Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-dlqq89s-d5FM1UriBS8EgL2km0.roa
File: 1-dlqq89s-d5FM1UriBS8EgL2km0.roa (raw, json)
Hash identifier: bpNKw8jzKpCwEtwu0HxPOH4QT00OWBQJwYH4umts17I=
Subject key identifier: F9:D9:6A:AB:CF:6C:F9:DE:45:33:55:2B:88:14:BC:12:02:F6:92:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894A71AE000B7660B320B2BC2DA5140629
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-dlqq89s-d5FM1UriBS8EgL2km0.roa
Signing time: Wed 12 Jul 2023 14:11:51 +0000
ROA not before: Wed 12 Jul 2023 14:11:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:71:ae:00:0b:76:60:b3:20:b2:bc:2d:a5:14:06:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 14:11:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9d96aabcf6cf9de4533552b8814bc1202f6926d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:c0:27:1c:4a:e8:32:be:fb:fc:26:a7:c4:
b8:53:1e:ab:cf:ec:d7:19:d7:97:e5:20:63:68:4c:
8f:ed:9d:8b:84:19:06:b3:08:16:a5:5d:a4:20:72:
df:01:31:0d:cf:6d:80:b8:35:52:37:c5:d2:5e:20:
b0:9a:d7:86:42:f8:c1:8d:76:f3:86:4c:a1:cc:07:
7c:6a:84:e0:fe:8e:83:28:15:17:31:f6:70:45:39:
e6:f3:c1:aa:11:79:46:68:b9:c9:fc:6e:be:85:18:
ea:de:5c:b8:fa:ee:a3:72:eb:d2:27:19:3e:e0:b4:
9a:e1:da:37:95:6e:85:fd:db:9e:d6:87:dc:89:54:
df:11:dc:2f:90:e3:7a:40:d2:04:bf:dc:7b:e7:9e:
02:98:89:b0:54:0d:ab:4c:d0:0b:cc:83:d8:31:e0:
06:a2:78:32:f8:51:34:82:c7:85:0d:1c:48:76:79:
ca:8c:76:35:b9:61:46:25:47:1a:0e:24:5e:f4:fc:
db:8f:6e:6f:80:c1:1c:77:91:49:d3:c3:59:2a:35:
f3:2d:08:07:a5:a9:78:70:e2:8a:f6:b9:87:0a:92:
27:1f:fd:e5:04:4e:d8:0b:da:95:8b:ee:09:0d:d9:
dc:67:5c:60:94:16:c6:f7:f8:3f:68:4a:3c:6f:75:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D9:6A:AB:CF:6C:F9:DE:45:33:55:2B:88:14:BC:12:02:F6:92:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-dlqq89s-d5FM1UriBS8EgL2km0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:01:6f:74:21:d9:6a:66:84:5f:e9:dd:3d:02:de:61:56:40:
36:45:f7:3f:6f:bd:8e:cb:76:96:b8:e0:54:ee:f3:cd:2c:96:
f2:89:25:4d:b0:da:31:38:43:e5:95:21:29:a8:a3:11:d9:c1:
42:81:46:72:53:a7:a8:8c:e2:1a:11:f4:e3:60:3c:e7:ae:cc:
e0:9a:c6:69:f7:ad:54:09:5b:1c:4c:df:8e:2d:77:0d:40:cc:
11:d4:61:b1:1f:de:e1:92:4c:43:80:76:b2:58:1e:4f:9d:db:
7f:b5:ab:e9:1a:94:16:24:44:11:14:be:f3:81:7e:1f:db:d0:
65:31:a4:1c:28:29:34:8c:7e:59:c2:b8:22:ba:4b:90:20:1a:
16:8e:94:68:9c:00:f7:43:71:77:72:f7:87:66:a1:0a:1a:a5:
0b:04:2e:5f:29:af:e2:90:0b:91:66:1b:64:45:73:d7:38:28:
e0:81:f6:f7:3f:8a:89:5b:d3:aa:9a:c8:a3:5d:ea:50:8b:94:
a5:f3:52:f4:c2:23:8a:57:e0:23:9b:dc:08:b3:6c:7b:48:09:
3a:bf:05:04:c5:55:32:74:17:45:81:0b:82:7a:38:19:96:82:
33:19:12:7a:bb:f8:a9:ed:cc:ec:52:b0:35:47:0f:59:96:ef:
5b:46:a3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:51:08 2025 by rpki-client