Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9lCVVhw8lnnkQBapkUE87JbErFc.roa
File: 9lCVVhw8lnnkQBapkUE87JbErFc.roa (raw, json)
Hash identifier: hpCsgWStZ6nZyT/fPGAbDs2a5l0hCC1yqb2U8SZkJEs=
Subject key identifier: F6:50:95:56:1C:3C:96:79:E4:40:16:A9:91:41:3C:EC:96:C4:AC:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899031C361B8C8040825211B12431838C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9lCVVhw8lnnkQBapkUE87JbErFc.roa
Signing time: Wed 26 Jul 2023 03:15:27 +0000
ROA not before: Wed 26 Jul 2023 03:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:90:31:c3:61:b8:c8:04:08:25:21:1b:12:43:18:38:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 03:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f65095561c3c9679e44016a991413cec96c4ac57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:2c:0a:73:bd:4b:0a:89:13:ab:a2:63:c6:
96:3e:8b:87:48:51:18:29:3a:e7:85:ec:c6:ca:6e:
85:c9:15:f3:fb:f8:c5:ba:b5:b5:1a:cc:76:d8:da:
5a:1a:15:82:c3:86:0d:70:46:8e:5d:64:87:53:48:
28:68:ac:76:60:cc:a1:a2:ea:3f:5c:39:05:87:72:
84:14:ef:56:56:0e:ae:b9:eb:d0:67:05:b2:0e:0d:
55:c4:e1:02:be:ab:df:9a:15:f0:59:0e:88:a1:d7:
85:25:63:b3:fe:9b:f1:03:d5:3e:97:d3:9c:a1:67:
46:ce:fc:e3:4a:2f:c2:21:b9:ef:09:a4:d6:6c:a2:
21:6d:90:e8:de:85:b8:7c:13:23:25:90:8b:f9:a7:
25:09:b5:83:a5:a2:3d:ef:cb:65:ec:cc:f3:6e:25:
90:e8:95:6f:48:18:8d:b1:81:98:d1:ef:d8:c2:29:
df:d5:53:8c:32:b1:41:5a:cb:8a:be:aa:81:7d:3c:
3e:ad:41:80:94:21:4c:f5:11:d8:70:26:1e:bd:22:
20:5e:9c:af:88:3d:38:f5:77:36:5e:9a:65:33:7f:
a7:69:b2:77:65:75:4f:41:74:07:34:12:be:a7:36:
86:f2:a9:ad:d7:79:47:72:90:34:62:03:34:8b:fd:
d3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:50:95:56:1C:3C:96:79:E4:40:16:A9:91:41:3C:EC:96:C4:AC:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9lCVVhw8lnnkQBapkUE87JbErFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:39:a9:a0:a8:ce:03:06:6d:18:63:ee:e9:e3:ff:d9:69:73:
4c:f1:36:c8:ca:20:3a:8a:85:d9:28:d4:3f:df:53:da:8d:32:
5c:0b:5e:fb:60:c2:e1:73:2d:d9:fc:d3:c1:5c:e0:2e:f3:d5:
a7:92:16:f4:4c:16:92:43:ea:50:7e:16:77:e9:7c:1b:f8:ff:
63:d9:25:1f:36:19:26:23:75:85:08:f0:42:2c:af:93:dd:a6:
b0:dc:f4:a4:8b:da:7d:01:a9:32:60:e1:6a:0f:59:0c:90:f6:
d2:f4:c5:68:19:06:ba:7f:b1:1c:01:2c:a3:96:be:f6:28:d2:
0d:a0:a1:11:00:01:e1:d6:75:37:da:96:83:00:77:17:bc:41:
23:85:79:a3:25:55:46:9c:3e:85:5d:e5:8f:a2:cc:52:99:2b:
e6:4c:12:7a:93:df:1b:d9:95:63:9c:9e:00:51:2d:be:7c:b4:
0c:8c:a5:77:4e:88:b7:c5:f9:16:22:26:df:6a:21:61:73:4f:
06:b3:d7:3e:a3:c7:45:cd:05:73:fa:5f:4f:29:19:2b:3f:6b:
fe:9b:a9:c3:02:3f:38:34:51:4b:1c:61:05:ca:78:56:b6:53:
4c:62:6d:8b:8e:e2:25:b3:7c:4b:51:a9:16:9e:b0:43:96:04:
a9:6d:1b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 16:34:56 2025 by rpki-client