Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9Jg3Gbwx7sv6eJNgmea340dtcJ4.roa
File: 9Jg3Gbwx7sv6eJNgmea340dtcJ4.roa (raw, json)
Hash identifier: u1eDQpQtFBh019+/NqFhF2Eh/GmlYKtNxcoxhKMXbpk=
Subject key identifier: F4:98:37:19:BC:31:EE:CB:FA:78:93:60:99:E6:B7:E3:47:6D:70:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018944D7F822B6E485261C804483D8FCDDD2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9Jg3Gbwx7sv6eJNgmea340dtcJ4.roa
Signing time: Tue 11 Jul 2023 12:05:51 +0000
ROA not before: Tue 11 Jul 2023 12:05:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:189:44d7:7d24/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:d7:f8:22:b6:e4:85:26:1c:80:44:83:d8:fc:dd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 12:05:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4983719bc31eecbfa78936099e6b7e3476d709e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:59:8f:bf:e4:2d:4a:21:bc:e8:c2:c8:38:32:
30:1b:81:72:3a:ff:fa:7c:03:29:e6:29:57:c4:ed:
f0:7d:43:b4:28:f7:cb:e9:5a:9d:11:d0:b2:61:25:
72:b4:8d:02:bf:13:9b:0f:ea:bb:9d:f5:c4:0d:ee:
7a:ef:a5:58:d0:2b:6d:02:cf:a5:58:33:ce:77:5b:
a1:52:b3:fc:1f:38:a9:9b:b8:76:98:8f:c9:f8:ed:
50:98:58:06:87:33:03:88:f3:ca:fd:02:67:ea:0e:
9b:bf:75:63:60:0d:fb:f9:86:bb:2b:88:94:d6:bc:
1d:af:d8:7f:e9:28:c4:df:b0:aa:ec:66:c9:ce:05:
6c:a8:ec:18:6c:9a:17:04:6a:af:e4:b1:5e:c1:0c:
33:72:79:13:56:b0:df:3d:c4:f1:d4:37:35:8b:d7:
46:c6:48:32:2c:7e:77:b7:17:39:c6:d0:2d:3e:cf:
09:c5:b2:6c:d5:03:33:41:7a:f4:82:dd:e5:36:1e:
18:72:f8:34:25:92:90:bf:45:27:2b:3a:04:ba:1d:
5c:2f:c8:52:c3:42:f1:7d:ba:19:f4:71:26:1d:c8:
89:d1:66:f0:c0:11:f6:72:61:65:d6:69:98:02:f4:
8a:e2:71:03:d6:af:2d:1c:66:da:97:f7:57:5c:d2:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:98:37:19:BC:31:EE:CB:FA:78:93:60:99:E6:B7:E3:47:6D:70:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9Jg3Gbwx7sv6eJNgmea340dtcJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:5e:2f:66:f8:d1:76:b3:e9:33:f4:a9:9e:a0:7c:bd:68:53:
ec:0a:fb:66:4a:03:c2:99:44:70:81:53:a0:1f:7f:8c:cc:f5:
01:63:d0:00:f1:1f:0b:8a:52:90:d2:96:4d:e5:89:9c:42:d7:
e6:82:91:bf:b6:51:83:6a:7d:68:24:40:9c:c8:bc:2d:b4:35:
c5:41:c6:24:0f:52:26:8c:2a:31:89:e8:e4:c0:58:78:f2:de:
77:0d:2d:1a:ba:99:cd:76:ec:34:d7:ef:81:16:8c:68:bd:0b:
7d:fc:b4:c6:00:fa:df:06:6e:ea:d4:69:73:e0:5e:35:ca:d4:
65:59:83:08:13:a0:16:67:05:e7:07:b5:95:c5:15:ee:e9:30:
de:c7:cc:52:98:da:c6:18:44:37:57:88:66:35:3a:39:c8:eb:
5c:fa:21:f2:f5:3a:fb:df:64:6e:98:c6:67:2d:24:48:78:25:
41:a2:4f:e0:52:56:41:1f:5f:96:7e:bb:bc:21:68:37:b4:10:
a6:fd:0d:15:73:89:e8:24:13:2b:87:c5:63:d9:aa:a9:b3:e2:
e3:4c:77:6a:0a:6b:f7:70:c6:db:3a:3b:49:f2:09:30:b6:d5:
9e:ee:e4:d6:5b:47:49:f3:d2:d0:35:e9:3d:89:6a:15:01:5f:
b6:cf:f8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:24:40 2025 by rpki-client