Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9lo_wSYsVmjaJCkkhmXAS5oesk8.roa
File: 9lo_wSYsVmjaJCkkhmXAS5oesk8.roa (raw, json)
Hash identifier: zK8FbJIZKqSK3Ce0ztMp0vYL6mvlKtOqXhs87aF44lE=
Subject key identifier: F6:5A:3F:C1:26:2C:56:68:DA:24:29:24:86:65:C0:4B:9A:1E:B2:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AD957DCA41BF5A4F3F0629BE3F370B60
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9lo_wSYsVmjaJCkkhmXAS5oesk8.roa
Signing time: Sat 04 Mar 2023 17:05:00 +0000
ROA not before: Sat 04 Mar 2023 17:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:ad94:c40a/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ad:95:7d:ca:41:bf:5a:4f:3f:06:29:be:3f:37:0b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 17:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f65a3fc1262c5668da2429248665c04b9a1eb24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:e9:fe:7c:e3:59:af:a0:17:bc:c8:75:0e:
c5:9b:36:53:81:ce:0c:39:80:00:70:fa:13:a3:87:
e9:13:09:b7:c9:59:2b:2b:83:04:b2:fb:84:72:18:
dc:27:c8:cb:3d:46:2f:70:e4:d1:11:a3:fd:2a:72:
1e:64:29:d8:f1:4d:a4:bc:3f:64:07:65:92:f9:e5:
13:12:25:9d:84:96:da:8e:eb:1c:05:68:cd:42:4f:
ae:21:cb:05:0f:f1:08:47:58:83:91:96:24:cd:19:
32:5c:15:ff:1e:5e:f2:9f:51:50:28:cc:d6:1f:49:
42:eb:07:7a:81:7b:f6:a8:0f:fd:38:b6:67:02:7f:
d7:19:f4:91:18:5e:16:4e:41:d6:18:96:4b:b5:09:
59:97:f2:4a:eb:78:a1:38:8f:98:5c:33:c1:bb:95:
ed:5a:d9:82:c9:5c:6c:43:6d:26:64:be:6f:96:96:
a7:f5:ed:35:50:b2:e5:5a:76:55:c5:03:9a:4c:49:
cb:ec:dd:1b:f3:84:57:da:9c:45:2b:84:26:77:01:
0d:db:4b:5a:91:42:fa:31:4d:87:80:b3:14:4c:a0:
26:a6:e1:b0:d7:25:4e:29:88:9b:4e:45:7b:93:c2:
08:2c:47:1d:23:5c:aa:3f:6c:85:84:2e:c7:c0:98:
66:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5A:3F:C1:26:2C:56:68:DA:24:29:24:86:65:C0:4B:9A:1E:B2:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9lo_wSYsVmjaJCkkhmXAS5oesk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:17:66:a0:c9:05:0c:78:f8:80:8d:13:06:c6:4c:a9:40:7a:
b8:35:9a:92:a9:c2:7a:45:71:65:93:0f:1b:f9:55:86:5f:b8:
e1:fc:ee:e5:6d:fc:15:e9:60:29:4e:04:a7:f5:dd:1a:18:e9:
35:0a:37:3e:1d:69:b7:ee:16:27:04:3e:5b:62:ef:b5:81:c9:
a7:45:37:21:99:c8:fb:17:b8:09:78:65:e3:09:df:08:02:11:
6c:ce:08:30:57:a7:cd:fe:58:bf:e8:3b:fc:66:de:de:d0:d2:
d3:a4:66:42:6f:bf:f4:52:4c:6f:b6:66:25:08:4d:8c:f9:c8:
c1:4e:8b:63:ad:95:da:4e:95:72:c9:22:13:8b:f2:60:ed:20:
99:0c:e8:9f:1b:08:46:6e:8c:68:d1:36:d8:34:dd:c3:45:5c:
28:f5:74:59:f1:66:37:6f:9d:64:23:9f:ca:f9:6f:b4:28:50:
27:8d:59:70:31:6a:70:75:1c:3a:e7:f0:3a:e5:be:c7:17:57:
8d:9d:34:54:0e:9c:44:55:a7:eb:ad:09:cc:fd:ce:7a:27:12:
60:65:75:08:cb:de:ee:e8:bd:af:83:0b:7f:e7:b4:ba:ea:24:
6f:f2:ae:f0:33:9d:8c:23:c2:01:31:1d:49:92:a1:6c:46:81:
d3:76:99:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:16 2025 by rpki-client