Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9FqBWmjyMpfE93aWHN7du-UF8Vo.roa
File: 9FqBWmjyMpfE93aWHN7du-UF8Vo.roa (raw, json)
Hash identifier: mH9wrHSJF7m3qcWT8hmqhmUb/AyJPeVzsuC7f59qnhs=
Subject key identifier: F4:5A:81:5A:68:F2:32:97:C4:F7:76:96:1C:DE:DD:BB:E5:05:F1:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182E203B30F3C36F7A9253393644D71F8BF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9FqBWmjyMpfE93aWHN7du-UF8Vo.roa
Signing time: Sun 28 Aug 2022 01:14:29 +0000
ROA not before: Sun 28 Aug 2022 01:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e2:03:b3:0f:3c:36:f7:a9:25:33:93:64:4d:71:f8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 01:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f45a815a68f23297c4f776961cdeddbbe505f15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:54:19:2a:cf:d2:78:96:85:4d:76:33:9d:41:
80:31:43:fc:2b:18:99:c6:a4:df:7a:d6:99:a8:1d:
84:05:59:83:e7:e4:f8:89:c8:7f:2d:ff:9f:d0:9a:
f5:4d:68:48:4e:21:a6:ea:84:df:99:56:66:80:8b:
24:da:a8:99:77:10:cd:55:5b:5a:5b:ee:e4:15:e7:
0c:88:f4:2d:b6:c6:9f:af:15:6e:18:d1:c0:fb:f4:
96:42:d1:fe:ba:c8:ab:2e:6a:95:46:d9:72:98:4b:
cf:2e:86:66:00:81:fb:0f:f5:f2:90:ef:ce:34:26:
d1:75:4c:24:9c:58:d5:9b:1f:d0:90:03:2d:6a:28:
f2:35:5c:91:ed:f7:14:96:fc:41:39:40:fe:55:7d:
ac:a7:e1:de:df:8c:43:9e:85:8f:2e:44:05:a8:1c:
f7:aa:0a:af:68:32:55:a0:17:f2:4e:92:c2:70:db:
f5:88:10:13:c4:bf:a7:89:2a:be:74:a3:16:ca:e6:
03:e1:7a:21:e3:3d:db:dc:e5:18:de:ed:ac:6a:a1:
91:f3:56:47:60:59:61:0c:6f:d1:a8:96:da:64:5a:
74:fe:bc:5c:9c:b3:c9:07:57:93:1d:32:a4:15:5f:
71:a9:83:14:a4:37:69:50:7e:24:d1:8c:00:87:8a:
f1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5A:81:5A:68:F2:32:97:C4:F7:76:96:1C:DE:DD:BB:E5:05:F1:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9FqBWmjyMpfE93aWHN7du-UF8Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:d8:75:cf:5a:d5:80:ec:71:f6:fe:12:3b:33:c0:d2:62:fe:
2c:d8:ad:f5:64:87:2c:f3:b4:3c:fb:ea:b2:9d:b2:f5:33:f7:
8c:83:29:6f:78:d1:df:57:fa:64:62:61:57:b5:b7:be:50:b1:
6f:ab:63:42:92:2f:9f:0e:ad:cd:9b:e2:8c:98:85:5d:f2:a7:
4d:ff:d7:3f:26:7a:4b:d4:58:a5:60:4d:6b:33:ea:d6:94:42:
98:74:c0:e9:6d:69:e1:bd:7b:33:46:cf:45:8d:ca:6b:99:e4:
5a:63:71:44:c5:6f:5f:8b:be:6f:9c:0c:16:9a:0c:94:0d:8a:
27:9f:8f:18:39:de:c2:35:6c:f6:c6:8a:bf:7c:14:32:c4:79:
ba:6d:a3:91:48:f3:01:3f:63:91:ea:84:6e:a0:8b:83:96:bb:
30:7d:f0:15:88:8d:da:50:3a:88:fc:b9:45:ce:e4:3d:3f:d7:
0c:d7:92:f8:f8:b9:7e:b5:3c:65:9f:c3:24:fa:bd:75:f0:be:
01:a1:73:cb:c2:05:99:88:47:29:2a:d9:bc:1b:6f:b1:02:70:
c0:2d:11:aa:07:3b:39:ab:22:c6:f2:93:81:ba:d7:fd:d1:83:
81:b7:e6:d0:35:95:29:78:31:cc:7c:8a:82:cb:a0:c7:2c:1f:
72:45:38:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:20:12 2025 by rpki-client