Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Z9wAJ11Aj7Zudkqnadbo22OZaA.roa
File: 1-Z9wAJ11Aj7Zudkqnadbo22OZaA.roa (raw, json)
Hash identifier: /0o3TV0eL0X1STyFcWLj819tPvFrj3R1na5YQJMPi4E=
Subject key identifier: F9:9F:70:00:9D:75:02:3E:D9:B9:D9:2A:9D:A7:5B:A3:6D:8E:65:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185808BC57E6B1CC8C7350B66E02365A3C1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Z9wAJ11Aj7Zudkqnadbo22OZaA.roa
Signing time: Thu 05 Jan 2023 06:08:41 +0000
ROA not before: Thu 05 Jan 2023 06:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:80:8b:c5:7e:6b:1c:c8:c7:35:0b:66:e0:23:65:a3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 5 06:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f99f70009d75023ed9b9d92a9da75ba36d8e65a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:8e:8e:44:5a:b3:9e:cb:d8:76:ac:72:0b:
73:62:87:06:ae:1b:2f:75:f5:da:bf:c4:a4:63:d7:
a9:55:16:67:5b:a2:f4:44:ed:75:78:64:d2:6c:83:
37:e0:4d:83:36:12:55:e4:84:7b:13:6d:c0:74:96:
3b:e6:fb:7d:89:80:4a:d3:92:71:36:0f:e7:e1:8b:
1c:6b:63:b8:b2:c7:37:8b:9f:f6:a0:54:78:02:b4:
b4:96:4a:c5:30:53:a9:8e:f4:68:c7:c3:8d:d7:d8:
6d:20:9f:38:89:f0:5b:fc:18:07:df:e8:b2:c5:88:
9b:33:d8:d9:1f:30:f4:01:2e:9e:b2:d8:d6:00:90:
1e:06:60:86:c7:2d:84:f2:ef:62:66:60:bd:e6:bc:
d8:75:f4:a6:c5:96:38:00:57:fc:28:dc:55:87:46:
c6:f5:77:56:b8:ba:71:5c:7a:b5:8e:7b:31:b4:15:
09:65:21:0a:1d:9e:78:3c:ce:49:13:91:84:e3:2d:
81:18:a9:02:f9:de:55:ad:c1:8b:42:c2:88:71:43:
08:c0:d9:10:23:4e:01:27:e7:56:da:e8:7a:ee:5b:
d1:aa:64:8f:d2:d0:8b:6a:58:d4:6d:28:de:27:b7:
26:54:26:36:09:34:0d:4e:04:af:cb:14:f7:89:9f:
98:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9F:70:00:9D:75:02:3E:D9:B9:D9:2A:9D:A7:5B:A3:6D:8E:65:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Z9wAJ11Aj7Zudkqnadbo22OZaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:6f:99:ba:c7:1b:3e:a5:ff:18:17:6c:86:01:2e:fd:f5:d2:
27:b1:c7:d3:13:9d:b9:fa:5a:09:dc:8b:f5:b1:18:c3:9f:0a:
e6:61:a7:3d:6d:23:ff:49:a5:67:80:99:0e:8d:de:f5:0a:26:
f2:01:f2:e4:6b:de:7d:4e:78:98:f4:f8:30:80:94:7e:d4:fd:
68:ea:25:2d:5d:50:99:78:91:1f:68:fa:10:b7:0b:4d:9f:f3:
8b:52:bf:01:ae:b1:8d:aa:51:1d:b4:77:11:3b:c6:de:47:14:
63:62:13:47:88:00:15:5e:cc:d0:e8:e1:65:75:73:0b:ff:18:
8d:a5:eb:8b:b9:4e:ef:fa:f8:a4:37:a6:b7:ba:69:80:94:f8:
90:c1:f4:67:c1:b3:6e:10:29:be:7f:f8:6e:01:0a:2a:5a:b0:
89:82:c0:8e:43:59:32:10:c3:1c:fe:c5:0c:39:92:fc:dd:41:
4a:63:4e:14:37:ba:3e:90:26:44:2e:a2:44:d3:fc:43:39:6c:
fe:27:03:6b:61:26:2f:c7:df:03:5c:a2:fb:3b:a5:f8:ce:72:
3e:10:ce:87:c1:5a:c8:42:f2:f8:58:41:75:c0:6d:db:29:79:
cd:85:fb:06:e1:67:3a:50:d8:12:bc:d1:5f:ff:91:f9:73:31:
46:c3:c7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:24:28 2025 by rpki-client