Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0zT9FD-JsmWoEVGQZFitSz6Z1tQ.roa
File: 0zT9FD-JsmWoEVGQZFitSz6Z1tQ.roa (raw, json)
Hash identifier: YRMilKYWcEHyTeofPZ/O0BsisWZSOLqkDYkwCSrCwpU=
Subject key identifier: D3:34:FD:14:3F:89:B2:65:A8:11:51:90:64:58:AD:4B:3E:99:D6:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018821AE94C648449FCC95F1566F0973F2D2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0zT9FD-JsmWoEVGQZFitSz6Z1tQ.roa
Signing time: Mon 15 May 2023 23:11:09 +0000
ROA not before: Mon 15 May 2023 23:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:21:ae:94:c6:48:44:9f:cc:95:f1:56:6f:09:73:f2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 15 23:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d334fd143f89b265a81151906458ad4b3e99d6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:5f:ca:b6:b8:68:9f:6b:37:a0:28:72:a3:
38:f8:c4:1a:91:fe:43:26:53:cb:2f:d8:b9:09:8e:
48:bd:99:d5:fc:2c:93:db:86:34:4c:50:c8:3b:a0:
7f:08:11:bc:18:3f:3b:31:97:38:99:e7:77:43:63:
7f:f1:5e:73:4e:4d:f2:d8:a9:5e:35:cc:ad:cb:07:
4a:e5:5b:9a:23:77:3b:02:5d:02:6e:ba:4a:02:4e:
ba:e9:9a:cd:5a:7c:b9:f6:94:f0:a5:6a:35:95:84:
34:28:20:a9:09:7c:eb:31:98:01:29:80:d0:d5:5c:
b9:6d:4e:47:58:9f:b3:5c:1b:84:6c:b7:2e:08:e9:
4a:d4:83:80:80:b0:6e:c3:1a:a1:d8:a1:ed:da:43:
a1:17:b6:c3:d9:72:51:ae:72:ab:8a:9b:27:53:32:
c5:c4:7f:32:cc:ad:44:43:85:7d:01:86:80:8f:bb:
90:dc:3b:8d:0a:1e:17:19:3c:b1:9c:e4:3f:7d:cc:
13:00:e5:ef:08:e6:8d:75:ce:f0:fe:61:a9:62:25:
bf:2d:5f:a6:6f:db:50:f2:83:4d:8a:d9:00:03:02:
07:4a:04:94:5b:06:aa:26:9c:96:36:af:89:e0:54:
2b:45:d5:e7:70:ff:42:a4:df:36:7c:21:15:c7:a9:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:34:FD:14:3F:89:B2:65:A8:11:51:90:64:58:AD:4B:3E:99:D6:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0zT9FD-JsmWoEVGQZFitSz6Z1tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:d7:3e:4a:44:b6:30:7a:40:87:ab:b6:89:15:42:f3:fe:ea:
a1:e7:cd:fc:3b:9f:cc:19:33:a8:79:23:54:81:74:62:25:c5:
44:a0:b8:2b:4e:b7:cf:5b:cf:5b:22:72:c0:bb:d4:02:79:a2:
a9:37:ec:dc:6d:e5:51:d4:ac:9a:bf:60:54:96:32:41:8f:04:
d8:38:92:78:6b:66:d9:92:be:68:eb:de:66:8e:0b:9f:99:e3:
a5:80:02:cc:8b:60:b9:82:5f:5e:c0:7e:17:ff:98:d3:c9:06:
43:53:05:56:1b:b7:c9:fe:ae:21:c5:cf:3b:95:38:8f:43:35:
ec:17:d5:68:0e:f8:b1:ab:0f:01:7e:10:2f:ed:84:5a:c8:2a:
ff:a7:c5:57:3a:8e:5a:a4:f4:08:ca:09:e6:20:aa:04:37:a5:
e7:9e:2b:e8:93:38:f8:20:c6:a5:88:b1:30:78:4d:46:a1:c2:
c4:78:ea:0c:c2:5f:2a:df:ac:ca:fd:1d:b1:77:2b:b1:80:a5:
4a:66:7c:e6:0b:ae:49:60:be:36:ff:ea:ad:cc:13:ed:fa:11:
04:11:d8:c0:d6:b1:2e:b2:fa:72:25:ef:a6:2f:b5:55:ae:45:
3b:fe:1d:81:aa:88:b5:88:68:d8:22:a9:f6:c3:1f:bf:38:68:
8b:ed:44:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:35:30 2025 by rpki-client