Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9_nQ0VhjBxiKYr76-31Zlzobh2c.roa
File: 9_nQ0VhjBxiKYr76-31Zlzobh2c.roa (raw, json)
Hash identifier: VV6vrej3/v3HpEN5EJVs0/ylM5pIZLKCVZ+DJW2wMXc=
Subject key identifier: F7:F9:D0:D1:58:63:07:18:8A:62:BE:FA:FB:7D:59:97:3A:1B:87:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A044E201EE4A356715BD7122414C7E5B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9_nQ0VhjBxiKYr76-31Zlzobh2c.roa
Signing time: Thu 20 Apr 2023 20:04:41 +0000
ROA not before: Thu 20 Apr 2023 20:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:187:a044:6e81/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a0:44:e2:01:ee:4a:35:67:15:bd:71:22:41:4c:7e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 20:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7f9d0d1586307188a62befafb7d59973a1b8767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:3b:33:b5:fc:91:3e:63:ff:ce:b8:a2:c3:
17:05:ad:27:ca:d0:50:f4:e7:e5:cb:4a:3f:14:6b:
4e:af:8a:c2:68:ff:54:7f:d8:cf:dd:d3:c4:80:cc:
87:90:e4:6d:0a:5b:52:e5:41:bc:5f:5c:15:41:0f:
34:78:65:11:16:9d:da:df:f5:4f:7d:3b:21:f3:a2:
7b:ea:48:79:6b:ed:aa:38:8e:77:f7:40:b5:4c:10:
ad:e5:fe:1f:69:b8:92:9e:49:6b:6c:e1:b3:fd:22:
b4:9b:df:d2:2e:14:5c:ff:55:6e:0c:18:00:8f:85:
d4:a0:c8:8d:bd:44:4a:30:79:d0:f4:2d:3a:e4:6c:
f4:7e:40:ec:88:90:af:5c:29:be:23:9d:fc:2f:c6:
bf:a0:3e:35:3d:d7:f6:c5:3e:49:24:2c:6c:c6:a1:
a8:07:9d:9e:47:73:51:db:3e:ed:a5:26:55:26:94:
ac:80:3b:99:9a:f6:67:59:7f:a4:7c:3e:f3:06:16:
3b:0a:f5:cc:e5:17:a2:68:f5:21:e5:a3:ad:99:39:
cb:e6:94:fd:f9:36:24:39:53:b9:11:aa:06:38:12:
9b:93:55:d3:74:68:b6:05:b1:03:77:3e:f7:3a:71:
af:87:16:55:af:f7:24:1e:cf:a3:28:44:98:85:f9:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F9:D0:D1:58:63:07:18:8A:62:BE:FA:FB:7D:59:97:3A:1B:87:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9_nQ0VhjBxiKYr76-31Zlzobh2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:f8:8c:1f:b9:63:e2:c8:b5:9d:3b:ba:10:ad:a4:2f:47:de:
45:e5:6e:a9:11:03:e7:7f:52:66:6f:5b:7c:68:6c:d0:53:8d:
00:1d:f1:b2:56:8c:ee:71:a6:84:c0:01:d1:6b:65:74:ca:df:
3e:44:e3:5c:6b:7e:a1:fd:e9:63:7d:17:b4:68:b2:e8:e7:00:
f1:40:f0:47:cb:bc:1b:b8:3e:9d:0a:ba:57:e6:f3:e3:f7:91:
2d:4c:73:4f:b7:54:96:ff:de:a1:80:c5:6c:bf:56:89:3d:58:
15:2b:48:c8:f2:1f:f0:ca:32:e0:85:4f:86:fe:65:c2:be:9f:
96:6b:4f:6a:c6:2b:7e:cc:d5:92:dd:7d:8c:16:45:ff:73:65:
55:5a:4e:f0:f8:34:d7:91:4e:44:d5:89:76:20:bf:64:5d:aa:
80:aa:b2:c4:85:c7:3b:b7:06:7c:6e:a3:aa:59:55:3f:74:2a:
04:8c:d7:9b:2d:3e:2a:19:1a:a0:16:ca:04:56:de:64:90:a3:
4c:ba:8d:f1:c9:0b:11:19:4b:b2:0c:db:14:59:ae:e7:e4:64:
ab:11:44:68:f5:7b:21:08:8f:cb:10:f2:fd:18:6f:ef:dc:16:
90:5f:48:fe:13:71:75:4c:e0:63:da:6d:5e:93:6b:d7:45:c3:
6b:fe:4f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:41:35 2025 by rpki-client