Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9k6F41S3VWQZXSEZul013cj3KTg.roa
File: 9k6F41S3VWQZXSEZul013cj3KTg.roa (raw, json)
Hash identifier: 73y0/o3su9tspSK+ODggNa3/+TtCNkosMtEJ6T9ZbRI=
Subject key identifier: F6:4E:85:E3:54:B7:55:64:19:5D:21:19:BA:5D:35:DD:C8:F7:29:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E74EA4D8641027913E3D73252C8710AA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9k6F41S3VWQZXSEZul013cj3KTg.roa
Signing time: Sat 12 Aug 2023 01:13:58 +0000
ROA not before: Sat 12 Aug 2023 01:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e7:4e:a4:d8:64:10:27:91:3e:3d:73:25:2c:87:10:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 01:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f64e85e354b75564195d2119ba5d35ddc8f72938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:75:70:c8:77:0d:16:6b:77:d4:55:3d:97:
74:24:52:3a:7e:c9:c0:49:b0:74:ce:f2:cd:f8:ff:
60:11:e7:d5:46:aa:79:52:b5:d6:7a:a0:1c:00:2e:
6e:5c:e0:4f:28:0c:b3:42:2e:ca:0c:cf:fc:38:2b:
d6:50:3e:79:77:62:a2:d9:64:34:e0:81:d1:1b:ce:
30:bb:7c:d8:c9:27:d6:57:ac:9d:d6:24:8e:0f:65:
52:b5:b8:08:28:47:8d:78:7d:25:f0:aa:dc:62:76:
ba:8d:58:9a:29:24:63:e6:b7:b9:0a:2e:69:99:f4:
2c:a6:d0:21:7c:00:0d:d9:98:95:ea:32:76:13:64:
f7:1e:f3:bd:c6:84:07:78:7f:04:4a:42:81:a5:fc:
b7:8f:44:6b:d1:fe:83:91:8b:04:5a:77:da:38:e0:
fa:8e:ee:84:42:ec:34:06:c6:64:11:0e:85:da:e8:
d3:4e:24:86:2f:de:76:e1:f4:fe:95:f6:4d:64:c6:
b2:02:bd:43:37:07:c2:de:e5:aa:85:d6:b0:7a:3b:
48:c2:1c:ce:78:86:85:d7:88:e1:88:b6:d7:c5:90:
19:5a:14:9a:32:24:b4:fb:55:4b:54:35:23:b3:a9:
33:37:85:3f:da:45:65:0a:e8:5a:dc:2d:be:8d:eb:
22:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4E:85:E3:54:B7:55:64:19:5D:21:19:BA:5D:35:DD:C8:F7:29:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9k6F41S3VWQZXSEZul013cj3KTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:93:70:96:76:06:ba:41:ad:16:69:d4:e3:db:12:d1:30:b4:
31:86:ed:e2:13:62:49:a1:5e:8d:70:9a:97:db:3e:1b:d8:8f:
4d:02:95:f0:37:38:e1:31:b9:d1:e6:e0:f8:3e:64:4c:cd:ba:
b1:f3:26:17:08:93:e2:e7:d5:dd:f6:9e:b8:d6:75:0d:b0:a6:
90:3c:9c:b3:53:81:35:34:26:e3:48:9b:19:af:0a:70:15:80:
20:8e:23:79:0f:42:8f:8e:95:fb:95:18:46:6a:66:b9:ce:5b:
6c:f6:c7:9d:81:39:dc:47:52:96:a9:9e:c7:36:86:52:d7:48:
7b:a5:20:1c:c3:a9:99:86:9c:ac:a6:a8:ba:3d:83:29:4f:7d:
13:85:1b:f4:26:ad:db:0d:c3:35:e5:74:f3:56:d7:3e:f5:4b:
4f:35:0d:75:ff:f6:49:6e:5d:26:3b:66:24:e7:90:2c:ac:5e:
95:9a:12:27:75:65:40:f4:6c:b2:eb:c7:6d:6a:50:eb:99:59:
02:26:bc:6c:8f:86:85:ba:2b:3a:cf:1c:7c:18:a3:6f:43:5d:
d6:a8:eb:1e:80:50:2c:b7:4c:19:9a:9a:b7:ef:14:6f:2d:de:
7e:6c:d7:7d:cf:73:1b:da:db:e1:30:a3:df:20:c2:4b:92:85:
7d:df:f6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:37:08 2025 by rpki-client