Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9P45GXlknM0vUOszdbl-hYX-nIg.roa
File: 9P45GXlknM0vUOszdbl-hYX-nIg.roa (raw, json)
Hash identifier: LBRszsVEPalz4Eq6so0V6tZ0lXp8DJk52FHOiOy9nrM=
Subject key identifier: F4:FE:39:19:79:64:9C:CD:2F:50:EB:33:75:B9:7E:85:85:FE:9C:88
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882930F5849D3B9FAFC631C75170813BCF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9P45GXlknM0vUOszdbl-hYX-nIg.roa
Signing time: Wed 17 May 2023 10:10:54 +0000
ROA not before: Wed 17 May 2023 10:10:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:30:f5:84:9d:3b:9f:af:c6:31:c7:51:70:81:3b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 10:10:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4fe391979649ccd2f50eb3375b97e8585fe9c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:fc:2b:83:04:59:d9:ee:00:bc:7e:d7:db:
c3:11:3e:2c:5e:00:12:c2:68:e0:06:35:09:7a:0a:
9e:7e:a1:7c:89:4c:77:11:1e:c3:15:f9:1b:58:66:
78:4e:d2:29:32:8a:ea:9e:b6:b8:82:e0:7c:d8:8d:
23:61:06:7d:e4:bb:72:e4:e9:1f:a3:d8:a2:b3:c2:
ab:57:e6:ff:ab:5d:d9:54:8d:72:99:0d:a3:8e:0e:
52:a6:a8:cc:18:d6:7a:ae:86:2d:25:aa:be:5f:20:
03:85:83:5e:62:7a:26:35:3c:76:49:ad:2f:c7:28:
17:44:89:65:bb:5c:f6:96:d5:ba:bf:18:58:da:a2:
07:b3:e6:d9:65:f8:ca:12:fd:fd:5a:2b:00:47:a2:
67:1e:77:31:55:ec:3c:2b:87:2a:68:ae:36:95:25:
a1:0e:da:86:5a:ca:74:12:07:09:58:3d:4b:85:5e:
8f:81:a0:90:02:30:c4:c6:c9:1f:e4:e4:6c:b2:21:
55:b7:29:3f:5b:7e:d1:43:9e:a4:3b:7c:63:8a:95:
c3:e8:cd:81:86:cc:02:f9:4e:25:17:c9:4b:94:be:
d6:49:23:51:4c:55:f8:10:6a:0f:16:ad:ed:ce:11:
6a:92:91:65:8a:c7:19:cd:fb:d5:32:13:38:b6:6a:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FE:39:19:79:64:9C:CD:2F:50:EB:33:75:B9:7E:85:85:FE:9C:88
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9P45GXlknM0vUOszdbl-hYX-nIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:d2:ed:34:80:5b:a0:f6:26:ea:75:8e:39:35:12:74:6b:e0:
ba:4e:e9:87:59:c5:90:ea:81:0e:78:8a:b0:00:ad:ec:8e:e1:
a6:b8:16:8b:77:57:01:fd:b7:04:c5:1c:42:37:e7:68:86:d6:
26:00:b8:ed:ab:c1:c8:86:e2:30:ce:16:fa:19:b3:4b:fb:68:
6d:61:cb:e7:91:c5:d0:ad:40:6d:32:37:6f:17:40:13:b4:7e:
cf:1e:b2:a8:91:33:78:c6:28:3d:5d:6d:02:73:42:c9:6a:79:
f5:3a:eb:74:af:a2:37:a8:4a:cc:06:3e:35:52:5d:d0:88:d5:
85:86:f8:0a:fc:e4:5e:f7:58:28:4e:e9:e9:da:68:b2:ac:64:
4a:78:f3:d9:aa:0c:2f:9f:e9:27:d4:cb:9c:ad:7c:8b:ef:02:
40:e3:c3:74:3b:a8:78:6a:74:dd:f5:2c:7d:bd:53:1c:68:fc:
ff:e6:2f:e7:6e:c1:84:b5:15:cd:6f:d8:80:f0:c4:52:96:ff:
45:a3:24:33:8f:75:7e:ff:b8:90:6d:47:7a:46:05:35:a6:26:
c3:ec:bc:47:4c:de:ce:7a:ab:e9:0b:87:4f:34:cc:cb:a8:8d:
26:35:ad:c7:09:da:95:32:4d:bb:44:72:98:5c:d2:99:00:5f:
f7:d6:62:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:08 2025 by rpki-client