Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9Kt9DwTOYVhjSJwLnkgTOC1kwJA.roa
File: 9Kt9DwTOYVhjSJwLnkgTOC1kwJA.roa (raw, json)
Hash identifier: ytHF51A1VEnXdgFdRJcNb+6VOkgHiTH8GxO10t18gT8=
Subject key identifier: F4:AB:7D:0F:04:CE:61:58:63:48:9C:0B:9E:48:13:38:2D:64:C0:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 89C59702
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9Kt9DwTOYVhjSJwLnkgTOC1kwJA.roa
Signing time: Sat 04 Jun 2022 05:08:25 +0000
ROA not before: Sat 04 Jun 2022 05:08:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2311427842 (0x89c59702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 4 05:08:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4ab7d0f04ce615863489c0b9e4813382d64c090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:84:e0:00:0f:c1:5b:af:a2:30:0a:22:8f:
90:1e:ff:1e:d3:2e:b5:98:1c:7d:8a:1a:99:e1:ee:
70:05:16:e6:2e:53:2f:fc:e8:ca:13:0e:ec:c1:4f:
00:a9:67:ab:59:6a:23:0f:35:b2:c5:9c:df:0b:1e:
18:f9:89:3f:85:eb:a7:ef:9b:6f:cf:e3:61:6d:f7:
e0:a3:5a:ee:e6:86:f7:44:de:54:28:83:a5:86:c2:
76:6f:cf:35:e0:ab:4f:aa:59:e5:be:fa:d7:7e:12:
0c:c7:72:2a:2b:7d:32:61:56:fa:57:f1:74:32:20:
4c:30:a9:f7:67:5f:f2:ab:b5:fe:e9:92:74:61:11:
8d:e3:17:42:e1:82:15:d7:62:78:f6:59:35:70:f9:
cb:85:69:3d:32:7e:82:b4:bd:dd:00:d6:c8:21:b5:
9f:38:5d:06:cd:68:2d:c3:2e:09:b6:40:cc:d6:0c:
86:7b:0d:53:06:55:86:ad:73:f0:92:d3:07:fe:8b:
82:05:7f:43:02:fd:ef:32:87:01:c6:b3:31:32:a5:
f5:31:e9:da:2a:85:49:56:4c:5f:14:74:7c:15:e4:
68:2b:a6:7a:13:e0:bc:b5:b0:ce:a5:ca:fe:d2:b3:
16:07:ab:16:93:f8:dc:0b:b6:25:be:07:58:75:c1:
0a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AB:7D:0F:04:CE:61:58:63:48:9C:0B:9E:48:13:38:2D:64:C0:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9Kt9DwTOYVhjSJwLnkgTOC1kwJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:1e:01:97:89:50:d6:7b:de:af:17:cf:e2:c5:e1:31:3c:e4:
4e:7e:41:a0:02:ec:da:e5:b4:49:3d:69:1a:7b:c3:6d:1c:e9:
4d:b1:13:b8:f4:32:d8:90:cb:0c:95:ed:8f:02:a1:ae:1e:d0:
03:f6:2a:da:b0:32:33:8c:f6:27:eb:ee:33:f3:96:1f:0b:95:
d1:63:1b:14:1c:20:92:15:44:eb:92:41:90:f1:86:d8:f3:58:
20:5d:c8:4f:e8:83:a3:8d:a9:1f:87:04:04:9c:e8:e4:a0:c6:
07:1a:d9:6b:55:3d:00:e9:f3:41:7c:f5:e3:f5:d7:99:15:8a:
13:7c:ad:fe:10:91:3b:51:69:85:a9:f1:ea:b2:c7:d1:4f:fe:
c6:eb:9b:2c:cd:d1:00:8f:d0:9f:f8:de:13:3c:b7:f1:27:52:
f3:c8:73:e3:d7:a0:41:6c:09:03:5e:a0:30:38:d9:5c:70:0d:
4c:ca:0d:90:c4:c5:92:17:dc:94:ee:68:9d:90:07:e6:8f:d3:
b3:66:5e:21:af:d6:08:54:13:6c:ae:f7:ee:7c:c5:96:50:04:
e2:63:f5:a5:da:61:ed:9b:5a:ee:d8:fd:ea:fe:b8:e5:c1:a4:
be:73:77:5c:94:92:9d:80:dd:07:24:84:ef:7f:4e:a0:10:eb:
b7:62:5a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:00:32 2025 by rpki-client