Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9poXXNktGVqgeonljp8DJnmxEYk.roa
File: 9poXXNktGVqgeonljp8DJnmxEYk.roa (raw, json)
Hash identifier: hM8uU/B+Va7fQ5/JZVogHEHyXMyUSPhZAZonBKIgNbg=
Subject key identifier: F6:9A:17:5C:D9:2D:19:5A:A0:7A:89:E5:8E:9F:03:26:79:B1:11:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868DA2631DF435B00C95C70166AF776A76
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9poXXNktGVqgeonljp8DJnmxEYk.roa
Signing time: Sun 26 Feb 2023 12:11:15 +0000
ROA not before: Sun 26 Feb 2023 12:11:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8d:a2:63:1d:f4:35:b0:0c:95:c7:01:66:af:77:6a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 12:11:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f69a175cd92d195aa07a89e58e9f032679b11189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:a2:78:82:12:ec:5b:a0:86:cc:56:72:fd:
f8:06:80:6d:98:80:5b:71:d8:50:2f:a8:be:d5:39:
a6:f8:e8:05:d8:ac:8d:fc:0f:ef:33:4a:cf:9b:9d:
4b:30:45:3e:cc:e9:50:85:bf:ee:d0:76:fc:a9:10:
18:b9:ec:53:9c:1e:bb:38:d9:65:e3:ed:68:95:31:
bc:9e:40:65:4f:70:1f:ab:cb:bd:f7:45:bb:59:39:
12:e7:47:7c:36:fc:fb:44:b7:76:87:c3:2a:52:e6:
11:8c:d2:40:3d:dc:b2:d7:0b:53:3e:0b:22:d4:ce:
46:de:aa:37:21:96:5a:ef:1b:bc:e7:36:00:2a:dc:
28:ee:c7:ac:83:5c:74:50:5c:fa:e6:f4:b1:23:af:
5c:19:9b:67:26:bb:c2:64:e7:42:78:84:54:35:00:
52:2b:fc:b4:e2:6c:57:d8:72:f8:ed:70:52:65:4c:
9d:42:7d:8c:e7:f7:46:f3:a6:a6:83:46:1a:36:de:
bc:09:fc:a5:55:9c:90:63:4a:0e:73:fa:19:68:41:
1d:4d:b2:66:12:f9:25:25:2a:7e:66:47:66:95:81:
5a:42:89:5a:f4:8b:e1:9c:44:65:ef:ea:20:02:dc:
2f:e7:64:a3:ed:8e:06:a4:fd:ec:5e:87:37:55:a5:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9A:17:5C:D9:2D:19:5A:A0:7A:89:E5:8E:9F:03:26:79:B1:11:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9poXXNktGVqgeonljp8DJnmxEYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:7e:96:cb:b2:d5:a9:35:12:dc:5f:ab:8e:49:b0:14:3a:8c:
22:56:53:b7:c4:9b:71:fd:7e:f7:45:69:dc:14:cd:12:be:fb:
f9:53:47:54:bd:a3:73:09:87:c8:7b:ac:c0:9f:b2:ee:c7:ea:
94:99:3f:a9:ad:2e:df:8d:9c:01:8a:bd:20:44:15:e2:f9:61:
6b:af:79:b4:1c:fe:01:74:1c:01:4c:f7:b1:b1:bb:6f:01:21:
4d:20:5b:10:1d:d6:e6:99:b9:c9:ec:a2:df:06:ae:ee:4f:99:
91:f5:58:ae:78:c2:ae:de:4d:35:0b:d0:7f:bc:f1:31:d8:77:
29:32:1f:be:2c:e4:11:e5:57:2a:d9:c0:a9:0e:e8:58:71:4e:
a9:44:1c:80:80:6b:2e:16:52:af:b1:17:44:62:c9:c0:5c:62:
8b:39:29:21:96:ac:6f:f1:a8:26:85:ef:54:51:0a:9a:b5:7a:
ed:3b:79:af:01:2c:07:59:a8:2a:e4:85:b8:ac:13:3c:27:10:
fe:e9:cd:a0:3d:34:58:2e:fb:e5:8b:32:c2:7b:c1:76:32:79:
c2:83:73:c5:2f:b2:62:66:17:23:23:51:a7:5e:e3:e8:bb:8d:
0f:b6:e1:b6:da:9f:49:4a:35:51:75:e7:54:94:db:7f:52:f1:
dc:a9:d5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:57:11 2025 by rpki-client