Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9EccKJP10m2iNfgctqnvSScFruc.roa
File: 9EccKJP10m2iNfgctqnvSScFruc.roa (raw, json)
Hash identifier: dR/qp0zIk+bYEQZk5npTV7kgpmXMmNobZ5lG9/7LME0=
Subject key identifier: F4:47:1C:28:93:F5:D2:6D:A2:35:F8:1C:B6:A9:EF:49:27:05:AE:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184688BCC3938BC983996E74600A50687D5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9EccKJP10m2iNfgctqnvSScFruc.roa
Signing time: Fri 11 Nov 2022 21:15:02 +0000
ROA not before: Fri 11 Nov 2022 21:15:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:68:8b:cc:39:38:bc:98:39:96:e7:46:00:a5:06:87:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 11 21:15:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4471c2893f5d26da235f81cb6a9ef492705aee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:92:2f:db:5f:cf:7a:6f:db:b3:11:cf:a2:34:
d7:b5:6c:98:0b:42:ac:14:eb:21:b0:a5:75:89:6b:
ba:d7:90:c2:16:c1:f4:4c:99:c4:be:3d:26:8a:01:
43:77:74:b4:2a:ad:64:e1:83:83:c5:0c:bc:4e:b1:
3b:a1:2b:2e:35:f4:ba:a0:95:b8:40:86:64:20:81:
e2:20:32:e6:68:49:fc:3f:3d:4f:1d:2b:5c:39:18:
4a:2c:da:0d:cd:be:2f:f5:f0:7b:04:08:e7:80:18:
c1:21:98:c2:c1:ab:6f:1a:4a:94:a9:cc:ce:cc:6e:
bb:c6:c1:6b:2f:4b:b7:aa:c3:d4:6c:2f:f0:1d:bb:
c8:7e:15:c7:d8:11:ff:ba:d8:ed:50:91:c4:98:e6:
79:65:fc:45:67:48:bc:c3:d6:cc:36:64:3b:58:3e:
c9:e0:d5:aa:e0:90:d5:02:97:2b:b3:34:9a:a6:57:
24:95:fe:64:92:96:fb:8f:e1:fb:45:19:c9:4e:8f:
29:d4:9d:53:69:3a:ef:89:25:67:b7:92:33:ed:92:
28:3f:6f:1f:68:03:a8:a6:17:29:61:47:82:7c:d6:
08:c9:f7:5e:9a:dd:a7:bf:ab:1e:b8:08:0a:5c:2d:
8f:16:80:44:52:a8:7b:f8:35:36:48:a1:fa:0d:ca:
19:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:47:1C:28:93:F5:D2:6D:A2:35:F8:1C:B6:A9:EF:49:27:05:AE:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9EccKJP10m2iNfgctqnvSScFruc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:a3:49:14:4c:e4:1a:f8:f7:e3:bf:30:7f:08:e3:ae:9f:1d:
6e:ac:2a:0b:d4:f9:7b:2a:4b:c9:ca:6e:5d:0c:a6:52:b7:34:
a1:69:b4:ef:3a:58:d0:9b:26:55:e3:40:0a:36:9e:fb:3e:8d:
4b:a9:f2:a7:e7:a8:d0:2d:9c:6c:26:05:68:64:2e:6e:c5:cd:
d3:04:fb:11:fe:2e:31:4d:77:48:8d:7f:2d:c0:b3:cc:bd:3e:
36:90:7b:ed:a0:50:67:83:70:63:ac:67:ad:4a:a3:68:56:cd:
05:9f:34:31:70:b9:bf:c5:a1:0f:8f:a9:1c:91:30:8c:1f:b2:
46:a9:98:56:1e:8d:fd:aa:e7:08:e9:89:a7:28:9a:e2:6b:1f:
f6:a8:5f:3e:b0:15:de:0f:e9:f9:16:93:d9:af:7b:18:7b:e3:
cb:60:b7:c9:93:dd:62:60:cb:ae:36:b9:47:ae:82:d9:cd:ba:
0e:01:7a:76:7a:0c:39:55:1f:d0:25:9a:62:56:d7:b6:4b:6a:
63:26:e8:88:8a:3f:e7:52:0a:61:5f:a8:8a:c5:7d:83:ac:33:
8f:6a:76:1d:a4:89:36:37:15:4a:04:c2:16:8d:65:99:aa:14:
87:ca:d3:e8:9a:81:64:18:7f:78:ff:16:ba:6a:ce:5d:e2:36:
41:6e:93:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:23:17 2025 by rpki-client