Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9XLO-rrEIb_I3WMWZ8gjXmr2B-0.roa
File: 9XLO-rrEIb_I3WMWZ8gjXmr2B-0.roa (raw, json)
Hash identifier: 8gOde4D7XUfIeKantWtZOGAre4GL9lo/Sx6ls/P1Tu0=
Subject key identifier: F5:72:CE:FA:BA:C4:21:BF:C8:DD:63:16:67:C8:23:5E:6A:F6:07:ED
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018783F67BB4536B176BBB183AE2833B17DA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9XLO-rrEIb_I3WMWZ8gjXmr2B-0.roa
Signing time: Sat 15 Apr 2023 08:09:41 +0000
ROA not before: Sat 15 Apr 2023 08:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:83:f6:7b:b4:53:6b:17:6b:bb:18:3a:e2:83:3b:17:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 15 08:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f572cefabac421bfc8dd631667c8235e6af607ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:ac:87:f6:22:cf:93:79:d1:1e:ed:0f:4c:
a0:15:49:5c:6b:6f:38:c7:51:b3:9e:ff:dc:b3:2e:
f9:c6:ef:56:9d:96:42:2b:17:8e:75:36:cf:16:9d:
c2:11:07:14:ea:c0:de:cf:45:1c:5f:d2:47:16:a2:
d1:ed:a8:8c:aa:d1:2b:db:c1:de:c2:9c:d5:d8:a3:
e8:93:6a:dc:ad:2d:56:72:83:f5:6d:7a:26:de:be:
37:d7:5f:06:55:21:d0:23:92:ae:c9:b0:70:a9:70:
af:2f:b9:fb:e0:b9:54:22:27:66:c8:f1:93:b8:a6:
a7:69:e7:9e:21:be:99:4c:81:12:10:87:31:73:ff:
d0:e0:40:00:ba:e4:63:b2:bc:c0:3e:cf:bd:4d:2b:
e9:6d:23:0f:84:e9:f1:64:9b:2d:dc:91:fd:0d:10:
8a:07:a7:7c:85:63:47:17:a7:44:6b:4c:63:63:d9:
3e:06:e6:1e:46:02:a7:f1:9b:d2:41:52:1c:17:1b:
1f:3c:29:04:10:6d:de:f6:06:ae:a2:0a:3e:8b:ff:
56:09:82:d4:8c:f5:d0:2e:fb:28:ff:c4:b4:a7:83:
87:c2:e9:18:25:2f:c2:40:bd:c7:38:77:d9:e5:8c:
20:f9:7e:77:f0:9e:7d:c3:7e:12:cc:ec:a5:ea:2a:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:72:CE:FA:BA:C4:21:BF:C8:DD:63:16:67:C8:23:5E:6A:F6:07:ED
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9XLO-rrEIb_I3WMWZ8gjXmr2B-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:f2:38:55:af:7c:f6:a4:d8:1d:52:56:d4:c1:5b:8d:36:0a:
ab:c1:9e:d5:6a:18:90:32:cd:43:2b:c9:d5:6e:63:e5:5a:e4:
9b:67:cf:af:a3:dd:30:d0:d4:41:bb:9e:ce:b4:d4:da:3e:52:
0f:0b:1f:08:45:10:07:fe:d1:65:e2:3a:4a:23:a0:53:46:7e:
06:9f:73:bc:26:6e:6d:4c:f8:01:87:fe:91:a5:26:82:b0:12:
16:4b:df:2e:99:d0:ff:24:e3:ff:a2:c4:09:b0:a3:c8:6c:9a:
6f:8d:7a:2f:59:da:a5:85:ad:00:da:e7:e5:27:aa:8b:7c:c6:
b3:32:a7:e6:a8:9a:81:e6:5f:bf:bf:db:4f:84:cd:ff:63:e0:
0b:21:58:f8:7c:39:f7:00:ba:22:18:7e:cc:f7:24:8e:00:37:
d7:db:4a:95:5f:b3:30:37:23:28:7e:ca:a3:77:8a:3a:70:fd:
5d:0a:51:6a:0a:f9:3d:9d:a2:83:dd:d4:18:79:9c:d3:26:09:
cc:3f:cd:9d:12:e0:eb:b9:36:c2:64:ba:be:9d:ca:3f:f0:b5:
45:5c:79:fb:c5:f0:e3:03:80:e0:94:37:5f:67:d4:f5:b7:cd:
ae:7f:ed:16:ce:3b:6a:69:b1:f8:22:3b:20:3f:ac:c0:f5:52:
39:3d:77:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:27:48 2025 by rpki-client