Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9LHdfL1ZukY8g8-2kPhW_44_MzE.roa
File: 9LHdfL1ZukY8g8-2kPhW_44_MzE.roa (raw, json)
Hash identifier: U1iPJsl9eTMmcmEtGJAtmOB5IsTnyiXn5z+/DC2D8Ng=
Subject key identifier: F4:B1:DD:7C:BD:59:BA:46:3C:83:CF:B6:90:F8:56:FF:8E:3F:33:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870CAE1048E33810F4D3F746D76EC61BD3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9LHdfL1ZukY8g8-2kPhW_44_MzE.roa
Signing time: Thu 23 Mar 2023 04:15:46 +0000
ROA not before: Thu 23 Mar 2023 04:15:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0c:ae:10:48:e3:38:10:f4:d3:f7:46:d7:6e:c6:1b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 04:15:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4b1dd7cbd59ba463c83cfb690f856ff8e3f3331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:a8:d5:44:a9:fc:66:9c:31:f7:46:db:c5:
5e:cf:47:35:b7:83:50:dd:7c:a1:7a:be:9e:9e:be:
5f:de:05:27:41:28:ff:47:44:52:17:88:ab:34:49:
9e:25:42:f5:34:52:12:85:54:33:16:c7:a0:1d:f6:
c0:4b:68:31:7f:a3:87:2f:7f:54:17:e1:77:45:fe:
74:cc:ea:d8:12:39:9c:4c:b6:77:6e:42:94:84:f4:
e5:fb:b0:a6:b1:08:44:c5:24:7e:2a:fe:ca:af:f2:
1a:c2:a7:fc:74:ed:0b:35:62:7d:ac:9c:04:25:66:
e5:ac:c0:bc:4e:c0:66:50:45:5a:dd:71:eb:33:a7:
93:70:43:e1:76:ee:a6:ce:25:b9:f6:2b:79:e0:06:
4b:92:ee:5a:0f:ed:7a:37:91:5c:4b:88:0f:43:d2:
66:f5:db:bf:fd:f3:9b:dd:41:87:37:eb:96:d5:fa:
21:ea:78:d7:14:ca:ec:4f:ad:76:ce:a1:70:32:ee:
ad:92:d3:5d:03:a1:2d:ca:4d:90:a6:a9:e4:23:97:
1b:45:f9:39:dc:37:9f:56:3c:c7:d6:b5:2e:53:c1:
2c:60:6b:c1:eb:02:f2:e1:df:35:66:1c:0a:a6:c4:
76:47:79:f0:e6:fe:29:bd:85:28:78:e1:e8:2b:3b:
a8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B1:DD:7C:BD:59:BA:46:3C:83:CF:B6:90:F8:56:FF:8E:3F:33:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9LHdfL1ZukY8g8-2kPhW_44_MzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:05:f0:fd:60:b3:c2:70:0b:39:e6:f8:38:42:e7:49:e7:a4:
55:c6:d7:9c:fe:02:25:dd:5d:7a:21:bd:0b:62:f8:bc:21:0e:
b4:af:bb:f6:ba:43:83:73:83:9c:c1:64:b9:39:78:0a:6e:10:
e1:74:4a:a9:a0:3c:c5:90:a9:d0:14:c2:ac:90:cc:af:3f:54:
01:41:c3:1a:2b:ad:3f:64:af:fd:61:6e:e1:1a:9f:41:45:d2:
47:fc:01:ab:db:60:64:e7:b7:f3:d6:f6:46:6c:9f:ca:b5:63:
da:5b:03:0a:aa:97:18:88:2e:21:6c:68:14:47:69:1a:30:fa:
c5:ae:06:29:7b:3c:47:cb:ba:03:a8:36:93:43:5b:83:aa:5a:
9b:e2:b2:4d:1d:06:1d:ee:e7:5a:fd:e8:be:6d:99:20:8d:cd:
c4:3c:01:a2:d2:8c:ea:ba:9a:59:cf:ee:6e:03:2e:03:44:a9:
9e:6c:c4:44:50:1c:9e:f7:53:fa:5e:03:fb:9d:96:96:8b:5c:
f4:4b:a6:41:b8:e8:c4:50:21:b2:13:33:6f:ad:30:06:62:7d:
9e:47:f7:ff:dc:7c:53:ec:a2:02:15:a3:c1:d6:95:9c:07:a2:
13:3e:0a:67:27:31:9e:cb:69:a5:b0:51:f7:1c:ac:f7:98:c2:
cc:dc:94:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:26:40 2025 by rpki-client