Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9poK0svRogN9YYROnsQRkfqa6Po.roa
File: 9poK0svRogN9YYROnsQRkfqa6Po.roa (raw, json)
Hash identifier: in6BC/EYGl+u2Zx74mYd8MpFlPdhAtGEJa/1DQaCwBM=
Subject key identifier: F6:9A:0A:D2:CB:D1:A2:03:7D:61:84:4E:9E:C4:11:91:FA:9A:E8:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A24E6CBF30C1EC991B7A1564BC852A840
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9poK0svRogN9YYROnsQRkfqa6Po.roa
Signing time: Thu 24 Aug 2023 00:16:59 +0000
ROA not before: Thu 24 Aug 2023 00:16:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:24:e6:cb:f3:0c:1e:c9:91:b7:a1:56:4b:c8:52:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 00:16:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f69a0ad2cbd1a2037d61844e9ec41191fa9ae8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a7:0a:55:e5:b1:18:13:b7:71:4c:64:09:32:
f3:6c:19:8b:fd:a7:24:af:ad:9a:8c:e7:89:75:f5:
c7:42:e6:33:97:52:fc:3a:d8:6f:ba:9f:c9:69:71:
21:29:84:74:c4:47:08:7f:39:10:23:7b:67:b0:6e:
95:39:28:15:2a:b1:a7:aa:10:bf:18:f0:92:5a:9c:
eb:0e:42:75:89:74:12:84:de:10:2b:77:85:1a:18:
87:6c:b5:5a:55:d2:c7:d4:12:90:5f:4c:c7:f1:b4:
db:a4:63:8c:fd:fd:a7:82:b9:1a:cf:13:e1:8f:0a:
55:ea:4e:c3:af:e5:ca:34:63:ae:34:41:f5:8a:d7:
5e:9b:6f:23:bf:7d:95:7a:43:5d:db:14:36:4a:83:
f0:e0:b7:6c:fe:05:e6:0c:43:cc:60:65:1f:f1:b5:
27:55:14:e0:94:d6:c9:68:2c:5c:bb:f4:ad:b8:a8:
68:05:4b:af:4e:04:12:62:45:7a:bb:90:f1:90:5b:
d4:75:f9:c9:48:59:08:9e:21:a6:de:37:4b:d3:99:
47:43:9a:57:db:2f:89:6a:7c:04:e0:48:c8:2f:c2:
61:17:b7:06:c8:65:21:24:02:b6:9f:81:5b:96:d5:
3c:62:0b:f2:f7:13:6d:c6:3a:8b:a7:de:b6:5e:42:
4e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9A:0A:D2:CB:D1:A2:03:7D:61:84:4E:9E:C4:11:91:FA:9A:E8:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9poK0svRogN9YYROnsQRkfqa6Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:7e:78:5d:0a:a8:a6:ed:e7:d3:fa:f1:a6:dd:df:b7:36:e8:
76:2d:40:b2:53:41:92:b7:81:a9:d2:e9:b9:ce:42:93:ab:6e:
59:b4:ee:a9:54:03:e6:8b:ac:75:25:16:0e:1f:6e:96:4a:a4:
a3:6f:25:2e:f5:6a:61:68:e3:82:8e:99:d9:f4:c4:b9:5b:64:
76:56:d3:dc:d2:4f:7e:42:fd:23:1e:dd:fc:94:a7:df:8f:c1:
f7:db:b5:06:62:48:34:05:77:73:f5:a3:08:26:81:ff:00:9a:
33:22:72:5e:07:cd:da:76:30:0a:45:1e:ac:ec:7f:6d:8d:85:
51:2c:36:fd:0d:61:43:14:fc:32:62:0c:4c:2e:f3:e0:4a:fc:
37:7c:be:6f:74:ea:a5:8d:11:fa:ea:e7:73:10:91:ce:5e:02:
02:5f:62:a8:d3:84:5e:cf:90:19:fa:2e:73:9b:b5:5a:0b:9d:
fa:8c:9d:76:f2:14:9b:68:51:27:25:9b:02:4b:d7:ce:8e:74:
21:b3:55:90:7f:a4:f5:a4:c7:15:c8:12:bc:18:0f:b7:99:0b:
74:a6:7e:ff:9a:c7:82:25:b7:d1:9e:c2:c8:5f:8c:c6:f4:94:
a7:d9:6c:bc:e4:e2:10:aa:64:d8:ec:9c:7e:d0:cc:0a:c4:04:
02:fa:7b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:05:20 2025 by rpki-client