Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9hHZZ4sBtPlK-cKyVlhbVT_2nvo.roa
File: 9hHZZ4sBtPlK-cKyVlhbVT_2nvo.roa (raw, json)
Hash identifier: FlQzgYfEgfSWyIvqNn5XnT4xyNRNuiqorkGc0O5fCrg=
Subject key identifier: F6:11:D9:67:8B:01:B4:F9:4A:F9:C2:B2:56:58:5B:55:3F:F6:9E:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188E410F3FF6A9EBB3C00CFBA73BBF31660
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9hHZZ4sBtPlK-cKyVlhbVT_2nvo.roa
Signing time: Thu 22 Jun 2023 17:04:56 +0000
ROA not before: Thu 22 Jun 2023 17:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:e410:61ae/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e4:10:f3:ff:6a:9e:bb:3c:00:cf:ba:73:bb:f3:16:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 17:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f611d9678b01b4f94af9c2b256585b553ff69efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:da:b6:b1:3a:8c:86:bb:0b:e3:08:35:39:41:
df:d8:09:bb:45:79:e3:51:06:6b:98:38:53:cb:7c:
1d:1d:a6:54:87:54:66:41:16:99:63:2b:33:3d:93:
c8:27:4a:2a:47:6c:28:02:90:ef:4b:a8:93:71:be:
43:76:ff:81:88:25:02:ad:7d:b5:e0:17:eb:ef:ca:
78:6d:d4:3d:fc:1d:81:cf:11:3b:19:b0:9b:50:00:
85:89:78:c8:06:69:50:d6:9f:b0:25:9d:cf:be:51:
b1:1a:51:dd:03:8b:8b:94:92:30:c5:30:b7:cf:cb:
f4:fc:fc:9d:b1:a6:be:75:09:d4:6d:6f:90:49:bb:
9d:97:f8:32:1b:08:c3:6c:2b:05:67:80:a7:73:54:
9d:4b:84:74:d0:8a:62:20:e1:41:f7:30:3e:b5:13:
1b:eb:bd:30:6d:80:6e:63:cb:6b:4e:34:13:a8:7f:
0c:aa:e9:dc:37:e1:9c:e5:7e:15:bd:51:9e:7d:cb:
78:5b:04:f0:30:09:06:fb:d3:62:22:0c:ff:06:6f:
bb:6a:fc:79:3e:72:f3:d1:b5:33:9a:43:a8:eb:30:
3d:04:44:7c:d2:d7:51:8e:4c:e5:45:5a:46:9f:f9:
c6:51:8b:23:ce:fa:5e:e4:02:2c:3f:ca:19:26:d0:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:11:D9:67:8B:01:B4:F9:4A:F9:C2:B2:56:58:5B:55:3F:F6:9E:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9hHZZ4sBtPlK-cKyVlhbVT_2nvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:41:97:cf:95:50:1a:b4:fe:94:cd:63:17:62:94:71:de:64:
1b:af:62:9c:e7:3a:91:99:2d:10:40:62:b7:d2:46:0e:65:1d:
13:07:85:b6:ed:75:f3:c0:f2:cb:be:a8:dc:56:9b:d3:28:b6:
18:38:dd:ef:2e:89:50:23:c4:a1:91:d6:f6:70:85:e4:d6:80:
bb:b5:8f:7d:c3:b4:a6:a9:9d:43:a8:2a:f1:71:b4:9e:47:09:
c6:9a:0a:c8:fb:7c:9f:d5:af:0f:72:b2:af:6e:95:9b:ea:6e:
0d:5b:62:2b:8a:1e:cc:5a:c7:54:5b:88:ed:7e:29:28:9a:53:
29:9e:64:0a:14:a5:5b:44:57:de:33:9b:98:94:4c:93:70:76:
2d:de:6d:4e:9c:af:b7:97:8c:9d:6e:b6:b0:c9:5c:71:30:91:
b7:3d:88:74:00:37:44:46:cc:ae:9e:25:da:59:0d:f3:23:bd:
58:26:2a:37:73:aa:65:40:58:77:30:d8:5e:f1:a8:1a:e3:15:
ce:9b:29:b9:91:eb:0e:14:dc:3e:24:44:72:f7:e9:67:cc:f5:
04:2f:e8:dd:47:38:8c:cf:0d:2d:ca:87:7c:88:af:6c:ce:33:
53:7f:aa:21:83:de:b4:49:96:9e:5d:e5:35:a7:2e:4a:ec:98:
e8:95:b9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 07:20:33 2025 by rpki-client