Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9WwvUPP90aCb0fwAtILRGW2dorE.roa
File: 9WwvUPP90aCb0fwAtILRGW2dorE.roa (raw, json)
Hash identifier: k9UCiisDwJ/PFSXEDnnRy8i/tbDg4f1ILlNwt9MPncE=
Subject key identifier: F5:6C:2F:50:F3:FD:D1:A0:9B:D1:FC:00:B4:82:D1:19:6D:9D:A2:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F19FCD8E7EFD349EECAA7EE31BE421A9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9WwvUPP90aCb0fwAtILRGW2dorE.roa
Signing time: Fri 17 Mar 2023 22:10:27 +0000
ROA not before: Fri 17 Mar 2023 22:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f1:9f:cd:8e:7e:fd:34:9e:ec:aa:7e:e3:1b:e4:21:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 22:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f56c2f50f3fdd1a09bd1fc00b482d1196d9da2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:d5:2a:ae:27:e0:9c:3c:f2:cb:9d:01:04:
15:69:36:24:7a:bc:9a:94:cf:0c:9d:e4:4a:90:b9:
3c:a8:a4:6d:7d:e9:45:b8:84:37:34:41:ac:b2:c1:
07:89:d2:b2:99:d4:8c:4a:91:e0:c9:af:e7:43:19:
ad:bc:00:c1:54:02:12:4f:fc:6b:83:bf:5a:6c:c6:
90:44:eb:ac:04:3f:cf:52:b8:5c:20:71:b6:14:69:
28:74:1b:dd:bf:f6:3d:c4:80:03:ea:b7:fc:2c:ab:
0f:fa:1d:88:a7:03:c7:59:50:c9:25:22:6a:6c:c9:
94:87:b5:2c:71:6b:fb:55:3c:39:94:ea:3f:19:64:
d6:36:3f:5f:8a:81:18:2c:74:b6:16:e7:36:5b:a2:
db:c5:18:40:1d:7e:85:a6:2a:3f:e4:00:a8:87:40:
25:9e:14:b5:90:a7:0d:c7:8a:9b:5c:3a:30:33:64:
f4:17:d3:d5:06:0f:3d:eb:f9:fa:d6:cc:f3:05:67:
6c:5c:8d:9f:9c:8d:07:bf:51:88:4a:01:f3:b3:1f:
eb:5f:69:d8:e7:45:49:6a:ae:a4:00:c8:05:44:76:
4f:1c:8d:de:c8:df:08:cf:b3:ab:41:ee:1e:a9:99:
62:25:83:37:fa:f7:c1:11:2c:cd:fd:24:e3:01:a2:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6C:2F:50:F3:FD:D1:A0:9B:D1:FC:00:B4:82:D1:19:6D:9D:A2:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9WwvUPP90aCb0fwAtILRGW2dorE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:ab:da:04:13:29:7c:7e:c5:e0:49:38:48:b9:8e:e3:c3:8c:
f3:96:25:36:a4:16:1f:bb:3a:f4:43:a8:1e:77:2f:b7:bd:de:
e3:12:57:4e:47:f6:b4:cf:03:de:7e:7b:47:4c:d4:b8:5e:0d:
09:7f:35:a4:9e:ba:cf:ef:1c:55:e7:08:f4:1c:e1:ca:a3:1a:
e6:58:b2:6e:81:1b:88:ec:11:56:87:f6:62:dc:c3:56:62:f5:
08:12:34:e3:4e:f8:e1:f6:97:57:43:ab:18:c4:c2:d1:3c:28:
19:a1:db:1a:05:71:87:99:eb:76:9b:8d:30:6d:83:70:24:93:
1e:5c:52:14:92:32:10:07:30:32:79:de:64:9d:c1:aa:f6:83:
1d:c9:b2:76:3d:9f:ab:45:68:de:29:b2:2d:85:e1:6c:98:06:
4e:a5:b1:bc:64:50:3b:dd:c9:d0:a1:e2:ee:0b:93:cf:b2:74:
16:a6:ee:ea:5a:c9:57:dd:2f:12:20:38:31:c0:51:56:28:9a:
0b:2e:59:1e:28:a6:5e:d0:24:49:04:69:52:c7:f3:21:f1:59:
d8:d6:9b:d9:3e:57:0b:e4:85:d2:d0:2a:41:70:68:06:51:1e:
a6:11:fd:1c:ba:7e:79:9f:80:12:9a:cd:45:e8:f5:8a:e6:1f:
33:5a:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:47:30 2025 by rpki-client