Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9EY7mNLJoSptX-BJ0s1zDddOlTE.roa
File: 9EY7mNLJoSptX-BJ0s1zDddOlTE.roa (raw, json)
Hash identifier: E71SgpEk358vdnG3KSmHJIeqMnJFWgZ5McoIv2UUaXU=
Subject key identifier: F4:46:3B:98:D2:C9:A1:2A:6D:5F:E0:49:D2:CD:73:0D:D7:4E:95:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 830A86EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9EY7mNLJoSptX-BJ0s1zDddOlTE.roa
Signing time: Wed 11 May 2022 10:16:02 +0000
ROA not before: Wed 11 May 2022 10:16:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2198505194 (0x830a86ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 10:16:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4463b98d2c9a12a6d5fe049d2cd730dd74e9531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:b0:81:4a:2f:2b:3c:5c:0b:1e:16:dd:da:
68:29:a1:bc:1e:56:94:c5:61:8f:da:c7:06:b2:53:
30:5b:1a:9e:14:d5:16:52:40:cc:a3:31:29:b8:69:
bc:17:6f:f2:cc:09:a5:27:dc:0c:f6:fd:89:14:5c:
0d:36:fd:52:d9:ff:91:dc:d2:78:df:cb:ac:e8:fd:
1f:fc:21:c0:f3:1b:eb:27:86:51:95:e9:5e:5a:71:
b3:b4:ec:ff:3f:38:ca:bb:0c:35:ae:5e:5e:67:f0:
5f:e5:3a:fe:aa:b3:c2:d6:9e:c5:f9:f3:39:98:93:
de:a9:39:84:41:91:ab:8c:57:e0:ca:d7:09:49:9f:
b5:ac:56:0e:8e:75:e3:b5:65:ac:1e:d5:e4:d9:2a:
c1:0e:bd:25:bb:0a:17:9e:f3:2c:87:58:4e:34:a3:
1b:21:51:99:ca:97:47:14:a3:5e:c2:c1:4e:01:b0:
8d:30:ff:cd:6f:7c:9e:a7:f7:80:06:a1:47:c8:6a:
43:2f:f7:63:b0:f4:ed:8d:b3:8b:05:d7:5b:26:03:
1d:d4:25:23:2f:00:e7:dd:75:c9:07:3e:7f:03:d1:
35:bf:4d:74:e3:4e:7d:06:24:f3:9f:c3:be:1a:4b:
b9:9d:84:bd:9f:01:8d:0c:09:1a:ac:6e:65:03:a7:
78:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:46:3B:98:D2:C9:A1:2A:6D:5F:E0:49:D2:CD:73:0D:D7:4E:95:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9EY7mNLJoSptX-BJ0s1zDddOlTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:e9:08:e1:4d:a6:7b:a9:67:69:4f:fe:29:3d:2e:52:6a:09:
7f:c0:42:02:2e:7a:70:75:9b:c0:16:6b:c0:fc:93:ea:d3:52:
a7:2b:9a:74:ff:a3:08:72:63:42:9f:2d:1d:fd:51:74:1c:6b:
f0:83:dd:73:0c:ae:3d:79:2c:c5:c1:11:2d:79:5b:15:2f:3d:
cc:4f:7f:63:32:d0:bd:24:42:b7:d2:39:54:28:6a:93:87:e2:
ef:df:d4:48:38:a9:a5:58:98:8a:b8:32:6f:90:6d:e9:65:a0:
3a:e8:94:65:80:f6:4d:25:c2:bc:c7:79:9a:4d:4f:29:9a:e9:
87:ab:66:b4:b6:c5:b1:29:fd:28:58:4d:8c:93:45:e0:e6:97:
6c:2d:11:28:a5:c5:78:a5:d3:03:fb:1c:1c:7e:ce:8f:1b:93:
39:f0:15:c5:0a:1e:de:d7:5f:6c:98:dc:80:c3:e8:4d:c0:3a:
e7:e8:41:b8:3b:bf:4e:5c:9d:0f:72:46:b2:2f:45:9b:77:b8:
db:90:ab:ce:ff:98:a1:24:d5:aa:02:4a:61:24:b0:ea:dd:a7:
f9:43:d4:53:25:90:ea:c3:36:01:29:92:4b:a4:72:cc:b1:b9:
7f:0b:f2:a2:4f:9f:55:39:66:35:9c:30:40:97:d5:27:bb:80:
60:a6:8c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:21 2025 by rpki-client