Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9qKM2MetMa-HCUAV38r8xLAAxdg.roa
File: 9qKM2MetMa-HCUAV38r8xLAAxdg.roa (raw, json)
Hash identifier: V/vyDEK4lcidjxD5gZptzO8rHYDqK5df+lIGj/MZ2zI=
Subject key identifier: F6:A2:8C:D8:C7:AD:31:AF:87:09:40:15:DF:CA:FC:C4:B0:00:C5:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7619D833
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9qKM2MetMa-HCUAV38r8xLAAxdg.roa
Signing time: Sun 27 Mar 2022 08:11:13 +0000
ROA not before: Sun 27 Mar 2022 08:11:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1981405235 (0x7619d833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 08:11:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6a28cd8c7ad31af87094015dfcafcc4b000c5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8f:64:e3:5f:a3:ca:3c:f7:ce:ad:f0:d2:10:
4a:25:7c:3b:b0:fa:da:e5:fd:8f:7f:50:d6:84:00:
89:d0:bf:2f:54:e8:df:82:1d:06:6c:85:97:cb:1b:
c4:86:6d:af:cc:6a:4a:d8:6e:46:79:55:7b:55:59:
8c:70:80:52:81:4c:6b:1a:53:55:cb:db:26:8c:54:
82:30:6a:0d:c6:79:83:15:e2:b6:ea:33:6f:a7:0b:
ba:8b:e1:4f:cc:c0:49:f8:50:6c:e9:70:a5:3b:c7:
39:32:dc:50:15:66:8c:05:00:b0:93:e9:89:62:dd:
2e:38:47:7e:56:fa:16:4f:54:05:93:1b:bd:a0:1a:
9d:31:59:a8:b8:8c:47:9a:1e:4c:1c:b9:82:99:1a:
07:e6:4d:ea:46:4b:8c:c3:7f:4b:7d:87:38:a3:41:
3c:c7:82:a2:41:86:ba:29:0e:75:d4:77:9f:d1:dd:
c2:8c:ae:44:d9:74:f2:d0:2a:7e:ae:13:01:95:82:
0c:eb:9f:05:2c:68:21:1d:dc:ef:9e:64:00:ec:36:
a4:ac:0a:06:31:92:26:83:8e:3d:e8:e9:d3:85:a0:
08:65:ad:60:bb:64:e8:1b:6d:2b:e5:2d:b9:26:8d:
36:6d:8e:4a:3f:41:09:6c:0d:91:97:1b:ac:4f:1b:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A2:8C:D8:C7:AD:31:AF:87:09:40:15:DF:CA:FC:C4:B0:00:C5:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9qKM2MetMa-HCUAV38r8xLAAxdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:30:8e:5c:24:cb:2d:d6:e1:cb:4f:fc:c9:f6:31:40:17:9a:
68:9b:9e:73:3d:7e:96:76:02:2f:95:96:7c:1a:8f:7f:51:4e:
22:3d:96:eb:56:5b:49:57:1b:b7:38:2f:36:ad:36:85:dd:12:
ea:3e:82:84:d3:55:81:1c:6f:ed:26:57:25:24:bc:79:48:d9:
10:c1:02:44:0d:9b:e6:48:30:2b:d7:d4:55:13:0e:d0:9b:1e:
8b:9c:33:2f:ac:89:5a:8a:68:93:28:75:f0:52:f6:82:d6:c8:
85:bf:65:d3:45:5f:94:78:ce:98:28:56:84:c8:41:94:a9:d2:
d6:1a:56:c3:66:03:a0:01:bf:50:c6:96:40:2d:4e:af:b0:51:
dc:49:fe:db:6c:c3:71:55:66:5f:6b:c4:64:d9:f8:b8:20:60:
ca:85:7a:25:40:3a:df:9d:f5:45:b5:07:b6:ad:09:45:36:46:
7c:cc:53:0c:47:6f:bd:be:91:a7:dd:1c:ef:99:98:47:ac:5f:
a0:45:94:ae:cb:c5:be:88:2f:df:3a:71:da:85:f3:1b:a2:48:
bd:df:59:ed:b3:d2:12:40:2e:5a:03:b9:74:e5:a2:c5:c0:b8:
43:67:18:a9:d4:90:5d:7a:c1:8e:d9:9d:ab:77:36:85:95:fc:
72:3b:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:40 2025 by rpki-client