Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-e1H9hiAhKwT051U4R9vW1p_U5o.roa
File: 1-e1H9hiAhKwT051U4R9vW1p_U5o.roa (raw, json)
Hash identifier: ZDqeM4+ssDPji5uK7lsMtl3xnDEtZ2DWwoH/8C/Ei9w=
Subject key identifier: F9:ED:47:F6:18:80:84:AC:13:D3:9D:54:E1:1F:6F:5B:5A:7F:53:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 73E95FF1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-e1H9hiAhKwT051U4R9vW1p_U5o.roa
Signing time: Sat 19 Mar 2022 19:10:29 +0000
ROA not before: Sat 19 Mar 2022 19:10:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1944674289 (0x73e95ff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 19:10:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9ed47f6188084ac13d39d54e11f6f5b5a7f539a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:91:3b:0b:f8:5e:ae:74:82:24:c7:6f:3f:97:
08:bc:34:bf:86:bc:fe:64:b2:59:d4:df:fa:68:1d:
d6:11:29:65:af:d6:81:67:b5:41:0d:3b:45:c5:6d:
6b:27:78:a4:e9:8e:87:f0:5a:6c:a4:90:97:dc:c2:
f6:6f:98:40:b5:d1:51:c3:a3:e6:62:be:3d:bc:a1:
ff:08:6e:57:c6:4f:6d:0f:c4:0d:5d:dc:f2:8d:0c:
5e:5b:76:3b:0d:a6:a9:4a:e3:9c:a1:94:43:ee:34:
d6:f5:e8:9b:3e:dd:35:03:29:d4:95:95:d2:9f:5a:
0b:00:6e:8a:b1:96:5e:3e:bf:bc:f3:e5:32:d2:f9:
8c:3e:5e:17:01:e6:ea:30:b5:06:c4:d2:8a:87:25:
d1:15:97:37:f9:82:16:49:24:cc:8c:2c:d4:64:47:
64:f2:ae:99:35:61:15:a9:8d:e4:b7:2d:d3:e3:34:
d0:25:af:24:06:da:7d:80:90:e2:b0:22:03:5d:d8:
5c:9b:2b:3e:38:75:06:5a:e4:cd:bf:f4:57:ef:1c:
ae:2c:d5:22:a2:8f:52:6d:02:54:b5:b4:47:58:bd:
d0:7d:4c:6b:cf:3d:28:83:0a:ae:ab:55:c2:20:f8:
fd:d3:b7:92:87:b6:36:51:d4:16:e3:8c:8e:8d:fb:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:ED:47:F6:18:80:84:AC:13:D3:9D:54:E1:1F:6F:5B:5A:7F:53:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-e1H9hiAhKwT051U4R9vW1p_U5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:1f:70:34:e5:8f:eb:a8:42:f3:50:c9:98:65:2d:6e:54:15:
ca:be:53:2d:a8:8b:f1:a4:c4:be:df:3e:16:dd:9b:96:a4:9f:
d9:35:bb:85:61:a0:c2:a3:2c:97:a2:78:62:7a:f0:5d:95:07:
21:69:02:a4:02:1f:b2:8e:a9:a4:ff:a1:d5:b1:f6:ab:b4:1a:
8e:73:59:21:6f:78:3b:dc:d0:5f:6e:28:c2:12:d1:56:64:a5:
b6:2b:ee:b1:b1:c5:f4:b5:0c:e0:62:56:82:98:b2:ec:6a:1d:
e2:71:dd:49:07:40:f8:4f:b6:8a:45:c3:89:04:30:27:3d:32:
df:f1:08:dc:9f:72:cc:93:15:6c:89:9c:dd:d7:ef:3c:4a:9c:
4f:11:2e:43:30:b8:0f:95:dd:50:e2:e1:c7:a4:2c:be:0d:e1:
e4:62:08:0d:d7:83:ec:01:67:df:61:fd:f4:4a:07:4e:8b:2d:
61:33:a7:d4:49:56:e2:6a:25:28:21:e6:9d:b9:d3:b4:47:21:
09:c9:d0:ff:df:78:21:2b:5a:4e:35:57:5e:5a:ec:38:b6:a8:
d4:3c:ec:38:4b:ed:b4:ed:ba:d9:a4:e5:1d:bf:5f:93:15:f3:
be:65:2d:43:5f:99:5d:5e:1a:f6:ce:51:15:d7:57:90:d5:1b:
0e:ad:a1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:38:22 2025 by rpki-client