Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9lMwuRmlsAAaKzUgyTL32mFLces.roa
File: 9lMwuRmlsAAaKzUgyTL32mFLces.roa (raw, json)
Hash identifier: cdCX8Z2/ZIvGGjudhBiJLpiHkb2RCmdYfXnMfhqgeRo=
Subject key identifier: F6:53:30:B9:19:A5:B0:00:1A:2B:35:20:C9:32:F7:DA:61:4B:71:EB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185FADBD23A48B63DD29C299D2B68D5D0B6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9lMwuRmlsAAaKzUgyTL32mFLces.roa
Signing time: Sun 29 Jan 2023 00:09:48 +0000
ROA not before: Sun 29 Jan 2023 00:09:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fa:db:d2:3a:48:b6:3d:d2:9c:29:9d:2b:68:d5:d0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 29 00:09:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f65330b919a5b0001a2b3520c932f7da614b71eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:ec:17:13:54:f3:fe:24:c9:95:19:99:3b:
65:24:9c:76:13:bf:04:04:b0:72:9a:39:e9:a0:7e:
93:bf:f3:dc:00:de:f9:1f:a8:bd:5e:17:bc:65:3b:
68:c7:f3:a8:b1:0b:00:3b:60:94:24:80:7e:af:84:
05:df:5d:0b:32:50:20:eb:80:b3:45:43:66:03:f0:
40:ad:8f:34:03:a3:08:37:14:c8:df:92:eb:01:8e:
7f:b5:7d:07:24:78:ed:60:56:01:54:7f:80:b9:1d:
25:0e:5b:28:08:fa:4d:38:cc:a7:73:c7:5d:3a:f6:
c6:d4:24:c6:e1:23:5b:04:a3:2e:47:1e:27:a8:c4:
73:46:4d:18:2c:9d:d1:b3:a8:37:90:1c:9a:3f:40:
39:51:92:73:92:a9:7e:ff:73:46:47:e2:d8:23:64:
6a:b2:d9:24:31:8b:85:3d:08:24:29:fe:f6:e7:52:
a6:56:69:cd:cb:78:cb:4e:67:cd:ed:a6:25:1f:df:
db:46:7f:e6:e6:1a:99:56:d8:55:2f:80:c0:67:31:
75:c8:9f:f8:b7:1b:7c:5a:99:94:dc:d2:cf:8f:df:
68:7d:cb:ab:77:8c:37:7b:19:af:2b:92:7e:9e:06:
7d:8a:ed:21:84:5e:7b:d6:b3:12:f1:c0:1d:e7:d1:
86:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:53:30:B9:19:A5:B0:00:1A:2B:35:20:C9:32:F7:DA:61:4B:71:EB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9lMwuRmlsAAaKzUgyTL32mFLces.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:8d:44:97:d2:eb:9e:00:89:8f:bc:a1:12:66:2e:ea:6e:a9:
88:72:a0:20:72:60:95:8b:8a:37:2a:36:d7:32:b2:0d:3c:5b:
c9:00:c1:4f:05:2f:5e:2a:fe:ae:6e:01:f0:b2:2a:ef:1d:ef:
1b:d6:4a:78:ed:6c:e2:31:2d:4f:91:e4:15:d6:28:47:d6:be:
c8:2a:29:1a:f7:31:1c:81:84:dd:cd:ea:e9:69:9d:3a:7d:a4:
33:29:de:db:11:62:b1:d3:e1:fe:ad:d6:f7:ae:4a:2b:72:9f:
f9:78:a1:37:e5:94:85:f6:c5:07:d7:99:9d:e5:4f:c1:71:16:
a0:11:e1:0b:62:67:c4:e9:c0:4c:6b:f5:b3:51:76:85:b5:cf:
d6:d2:de:59:28:7f:37:ab:63:fd:be:55:ea:80:b7:8b:b4:d4:
31:51:62:44:2e:da:7c:a3:4c:5d:34:e9:4f:1f:4d:2c:e7:6e:
9f:2a:24:33:30:43:40:71:ed:14:36:e3:c3:56:18:d9:74:8f:
79:38:1e:85:dc:86:7c:07:0f:f6:6b:8a:48:e5:87:1a:07:cd:
93:9b:c3:a7:14:a3:9c:1f:58:d8:3d:ed:f8:e4:4f:4d:35:d3:
4a:d5:04:fd:5e:da:10:eb:33:23:3d:2b:d6:0d:92:f1:58:5e:
75:b0:73:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:45:30 2025 by rpki-client