Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9hU5q7oo5XZEgCs_B5kCT76KrDM.roa
File: 9hU5q7oo5XZEgCs_B5kCT76KrDM.roa (raw, json)
Hash identifier: 71y6D7NqA/FNIg6nEp4gkrI9FEyFwfVX9vHivqCqeZ0=
Subject key identifier: F6:15:39:AB:BA:28:E5:76:44:80:2B:3F:07:99:02:4F:BE:8A:AC:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189875B7D93CB444DF411B8B95CDA22270C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9hU5q7oo5XZEgCs_B5kCT76KrDM.roa
Signing time: Mon 24 Jul 2023 10:04:27 +0000
ROA not before: Mon 24 Jul 2023 10:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:189:875b:534d/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:87:5b:7d:93:cb:44:4d:f4:11:b8:b9:5c:da:22:27:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 10:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f61539abba28e57644802b3f0799024fbe8aac33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:8b:ea:0c:3e:d8:0f:d8:52:58:0d:db:58:
7e:35:c0:6e:ce:55:25:95:3e:1e:1e:80:68:39:cc:
0b:ff:7d:bd:c8:a7:d2:00:be:ff:99:a9:c3:94:00:
b5:ed:22:a3:80:8d:fa:8a:56:30:f0:01:e9:99:53:
d1:7d:34:80:88:7d:4d:6d:7f:78:8f:06:bb:14:d2:
13:17:76:b2:12:e5:63:32:7d:b3:7e:f1:90:03:a2:
66:b5:e2:fb:28:85:2a:f6:0b:c3:ec:e5:c2:55:23:
aa:fc:16:4c:8b:13:ce:db:c4:c3:72:0b:75:90:1a:
f7:32:0d:f9:61:a0:2f:0d:e3:64:66:47:df:a8:4e:
9a:ff:1a:94:ec:ab:d0:91:6b:cf:7c:03:d9:e9:f1:
b9:bc:f5:05:5d:c1:fb:a4:8e:ed:c7:51:5f:22:dc:
41:d2:bd:28:ba:bd:c4:99:db:77:7f:62:82:9e:25:
60:59:04:5c:9d:d0:7f:9e:16:97:0e:40:90:ec:77:
f3:ff:d1:4f:70:42:cf:96:05:9a:ca:98:9b:1c:3a:
a2:a4:56:f5:9f:e9:ef:de:8d:c7:c5:5f:74:c8:58:
1c:62:88:4d:e7:37:33:e2:ba:17:c5:da:6b:ac:aa:
05:07:e9:23:61:67:59:c9:38:eb:12:10:23:fb:18:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:15:39:AB:BA:28:E5:76:44:80:2B:3F:07:99:02:4F:BE:8A:AC:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9hU5q7oo5XZEgCs_B5kCT76KrDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:f2:77:69:ff:c8:f1:69:01:f2:95:2c:97:b8:d6:3e:ea:64:
18:d0:f3:69:29:a1:03:24:76:a0:b9:81:ff:66:e3:29:4f:2e:
08:dc:2e:c2:87:9a:26:13:fa:13:89:76:45:5c:34:17:7d:5e:
98:af:41:89:77:47:d3:4e:c2:31:da:e1:16:d7:1d:78:fb:fd:
58:40:b5:64:62:11:ee:8e:4e:d1:2d:81:ff:56:ac:9f:ef:aa:
24:ea:b2:a3:68:99:c3:84:69:ab:94:02:78:58:4f:65:04:b1:
72:3a:6f:f4:a5:f5:5b:54:79:80:a0:bb:ba:f7:c4:64:bf:a7:
e4:c7:00:87:d4:54:6a:b2:77:be:9a:f8:da:0d:a2:87:2c:b7:
42:3c:10:5c:77:f0:03:47:3d:d9:3a:52:5d:af:78:75:25:fc:
f6:35:f0:28:aa:8d:87:00:29:b3:76:a1:53:0e:c6:c4:7f:03:
c6:24:e4:b8:59:23:ec:8b:68:ff:c8:98:c8:bb:eb:03:f6:2d:
e2:bd:11:56:21:6d:d3:a0:ea:ef:89:63:f3:04:fe:23:30:62:
e4:92:c8:84:81:a3:cd:df:05:28:f3:84:bf:9a:49:57:37:1d:
90:b7:d8:49:66:39:6d:5c:ea:d5:93:fd:bc:e2:16:74:e3:17:
52:5b:6c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:23:39 2025 by rpki-client