Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9nBY95DUHn0Rd8yU3OgNZ70BXoI.roa
File: 9nBY95DUHn0Rd8yU3OgNZ70BXoI.roa (raw, json)
Hash identifier: zlxiABLao7qI4OhUNn1wsnL/5CopTwX812wQFFjjI+w=
Subject key identifier: F6:70:58:F7:90:D4:1E:7D:11:77:CC:94:DC:E8:0D:67:BD:01:5E:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6D25C9BF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9nBY95DUHn0Rd8yU3OgNZ70BXoI.roa
Signing time: Thu 24 Feb 2022 00:17:19 +0000
ROA not before: Thu 24 Feb 2022 00:17:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1831193023 (0x6d25c9bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 00:17:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f67058f790d41e7d1177cc94dce80d67bd015e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:87:d5:8e:84:26:8d:00:c8:ca:13:ae:fd:
a4:b7:92:8f:ea:ed:5c:79:53:ac:90:ca:d7:7e:33:
c0:f2:02:e8:5e:58:27:61:51:9f:c1:97:50:8a:31:
c6:4d:f6:de:e9:1c:28:02:aa:59:74:ba:9f:5e:8b:
ba:e4:89:41:cb:da:0d:6c:3f:52:8b:99:75:04:b3:
4b:c7:73:b2:fc:c5:88:3c:d8:b5:c1:cd:1a:52:81:
4d:1f:52:86:19:37:22:63:9a:fa:5f:52:39:af:d4:
eb:c8:5d:9d:68:b7:a4:df:e8:ce:61:c5:e6:c5:ea:
7c:08:54:54:86:c7:f7:ea:c8:07:10:80:af:ed:fa:
8b:c1:3a:bc:e7:a6:12:29:b2:c9:5f:66:91:86:dd:
07:56:52:5a:a7:f8:29:7b:fa:9c:fa:6d:c6:13:ee:
c0:48:a7:52:38:1d:80:31:68:18:98:e6:7f:7c:7b:
2a:a9:dc:b7:24:d0:e4:e9:ab:77:96:bb:fa:5f:de:
04:d5:aa:30:11:fe:c1:9d:6c:22:a1:03:84:6a:97:
f1:83:27:71:fc:b8:22:ae:30:03:94:5f:07:19:52:
d2:ee:2d:09:18:79:d6:50:cf:cd:f9:4d:76:7f:75:
3a:37:3c:b0:72:61:19:fe:d9:0f:34:2f:1f:bb:17:
55:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:70:58:F7:90:D4:1E:7D:11:77:CC:94:DC:E8:0D:67:BD:01:5E:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9nBY95DUHn0Rd8yU3OgNZ70BXoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:f1:56:9b:c9:f4:50:00:d8:57:15:eb:93:db:9c:fe:e6:d4:
80:4e:b5:22:9b:fd:35:14:4e:66:e9:da:43:68:5a:2d:59:b7:
39:bf:cd:d3:7f:03:28:ec:54:70:24:01:92:f1:d9:c4:d3:54:
32:d5:67:08:58:92:2d:dd:05:f0:f9:6e:4f:2d:a6:39:f2:46:
4a:e5:fb:e4:03:7c:3a:80:cb:a0:ee:43:7b:55:6d:b6:12:04:
c6:74:cf:8b:59:21:da:53:1e:02:33:c0:6f:a6:e4:74:67:08:
00:9a:65:b8:4f:33:3b:56:7f:70:57:26:fc:a4:b2:bd:db:d2:
9b:be:35:f5:92:3d:f7:9c:0d:00:95:ad:0f:5c:2a:32:c7:21:
47:6d:1a:98:7f:b3:5f:cb:8b:be:c4:eb:22:c0:03:69:57:c0:
02:86:57:41:41:25:12:8e:55:d5:41:0f:12:0c:16:d9:74:aa:
63:ec:a8:2f:f8:49:f5:d8:19:d0:f1:fd:5e:cf:8d:bb:2c:81:
44:72:03:06:57:95:78:1c:2c:2c:61:cf:46:4b:0b:05:24:ea:
84:5e:27:57:65:92:fb:a5:c2:d4:c5:20:aa:a8:ba:5c:3e:88:
ee:14:fe:aa:be:8b:a0:79:0d:ca:db:2b:95:aa:54:cd:69:bf:
19:e6:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:07:32 2025 by rpki-client