Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-9dAtlCWkUUVaGBt1WipRxUjD7g.roa
File: 1-9dAtlCWkUUVaGBt1WipRxUjD7g.roa (raw, json)
Hash identifier: CowNWrcoKuq4j4n93yL0Hl5XsHaLt74d9UTzpx6d7D0=
Subject key identifier: FB:D7:40:B6:50:96:91:45:15:68:60:6D:D5:68:A9:47:15:23:0F:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184575F2461E93250C403C938F750334AFB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-9dAtlCWkUUVaGBt1WipRxUjD7g.roa
Signing time: Tue 08 Nov 2022 13:12:43 +0000
ROA not before: Tue 08 Nov 2022 13:12:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:5f:24:61:e9:32:50:c4:03:c9:38:f7:50:33:4a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 8 13:12:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbd740b6509691451568606dd568a94715230fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:55:06:44:7e:de:b5:6f:38:05:ab:68:f0:
69:97:1b:16:f4:32:42:7c:ec:59:eb:f7:0d:f0:a0:
9d:0e:5c:12:59:4f:1a:db:ff:3b:28:15:89:8e:d4:
51:00:86:53:70:ca:ac:b1:f0:c7:1c:d7:1e:45:bf:
b9:57:e5:b5:7b:95:3a:53:1e:77:f0:21:80:f8:e7:
58:53:28:56:04:2f:41:12:cf:98:27:04:ab:de:bc:
8c:de:9c:f0:c8:0a:c0:c2:4b:c7:01:83:f3:8f:e0:
cb:c7:7c:f1:9c:10:75:52:52:13:64:59:eb:32:d5:
0e:ac:f6:0f:8b:f8:a4:ff:ad:29:94:e4:96:4e:ec:
0a:b3:b3:47:da:81:4b:92:45:26:69:fe:31:cc:d1:
e4:f5:b6:ed:a5:87:30:36:44:61:e6:af:ff:78:d0:
67:94:28:68:38:9a:6f:2d:a1:58:9a:8b:33:56:8c:
de:9e:a9:a0:5a:83:b7:87:59:91:80:f7:65:24:33:
d4:b7:a4:be:7d:82:56:86:d9:0b:00:c7:0b:58:5f:
8b:03:ad:95:23:48:6d:27:98:89:24:10:c0:ee:13:
32:1f:21:38:91:b5:40:a9:4e:53:08:c9:d3:ed:88:
46:d3:6a:e8:49:08:81:da:77:78:e6:5a:54:d4:54:
cc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D7:40:B6:50:96:91:45:15:68:60:6D:D5:68:A9:47:15:23:0F:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-9dAtlCWkUUVaGBt1WipRxUjD7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:e4:ff:f0:8d:87:58:16:de:b5:63:f6:b9:bd:79:ad:7a:28:
79:cb:37:57:77:82:df:e8:99:c7:02:2c:03:f0:a5:c5:45:ef:
c9:7d:e3:6e:85:70:e7:c3:b3:e2:75:46:d8:98:bf:81:7b:5b:
57:ca:41:49:9d:e5:da:ea:60:c5:bd:02:b5:a4:14:89:af:b4:
73:f0:6d:32:21:b4:9b:86:7e:12:1b:b5:ce:51:9f:86:57:7a:
97:70:0c:bc:3a:36:61:cd:1b:32:7f:ea:2a:6b:b6:d1:3f:34:
ea:43:38:f2:61:a5:c7:83:ba:a4:65:d2:0e:56:02:f4:ae:3f:
50:23:4c:48:7c:d9:4a:6c:b7:13:e9:b3:81:a2:fb:3d:a3:26:
53:48:d3:3b:b7:c8:f1:b1:94:e9:ca:0c:af:08:59:09:be:09:
96:b8:9b:30:16:a1:4b:4d:d7:af:f9:fc:4e:9f:a3:fd:47:14:
33:17:a8:72:ef:c7:a7:b0:20:5c:cc:4a:00:c3:92:71:80:a6:
9b:11:d2:77:5f:ed:bd:27:0c:71:c2:6b:4f:c8:70:a6:5c:00:
f7:a4:3d:48:3f:d9:31:37:8f:55:9a:82:f1:97:bc:43:3c:a3:
8f:79:20:9b:25:46:cb:b3:39:33:00:92:bb:f6:c7:83:77:81:
3e:02:64:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:17:02 2025 by rpki-client