Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9CpbeLi68bmnc8oPjOUDdF7Vgd4.roa
File: 9CpbeLi68bmnc8oPjOUDdF7Vgd4.roa (raw, json)
Hash identifier: PGmE9UxbDj8R/KiWsHsMHvSTWdXz5D7Mcozt+9E6YDg=
Subject key identifier: F4:2A:5B:78:B8:BA:F1:B9:A7:73:CA:0F:8C:E5:03:74:5E:D5:81:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01858B7E34914269406092AA5366C0AE87FA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9CpbeLi68bmnc8oPjOUDdF7Vgd4.roa
Signing time: Sat 07 Jan 2023 09:09:42 +0000
ROA not before: Sat 07 Jan 2023 09:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8b:7e:34:91:42:69:40:60:92:aa:53:66:c0:ae:87:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 7 09:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f42a5b78b8baf1b9a773ca0f8ce503745ed581de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c8:2a:4f:9f:d6:05:79:53:6c:31:8f:fb:8a:
8e:e3:74:b2:ff:5f:89:5b:c4:05:bb:0d:a0:03:2a:
20:ce:1e:5a:ef:7c:af:d8:36:60:45:ec:d5:d2:4b:
6c:3e:a9:b4:fb:53:58:c3:1d:3d:b5:b7:3b:6e:94:
a7:63:fb:bd:26:87:45:81:5e:4d:dc:f9:3f:ee:c7:
c2:57:d2:23:5b:ee:85:93:f6:02:11:f6:d8:10:b2:
fc:50:4d:81:00:60:f8:7c:97:ae:9a:43:12:f9:88:
f9:70:1d:18:63:e8:9f:01:a6:ce:35:54:6b:f4:59:
bd:47:e5:6a:4a:b4:37:d4:df:67:d9:62:02:6c:92:
97:cf:07:da:1e:30:e6:97:9b:2a:67:11:f9:fd:a0:
67:55:f2:4b:e3:e9:ef:b4:6e:24:7c:09:b8:70:63:
bd:bc:e8:84:80:2d:2f:45:87:50:85:50:08:8d:d7:
2d:e0:c2:fc:14:f1:88:cd:12:b2:36:7c:72:40:ec:
0a:0a:a6:14:68:02:7f:b9:79:fb:22:3d:36:61:8a:
65:d3:79:2e:86:4e:8b:ac:c4:87:20:6c:da:5c:d3:
1b:80:e6:4c:3e:e9:a9:58:13:c1:ea:08:17:0b:c0:
1f:8b:7f:43:25:88:a6:90:b5:06:5f:5b:f0:a1:1c:
b6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2A:5B:78:B8:BA:F1:B9:A7:73:CA:0F:8C:E5:03:74:5E:D5:81:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9CpbeLi68bmnc8oPjOUDdF7Vgd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:11:c2:51:be:2b:c0:14:de:b9:f3:e6:fa:16:7b:3d:21:f2:
34:2d:94:69:97:76:5a:65:eb:8e:26:af:71:17:04:bf:b0:18:
e9:f1:0e:21:7d:2b:14:c2:a9:b7:a8:13:2e:27:6a:17:16:c4:
0f:5d:69:e1:29:51:e8:d6:85:10:a1:5b:94:d6:ae:88:ec:71:
16:de:75:3f:5d:f7:8e:bd:60:02:d8:56:16:15:51:99:db:08:
83:cf:d7:2d:ce:11:38:ec:a9:27:49:2f:e7:44:4c:ed:b8:31:
c4:bd:0f:f2:cd:ba:75:0a:5b:28:b3:06:1e:9f:46:01:01:47:
56:68:98:2c:db:8c:80:da:d2:1c:60:68:db:82:77:72:c7:98:
51:d8:b2:bd:d0:8e:88:47:24:da:b3:45:35:7a:8d:a8:c7:f2:
05:fc:cd:2e:3a:c5:6c:61:12:57:e7:f5:84:4b:d0:bd:1f:1a:
42:6d:6e:0f:ac:b4:6b:82:c7:7b:95:19:de:7b:23:08:44:6e:
a2:49:db:87:e8:6f:24:b2:11:a0:32:6a:d3:90:fd:94:fd:38:
d1:94:b3:3d:2e:16:dc:2f:00:2c:92:19:1d:b8:5e:25:91:9a:
90:81:30:5e:25:93:7f:cf:3d:5a:c7:68:90:2e:1f:63:bf:b5:
71:0e:f1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:05:30 2025 by rpki-client