Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9S4vN8P4fGQMjHUzQX36dcBecf4.roa
File: 9S4vN8P4fGQMjHUzQX36dcBecf4.roa (raw, json)
Hash identifier: ehd5LFVFGrbEVMDjYBTJcVRgiioHAPspODTU8tUz3/E=
Subject key identifier: F5:2E:2F:37:C3:F8:7C:64:0C:8C:75:33:41:7D:FA:75:C0:5E:71:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C5369295786EF10CFFF9C3FA9AC79B80
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9S4vN8P4fGQMjHUzQX36dcBecf4.roa
Signing time: Thu 09 Mar 2023 07:12:13 +0000
ROA not before: Thu 09 Mar 2023 07:12:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:36:92:95:78:6e:f1:0c:ff:f9:c3:fa:9a:c7:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 07:12:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f52e2f37c3f87c640c8c7533417dfa75c05e71fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:53:c9:dd:62:f6:f7:05:6b:43:cb:56:5e:
57:03:97:0b:59:39:6f:68:18:2e:be:b8:c5:ad:ea:
bd:58:fa:87:74:52:6b:21:b5:be:45:72:ec:db:fe:
dc:50:f3:97:4d:44:c8:f4:c9:41:fd:c8:d7:d9:40:
a4:dc:6f:3f:ae:c6:ec:4b:b5:3e:e6:c4:b0:c0:f0:
6c:9b:cc:47:ca:7a:19:c0:ab:51:92:a9:89:4a:9b:
58:00:16:ba:60:29:d3:40:aa:39:3d:bf:7b:c7:32:
b5:1c:ed:ff:cb:0c:25:67:7a:68:38:bd:fc:ab:4c:
c4:94:0d:28:a0:c6:f6:21:97:4e:ce:84:60:0b:0a:
1b:04:4f:35:3d:c9:e6:14:37:ce:32:0c:e2:0f:49:
da:b3:cb:c5:58:33:9c:32:51:43:45:ff:c5:58:28:
aa:42:80:e0:a2:4e:c9:47:9c:13:78:f5:2c:99:dc:
54:77:06:ea:a9:83:8d:b7:c9:42:6b:9d:2c:08:df:
0d:02:e7:5e:68:ea:56:92:4d:30:00:4b:58:01:a0:
6a:21:ff:36:ff:81:b0:68:0a:75:73:5a:91:0c:89:
58:11:21:be:39:22:cc:d3:10:92:ac:93:8f:65:8d:
9a:64:d0:5f:87:1d:f1:24:4d:2b:b9:26:e1:30:2e:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2E:2F:37:C3:F8:7C:64:0C:8C:75:33:41:7D:FA:75:C0:5E:71:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9S4vN8P4fGQMjHUzQX36dcBecf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:f9:a4:f6:62:92:60:24:8a:7d:1c:17:fc:5f:83:13:ed:86:
2c:30:8a:ea:92:be:dc:a8:cb:17:ae:95:af:98:df:03:58:bf:
4d:91:6c:17:9f:ed:af:42:df:c7:c0:80:32:30:28:de:63:11:
bb:56:b7:2c:23:1e:ee:f6:5c:7d:4e:01:77:24:69:ff:8f:f7:
62:da:7c:a1:d5:1f:fc:aa:2e:85:85:36:be:2e:26:5d:ab:38:
da:b5:18:f1:c0:8e:8e:3d:58:86:a5:b0:6d:4e:f9:2c:e5:f2:
76:2b:73:a3:5a:3e:9b:fa:8e:85:e8:81:2d:d6:6d:e6:47:a9:
30:0b:5c:38:4c:b7:00:46:3d:30:55:aa:8c:6b:7a:70:5a:fe:
ad:16:a2:5c:22:ec:5a:1e:98:b1:bb:17:e0:1a:cd:19:04:b6:
54:2b:f4:c9:08:db:12:a6:5f:df:db:89:3c:a5:6a:a7:cf:b1:
68:a5:41:89:1b:f6:92:4c:5e:65:06:7e:4d:5d:77:fc:69:ef:
fa:7c:04:fc:a2:b0:dd:8e:e2:93:54:b4:1c:ff:e6:0f:2c:e7:
10:a0:be:da:47:c8:8b:66:c7:60:7b:7f:a8:60:a5:cc:28:48:
89:f9:70:79:75:12:6c:e0:f7:e6:9b:f1:a9:00:5e:27:61:4e:
00:83:da:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:47:52 2025 by rpki-client