Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9Mtq4RYCbM2LzOXcqr5XHY-duz8.roa
File: 9Mtq4RYCbM2LzOXcqr5XHY-duz8.roa (raw, json)
Hash identifier: 9fqT0l9OyXEgOOPEfgc8BSGmurUhKLx68cWTeCianr8=
Subject key identifier: F4:CB:6A:E1:16:02:6C:CD:8B:CC:E5:DC:AA:BE:57:1D:8F:9D:BB:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893BDC27D3B58D1938D194569A993CD7EF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9Mtq4RYCbM2LzOXcqr5XHY-duz8.roa
Signing time: Sun 09 Jul 2023 18:13:51 +0000
ROA not before: Sun 09 Jul 2023 18:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3b:dc:27:d3:b5:8d:19:38:d1:94:56:9a:99:3c:d7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 18:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4cb6ae116026ccd8bcce5dcaabe571d8f9dbb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:42:cc:7f:ac:cd:34:ac:b4:2d:30:54:84:85:
5e:fa:32:44:46:4b:46:0f:2d:2f:72:c9:b1:27:77:
a3:9b:08:11:a5:a3:bd:e1:03:58:63:a8:42:0b:7b:
47:3f:c1:20:fa:8d:e4:aa:1b:c4:ce:16:ff:ea:17:
fc:d6:91:00:0d:49:0a:00:1d:14:14:75:ed:2a:90:
f3:e0:e9:c8:ae:b5:a5:d8:de:5b:34:3a:84:cb:2d:
0d:87:e5:30:d7:ed:62:f2:ee:72:b9:6a:75:85:19:
0c:4c:40:ca:9b:fa:c6:6d:23:7a:2e:ae:c7:1c:79:
e3:bc:8c:49:04:3a:94:52:df:1a:6e:72:53:57:3b:
5e:4b:ec:29:66:73:fc:18:d2:e4:c4:b9:af:3b:07:
33:0b:9a:6d:a7:25:0e:e2:83:66:bf:ef:ab:19:97:
ca:ab:3f:25:51:5d:80:53:2f:d0:b5:81:0a:3f:78:
0f:f5:4c:86:20:5a:ef:3c:60:2d:87:dc:da:0e:9d:
58:38:d0:7c:65:99:41:1d:2f:1c:8a:f3:ac:7f:8c:
1b:68:ec:c8:ac:8a:e5:0c:90:f9:a1:06:96:56:4a:
08:96:b2:e0:b0:97:e2:3e:88:ef:07:e0:31:2a:17:
20:ce:4d:4e:f3:6b:42:03:4b:a9:4f:54:8c:b8:35:
96:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CB:6A:E1:16:02:6C:CD:8B:CC:E5:DC:AA:BE:57:1D:8F:9D:BB:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9Mtq4RYCbM2LzOXcqr5XHY-duz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:bf:8a:4b:e3:f2:b6:05:67:07:06:18:f8:1e:12:36:54:26:
9f:5e:e6:11:6e:d3:ea:f5:64:6b:04:72:40:33:76:b2:be:e0:
70:40:8e:76:19:71:e9:a2:59:c3:73:3e:e0:22:bc:ef:aa:99:
f1:40:46:36:67:e5:09:2d:cb:f1:d7:5b:f2:29:21:49:1a:52:
b1:4a:e1:3e:ce:7c:16:06:de:ed:7b:87:b7:8f:72:9e:fa:f7:
eb:4e:95:ab:0d:9f:a6:5c:1c:16:60:62:c4:19:08:27:77:e4:
24:bf:ae:c7:58:ad:20:14:21:c1:c4:dc:b4:65:72:2c:92:4f:
25:91:b4:ee:c4:1f:d5:9f:c7:e4:cc:05:0f:2e:6c:89:0f:d4:
ca:c4:f9:12:a5:95:85:08:8f:c4:be:e9:3b:e2:f1:2b:de:ac:
a6:15:21:c0:ef:5e:6a:c9:59:fe:52:0a:8c:bb:d3:9b:b5:51:
5f:19:38:2f:d9:c6:bb:6f:6a:82:59:f9:88:2c:61:1d:de:37:
9c:4d:f4:7f:f6:c1:13:d5:6c:e5:ce:99:75:01:21:c1:d6:76:
d2:40:af:ca:6b:48:40:0c:4e:aa:c1:69:56:97:a4:5e:d7:33:
8f:fb:b7:5f:b5:36:87:04:41:5e:3e:9c:18:46:94:dc:ff:1c:
08:a5:34:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:22:03 2025 by rpki-client