Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9D1wTxaoYVWfvcE9bir-Pdor80A.roa
File: 9D1wTxaoYVWfvcE9bir-Pdor80A.roa (raw, json)
Hash identifier: ZNye7A4eN+i+AcCvrKCt4wVFWIotX3P93Vlt6KSVX1w=
Subject key identifier: F4:3D:70:4F:16:A8:61:55:9F:BD:C1:3D:6E:2A:FE:3D:DA:2B:F3:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182F62D56AF918BB9327F98A569935F66A6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9D1wTxaoYVWfvcE9bir-Pdor80A.roa
Signing time: Wed 31 Aug 2022 23:12:22 +0000
ROA not before: Wed 31 Aug 2022 23:12:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f6:2d:56:af:91:8b:b9:32:7f:98:a5:69:93:5f:66:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 31 23:12:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f43d704f16a861559fbdc13d6e2afe3dda2bf340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c8:ec:63:14:af:96:05:57:a9:c6:89:52:a5:
c7:c4:90:9e:4f:4b:f3:d4:fe:72:fd:00:1d:63:3d:
97:84:73:9e:4a:02:23:36:b2:cf:0d:e2:40:e6:78:
c7:66:73:bc:ea:e2:6b:11:11:16:eb:45:cd:84:91:
84:24:27:77:42:8a:08:4d:5c:fe:88:d0:2f:35:0b:
c6:b7:57:82:00:2e:34:bf:ce:13:51:e7:f6:4a:c9:
43:b2:ae:46:d1:b4:70:62:c0:50:67:70:f8:06:c4:
de:a8:60:4c:f3:5d:74:27:27:02:3f:27:89:ed:74:
96:02:3c:4b:fd:fa:11:c6:a5:34:ec:37:32:d9:b2:
7b:f1:74:f0:8b:31:ba:07:46:4b:91:28:cf:3f:f9:
07:73:3c:e5:d4:fa:fd:c9:a4:d0:07:7e:e7:f0:47:
b7:bb:46:29:e4:44:4b:c7:ac:4b:1a:8a:2f:be:6b:
20:ab:a5:a2:87:1b:d2:8f:ec:ac:8f:34:ae:b5:2d:
99:25:67:b8:de:45:be:3a:57:8d:d8:d4:af:42:af:
47:12:42:86:3b:e5:42:f5:17:59:00:ed:5d:a4:2f:
f9:e9:a2:96:39:77:f8:54:27:76:8e:58:0a:8f:93:
37:e8:8d:0c:58:49:1c:1a:af:62:55:a5:7b:c6:df:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3D:70:4F:16:A8:61:55:9F:BD:C1:3D:6E:2A:FE:3D:DA:2B:F3:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9D1wTxaoYVWfvcE9bir-Pdor80A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:7a:ff:9b:d7:b5:d3:6b:5c:7c:b0:43:0c:d0:97:08:43:92:
74:44:22:ff:50:30:37:66:49:61:d5:67:45:85:b5:35:24:b0:
51:cf:61:78:4a:45:da:c4:68:2c:9e:08:d5:b6:24:16:44:c7:
be:2d:70:d7:f0:34:c6:01:cc:33:35:f1:40:cb:81:5d:58:34:
4d:82:9c:6f:64:ae:5c:1c:f1:05:23:b9:9c:db:b5:16:09:3d:
1a:37:71:4b:aa:3b:70:94:41:25:af:db:e0:06:de:2a:e7:c1:
37:39:bc:ac:2e:8e:26:d8:69:a1:64:5c:2a:c9:e5:72:ed:bc:
b9:a2:9d:2c:fc:83:0b:51:e6:9a:7c:f0:e0:0c:80:60:74:e4:
7d:6b:71:2e:b2:31:d1:47:e2:bc:40:6c:46:7c:6e:a2:19:e5:
5e:9f:b1:37:f7:b6:2b:0a:61:fb:49:74:be:7a:24:6b:ff:e4:
2b:4b:a6:ac:80:bc:9e:88:41:fb:7c:85:87:94:7e:d0:c7:19:
45:8f:ce:c8:68:3d:c2:f8:da:07:44:8e:1e:7a:06:d2:64:35:
99:84:1b:3f:02:9d:84:37:c0:50:f3:8d:6b:18:7b:b3:aa:a6:
78:d1:9f:11:f1:d9:e5:ef:33:05:f4:cc:4e:be:d2:97:4a:ec:
e9:89:01:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:05:34 2025 by rpki-client