Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Ki9hkL-8LvqQZ7F7aMCqjWn60I.roa
File: 0Ki9hkL-8LvqQZ7F7aMCqjWn60I.roa (raw, json)
Hash identifier: l33cMh/kDX/JMInSCGiiW2I63oGAWAryNGrKqonoits=
Subject key identifier: D0:A8:BD:86:42:FE:F0:BB:EA:41:9E:C5:ED:A3:02:AA:35:A7:EB:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868FC2362E976ECEE554E76830B221E18C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Ki9hkL-8LvqQZ7F7aMCqjWn60I.roa
Signing time: Sun 26 Feb 2023 22:05:15 +0000
ROA not before: Sun 26 Feb 2023 22:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:8fc1:4803/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8f:c2:36:2e:97:6e:ce:e5:54:e7:68:30:b2:21:e1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 22:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0a8bd8642fef0bbea419ec5eda302aa35a7eb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:06:e1:aa:db:13:68:01:15:11:e1:dc:1b:19:
7e:f9:5b:7a:b2:fc:23:1f:b4:64:c4:30:03:c3:2d:
8b:fd:35:fb:f8:e1:60:de:6b:b9:7f:5e:7a:ca:21:
b2:38:fc:99:aa:46:b5:cc:ec:df:14:d0:98:82:e5:
32:ab:fb:7f:fd:54:f9:3b:0a:8b:ea:e0:9a:5a:80:
a9:d1:7b:d0:e3:9f:ab:0e:df:34:ca:3a:69:1e:e8:
cd:71:f5:5b:f2:31:c4:57:36:16:0e:7c:49:72:77:
fa:9b:7c:67:d3:ec:13:6e:c9:f3:65:ef:8f:fb:ab:
3b:ef:a0:36:ef:b6:b9:54:51:57:db:d0:3c:bd:06:
eb:70:f4:48:48:57:7c:3e:51:d1:f4:68:51:e5:df:
25:b9:dd:99:4c:54:e7:d0:8e:e0:2a:21:b1:7f:32:
82:6b:74:7f:f2:43:41:5d:bd:ba:73:e2:6b:71:95:
89:41:37:40:60:5f:38:0f:5d:5f:d3:6b:bf:61:5b:
6d:19:cf:2e:a3:df:62:14:95:f7:69:73:1b:e4:c2:
d3:23:16:30:84:ce:0a:0b:7a:8f:7f:82:67:a7:cd:
89:c3:57:e0:3e:61:e3:22:e7:5c:48:aa:c0:ee:9e:
71:91:45:da:00:50:d0:bb:fc:7d:57:39:eb:ee:14:
90:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A8:BD:86:42:FE:F0:BB:EA:41:9E:C5:ED:A3:02:AA:35:A7:EB:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Ki9hkL-8LvqQZ7F7aMCqjWn60I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:7b:47:6f:4e:4f:b6:67:77:f2:06:a5:88:2f:0c:15:26:75:
f3:0f:7a:65:56:7a:59:24:65:ae:22:52:70:12:ab:cf:2e:66:
b0:7b:42:ce:b7:d5:9d:88:9f:c9:1c:cb:14:06:a4:f2:a5:72:
df:a8:ab:ab:ed:ae:77:9c:63:94:74:b7:91:57:4f:88:b1:29:
47:bb:aa:b2:82:ae:39:ea:96:3e:a1:1a:c0:99:97:f6:a3:af:
17:98:fd:00:98:b5:7d:51:99:d8:3d:7f:b4:65:2c:4b:19:a7:
42:f4:1d:34:f8:2e:15:81:01:71:ad:cf:57:97:3c:ed:c5:fc:
03:b4:fc:5f:c3:63:7b:d8:9b:2f:09:ca:57:ea:b6:9d:92:58:
21:95:a7:56:29:3f:2d:f1:51:d4:53:65:f5:ac:36:f6:d5:82:
04:aa:10:9a:9d:91:fb:4a:66:2a:5b:d8:a6:01:05:06:05:54:
2a:17:88:a7:09:35:52:a2:12:de:f5:fc:23:6e:ed:65:7a:7d:
1c:af:36:29:6c:93:7d:3e:c6:fa:70:9f:c4:e5:e0:9f:33:6f:
93:e2:f9:0e:61:e6:09:04:90:f1:31:69:0a:74:88:5f:d5:e7:
ab:13:1c:b7:14:82:99:ea:66:bc:b6:37:dc:cc:0b:40:8e:b2:
4c:ee:25:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:19:35 2025 by rpki-client