Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9qZeJ6KxtINsO0CeoDFqM4kJrkc.roa
File: 9qZeJ6KxtINsO0CeoDFqM4kJrkc.roa (raw, json)
Hash identifier: lafcFdUYoH3PRkSQzAK1RMAsdEDn1Y8rNQs/N0IP7UY=
Subject key identifier: F6:A6:5E:27:A2:B1:B4:83:6C:3B:40:9E:A0:31:6A:33:89:09:AE:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181D5F8E920E5275284F424F45E454D1A97
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9qZeJ6KxtINsO0CeoDFqM4kJrkc.roa
Signing time: Thu 07 Jul 2022 00:04:28 +0000
ROA not before: Thu 07 Jul 2022 00:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:181:d5f8:bb8a/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d5:f8:e9:20:e5:27:52:84:f4:24:f4:5e:45:4d:1a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 7 00:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6a65e27a2b1b4836c3b409ea0316a338909ae47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:10:f3:d5:9e:0e:51:e3:16:cf:e5:eb:a8:
b5:05:bd:a8:b7:cb:06:53:2d:13:5d:56:b8:08:af:
7e:7b:df:c7:c2:0f:71:05:93:bf:11:48:37:14:eb:
05:8a:be:8b:6d:e8:fc:57:3e:b4:39:b5:30:10:0a:
f1:76:01:d2:60:bb:27:f2:4f:84:2a:30:28:9f:e3:
a2:fe:df:4c:b9:3d:55:7d:17:b9:f4:e8:46:01:ed:
e6:06:ae:6c:b9:19:cd:0e:ad:4d:c4:e9:d6:2c:7e:
d1:f9:0b:ed:39:d9:60:d3:45:8d:f8:5c:9f:fa:14:
8d:38:02:88:99:3d:f7:1c:91:47:35:eb:c5:d8:79:
7b:ae:c5:c5:0f:df:43:96:79:85:d0:ad:7f:70:2a:
d6:f2:4e:a9:88:7c:00:ef:97:13:d9:37:a5:f1:42:
74:5a:3d:7e:4a:b9:4a:4a:9f:a7:bc:d9:7f:3d:51:
58:4d:ce:60:78:1c:32:7e:9e:f4:d6:b2:89:4b:36:
e0:3e:19:62:d4:1f:61:71:bc:0d:74:24:1f:21:22:
42:72:6f:32:61:5b:0d:b5:b1:16:14:ef:ca:36:f0:
70:52:a7:1d:4c:4d:aa:4d:c0:3e:67:31:85:8b:1a:
f5:b3:75:7e:d2:ea:d4:21:93:28:2b:8d:17:81:3a:
b0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A6:5E:27:A2:B1:B4:83:6C:3B:40:9E:A0:31:6A:33:89:09:AE:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9qZeJ6KxtINsO0CeoDFqM4kJrkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:63:00:ff:b3:81:fc:ae:8a:bc:e4:b1:50:9e:82:97:f2:e1:
65:a4:14:59:b3:76:b6:cc:ee:93:52:4c:97:c4:3b:c2:86:d4:
b9:99:c1:5f:83:8b:af:21:91:e4:a6:75:41:58:ca:e5:06:34:
cc:d4:28:97:95:1f:9c:f9:df:08:47:5a:a3:ee:30:79:63:81:
fd:ff:09:c0:31:fe:08:d4:db:5b:84:cd:09:27:6a:42:96:53:
ba:e9:ae:5c:b9:c9:4e:10:5a:cd:6f:19:63:3a:35:0a:78:8a:
d3:98:e1:84:39:66:4e:60:68:1c:25:ca:33:65:93:ba:e1:2e:
03:61:64:24:74:94:f1:5b:52:ba:1e:a4:bc:41:06:c9:65:75:
75:20:34:35:df:72:d2:53:88:aa:6e:9e:22:eb:b7:ff:46:91:
54:b5:96:9e:ec:6a:5b:0d:34:55:65:0f:62:44:4c:d7:90:d7:
74:c1:a0:f6:bb:0b:ae:d8:55:c5:cc:13:22:ae:90:ff:dc:da:
65:9c:60:09:03:ed:38:69:04:79:db:6b:6d:e8:eb:d5:a7:02:
28:23:5c:43:3d:59:40:69:63:40:fa:6c:1b:bf:79:ee:f9:2f:
44:08:ff:7c:2d:ca:3d:a3:99:7b:9f:45:94:64:68:61:b6:ea:
95:53:8c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:00:43 2025 by rpki-client