf:08:9d:52:fe:d3:c1:ed:42:b1:9c:1b:56:02:7d:6e:
cd:5a:01:e3:cc:77:98:69:f9:d3:83:fe:04:35:1f:5e:e4:03:
29:75:09:95:5c:77:25:a7:ca:b4:ba:13:c0:9d:aa:40:8b:4a:
bb:4a:a2:23:84:6b:91:f9:b1:fb:06:2f:3b:7b:09:0e:72:5b:
64:57:41:64:99:b5:70:dd:e8:d8:95:03:d9:8b:21:3d:7b:27:
a2:c8:1c:e5:cd:c7:10:ab:a8:16:af:0b:36:99:30:b0:b5:f8:
aa:05:56:cc:dd:ce:ac:18:41:b6:0e:bc:a4:db:08:a3:44:d3:
0c:5a:31:93:95:d9:de:15:9a:c8:65:af:14:3f:d5:b5:a0:28:
b4:9e:90:24:57:46:49:e4:f6:28:c3:95:55:13:63:58:e3:21:
09:6a:a0:61:78:f2:a7:3b:7b:7e:c5:db:ad:b2:be:bc:32:f0:
dd:ad:28:6e:7e:2c:ba:5c:01:5e:d7:e1:86:6e:c9:7f:1b:e8:
62:eb:0e:3d:6d:2e:b4:2f:ec:9d:1a:b9:8d:32:9d:94:14:1a:
d7:b6:a7:b9:d4:1f:d2:8e:1e:3f:f1:65:b4:bc:78:a6:73:71:
67:39:81:53:20:e5:39:cb:ac:97:b2:f3:2a:92:84:3e:88:e7:
d9:39:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:35:41 2025 by rpki-client