Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9PRIM94hMUvU19E7grsCCSUhVQQ.roa
File: 9PRIM94hMUvU19E7grsCCSUhVQQ.roa (raw, json)
Hash identifier: 4vwfZ3gqwfQ4+KVcjcch7B6zyLJuLj4KLyXUGuq7LcU=
Subject key identifier: F4:F4:48:33:DE:21:31:4B:D4:D7:D1:3B:82:BB:02:09:25:21:55:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018262565E7D363082C2C820CB49FFAE922C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9PRIM94hMUvU19E7grsCCSUhVQQ.roa
Signing time: Wed 03 Aug 2022 06:13:23 +0000
ROA not before: Wed 03 Aug 2022 06:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:56:5e:7d:36:30:82:c2:c8:20:cb:49:ff:ae:92:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 06:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4f44833de21314bd4d7d13b82bb020925215504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:8f:7e:6b:97:9e:17:fc:cd:49:dd:b5:71:
24:f2:d0:92:a5:2e:77:73:a4:7b:c9:17:a5:4c:9a:
d4:7b:85:7d:49:0d:2f:cf:a7:1d:02:85:d8:f8:b5:
dc:4d:b7:fe:68:99:b7:57:bc:e5:f1:98:40:08:d0:
5d:74:50:46:d7:90:23:21:36:10:c6:9f:07:66:7b:
9e:51:23:df:dd:dc:54:44:96:d5:7b:19:0d:ba:65:
13:69:35:33:c9:6a:6c:8b:97:a6:55:2e:37:b3:1f:
2b:fe:07:40:f1:11:03:2d:e6:83:a8:1c:c3:2d:d4:
97:5e:ee:ec:64:34:dc:fc:87:d7:42:f9:2e:bf:b6:
16:36:8b:93:56:4f:ef:99:cf:39:bd:e0:31:e8:b7:
d6:7d:db:35:e3:39:3c:57:dc:d7:45:a5:8d:9b:70:
59:3b:df:c3:36:db:e6:df:47:be:d0:39:11:67:5d:
0b:d7:04:88:6f:0e:a5:da:46:3b:70:d7:1d:55:ab:
65:ce:bd:7e:35:f0:78:1b:1b:19:70:f5:f7:da:45:
10:67:79:f6:9d:5f:c5:23:43:41:1a:3b:e7:1f:37:
f5:d5:9c:ca:80:99:42:81:13:7b:e2:fc:39:3b:c3:
d0:b9:05:53:38:8e:6f:1c:88:5a:e8:5e:74:6c:35:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F4:48:33:DE:21:31:4B:D4:D7:D1:3B:82:BB:02:09:25:21:55:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9PRIM94hMUvU19E7grsCCSUhVQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:86:13:39:f0:d0:53:9b:d1:a0:d6:6f:e2:63:96:6d:ea:34:
3d:14:6d:3f:f0:73:d0:55:2e:22:1f:40:4e:ae:00:ee:3b:10:
f6:60:5e:00:20:d1:11:f1:95:24:4e:8a:a9:ef:01:3c:99:e4:
e4:74:98:4c:ed:48:21:ee:ef:16:05:a2:dc:ed:9e:59:6c:42:
15:c5:37:6c:4d:26:5a:9f:cd:46:11:ba:75:6a:68:9c:7d:1c:
4c:6f:3e:26:72:d4:47:8a:45:d3:b3:81:cb:86:92:7a:e0:a2:
b3:2a:5f:d7:89:18:66:ef:64:f5:b9:cb:3c:57:1a:7c:10:ad:
03:7b:63:92:71:57:2b:9a:52:d1:37:da:8d:31:e8:32:ee:c0:
56:d0:bd:aa:c6:74:d2:dd:cf:28:51:75:6c:7a:c0:d0:dd:a9:
19:14:36:e0:35:ed:17:de:e0:2b:c4:68:e4:39:b0:96:4b:59:
73:8b:75:72:4d:38:bb:2e:01:46:15:dd:d9:a6:62:4a:37:d6:
5a:d7:94:22:1b:12:dd:14:2c:6c:e3:f7:fe:b9:25:0f:8a:40:
70:67:6c:50:93:1f:80:9f:9e:9c:09:84:82:6c:2d:13:26:8f:
e2:33:a1:45:fc:a3:cf:2b:33:d5:e4:5c:3e:b9:44:f0:57:8f:
70:82:9e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:09:04 2025 by rpki-client