Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9LgIZ8dFkXVXHYHmM_H3hAIRCTs.roa
File: 9LgIZ8dFkXVXHYHmM_H3hAIRCTs.roa (raw, json)
Hash identifier: QGBHwBaOJSFK46oNUwYc2Oasru8niTrH9N5nXXWkB2U=
Subject key identifier: F4:B8:08:67:C7:45:91:75:57:1D:81:E6:33:F1:F7:84:02:11:09:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E63AEF0239C83B159709733DDBED70DF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9LgIZ8dFkXVXHYHmM_H3hAIRCTs.roa
Signing time: Wed 15 Mar 2023 17:04:27 +0000
ROA not before: Wed 15 Mar 2023 17:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:e63a:cfc3/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:3a:ef:02:39:c8:3b:15:97:09:73:3d:db:ed:70:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 17:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4b80867c7459175571d81e633f1f7840211093b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:86:47:8b:31:5d:56:fb:19:74:e6:29:11:
d9:a5:20:f3:b6:83:04:dc:1c:f2:af:cf:59:b5:80:
15:ed:72:6b:64:c9:1a:7d:36:23:16:fc:8b:5f:f2:
30:dc:1d:b1:3c:b8:61:19:b9:75:35:3f:63:66:10:
f7:40:a0:1a:dc:4d:1e:48:b3:58:df:e0:53:11:88:
fe:8a:42:15:88:80:44:c4:e4:29:5b:d8:39:a0:59:
22:6f:d3:28:91:95:db:9a:0a:b1:99:7c:d2:94:1a:
1f:fa:14:3f:f9:38:e8:c6:ab:2c:27:e0:bb:17:eb:
6e:0a:bd:9a:fb:0b:11:96:af:0b:fc:33:04:34:a9:
03:a6:be:22:1e:3b:1f:35:b8:3a:a7:88:d8:e0:65:
1a:d9:22:52:74:5d:b3:54:b4:67:25:3c:8f:ca:50:
59:28:56:a8:3c:17:00:7b:a9:a2:ae:e4:77:6e:2c:
59:58:a1:4b:1a:71:9a:5c:ed:20:b3:a2:06:ba:4f:
ca:01:12:23:3f:e5:7c:97:59:1c:76:8c:cc:3f:86:
bc:f7:5d:a1:03:4f:13:93:03:57:6a:a7:6f:f0:21:
41:20:f4:b3:40:28:68:da:fe:f2:f9:9b:f6:12:a5:
3d:76:ad:a0:c9:0d:9f:4e:e4:89:c9:49:52:f7:a3:
4e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B8:08:67:C7:45:91:75:57:1D:81:E6:33:F1:F7:84:02:11:09:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9LgIZ8dFkXVXHYHmM_H3hAIRCTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:35:51:8f:30:b4:17:d5:1b:25:62:93:38:96:3e:5e:32:a5:
e7:18:c3:3d:83:d0:c0:78:a9:17:7c:cd:06:91:f3:43:86:b8:
b2:fb:11:99:50:2c:25:46:f4:5e:aa:31:74:cf:18:ef:a3:38:
f9:db:76:23:17:34:dd:51:fa:a1:01:d5:38:82:be:a5:c9:8c:
4b:f7:ec:16:6b:ce:e2:ca:43:2d:84:c8:84:23:93:22:a7:7f:
a6:64:c8:eb:da:43:28:51:36:15:dc:52:3b:d6:ba:f1:aa:4d:
9c:f7:86:3f:c5:22:a3:68:ce:e0:7a:0f:d3:f5:65:8f:17:b7:
b8:ca:a7:03:df:96:bb:49:d9:68:f5:3e:3d:2e:0b:64:0c:15:
dd:12:7c:7e:1f:4c:6e:37:44:d0:39:98:b2:f3:0b:94:58:ad:
8e:97:cd:af:7e:91:2c:81:b8:6f:6b:4d:cd:1e:b8:3e:5b:78:
b2:9f:51:5e:42:14:72:bf:0b:71:10:a9:2d:30:ce:9c:7d:c0:
c0:b5:dd:a6:39:9d:01:4c:ff:0a:b7:46:2b:3d:62:75:7e:89:
4f:04:54:17:64:60:8a:b3:fd:a7:8d:b9:a6:43:6b:6e:e6:12:
fa:f4:70:9b:e1:24:84:a5:44:f9:0e:f1:fe:83:1c:21:e1:35:
4f:19:4a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:28:35 2025 by rpki-client