Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9esWiIqDhVt8NcsPxXIO1uDf5pc.roa
File: 9esWiIqDhVt8NcsPxXIO1uDf5pc.roa (raw, json)
Hash identifier: pKekRiv/jJK7vykSLhfIOqDzRFKfjjtZDsmVDkYzdgA=
Subject key identifier: F5:EB:16:88:8A:83:85:5B:7C:35:CB:0F:C5:72:0E:D6:E0:DF:E6:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6ECC1EBA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9esWiIqDhVt8NcsPxXIO1uDf5pc.roa
Signing time: Tue 01 Mar 2022 17:08:37 +0000
ROA not before: Tue 01 Mar 2022 17:08:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1858870970 (0x6ecc1eba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 17:08:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5eb16888a83855b7c35cb0fc5720ed6e0dfe697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:e1:2f:78:77:b9:f1:9b:cd:a6:0f:f3:79:
f3:2a:3e:44:45:07:c0:cd:07:21:ad:be:54:db:b4:
95:6a:4a:6b:de:f1:f0:64:16:81:78:b3:54:20:83:
d1:58:b0:14:4a:4e:0d:ce:cc:8a:b1:e1:f1:55:f6:
d1:8a:42:19:65:f2:76:6e:14:90:c3:3f:f6:bc:1d:
1a:ed:ad:01:02:aa:77:e9:57:2b:c9:da:85:66:64:
ff:14:17:1a:17:f4:b1:63:cc:6f:d0:04:aa:01:f5:
85:69:b4:1c:3b:65:98:c3:09:ee:da:1c:00:aa:ce:
2a:68:ab:07:87:70:d2:71:0f:7a:16:35:7c:25:3b:
46:e5:54:f2:16:3f:f1:8a:19:3b:86:ad:5e:21:b1:
34:d3:05:6c:b2:96:17:9f:a1:83:96:61:b5:9f:40:
28:65:42:00:93:ba:70:9f:a0:bf:79:c7:c1:3f:a2:
94:90:3d:b8:9f:f9:83:4d:48:59:8f:bf:9a:50:55:
50:1f:e0:83:37:32:b7:b1:89:e8:a4:08:ee:d3:7a:
55:a4:79:c6:c0:10:52:4c:a0:05:e7:00:91:06:41:
39:56:b1:5d:c1:e1:c5:64:f7:17:4e:da:4c:0b:f6:
89:5f:41:4c:ca:f1:2b:3d:6d:ba:68:53:70:ae:bb:
c3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EB:16:88:8A:83:85:5B:7C:35:CB:0F:C5:72:0E:D6:E0:DF:E6:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9esWiIqDhVt8NcsPxXIO1uDf5pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:a8:64:b2:99:04:d0:19:52:8c:5b:3d:a4:68:a8:8b:cc:12:
22:9d:6f:81:d6:11:98:07:e5:ad:c4:62:ae:a0:b3:81:72:16:
66:5a:e6:1f:31:80:e3:46:ed:85:9f:e4:c7:61:4e:af:94:76:
f7:5b:f4:29:df:c8:c0:cc:dd:77:a6:38:24:f0:ed:d4:d7:22:
59:84:28:a8:61:4b:b9:7d:0f:2a:73:d8:95:bc:63:87:5a:ed:
68:f5:00:bf:93:cf:15:69:26:96:b5:d1:ed:3d:91:66:cc:32:
31:15:bf:47:2f:67:ef:d9:f0:de:55:73:f3:e8:63:f3:2a:6b:
4e:9a:5d:6a:62:01:3d:14:25:e6:ed:71:36:41:42:7d:a6:74:
73:36:5b:0a:18:55:f5:59:95:1b:e3:b0:6c:d1:01:4f:81:e4:
ac:2e:85:ae:bf:0c:1f:cb:0a:1e:4b:a6:56:a4:1c:5a:80:86:
31:a4:bb:8f:b7:89:a3:90:a7:ce:34:ba:e7:e5:d0:10:55:fc:
c4:18:dc:84:88:3c:d1:ea:c7:42:c7:ed:a5:66:d7:2a:75:b8:
e0:3a:9e:2c:e2:7e:ca:84:8a:79:fb:07:84:b4:ea:4b:b2:0d:
2a:6f:22:71:66:a7:d0:55:3a:04:62:41:f8:73:f7:07:88:94:
76:0b:db:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:16:36 2025 by rpki-client