Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9s_uTY4wDNN_gZi2-ZmoCJeCjj0.roa
File: 9s_uTY4wDNN_gZi2-ZmoCJeCjj0.roa (raw, json)
Hash identifier: ZSiBfZCMNFbGss0HSenwwJrs3DHTkt6TifsWSuBzuYY=
Subject key identifier: F6:CF:EE:4D:8E:30:0C:D3:7F:81:98:B6:F9:99:A8:08:97:82:8E:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7257F500
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9s_uTY4wDNN_gZi2-ZmoCJeCjj0.roa
Signing time: Mon 14 Mar 2022 02:09:43 +0000
ROA not before: Mon 14 Mar 2022 02:09:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1918366976 (0x7257f500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 02:09:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6cfee4d8e300cd37f8198b6f999a80897828e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:18:33:fe:63:c0:c0:9e:4c:68:b4:1a:a3:
e0:55:6e:a7:38:40:55:a2:94:46:7d:4b:43:d9:cf:
98:86:9d:26:41:8a:76:32:71:e2:64:1c:b6:07:72:
8d:e4:93:30:13:c6:79:ac:77:2a:b3:fc:58:5a:ee:
5e:fb:5c:e2:7a:03:1c:a8:6a:b9:10:ba:79:34:6d:
d0:fb:7c:0d:4b:db:b4:48:e2:c5:37:e7:14:d8:4c:
84:20:fe:00:bd:19:5e:93:e4:7f:a4:3e:e9:5c:26:
8c:4a:1e:7c:29:f9:ca:78:e5:1a:ab:9e:09:2d:b8:
b3:b8:91:2f:54:99:ec:c1:07:38:a1:a0:a4:af:1a:
bf:5f:30:84:ae:a0:c2:7d:1b:e0:20:95:47:97:ae:
2c:2d:a6:8a:ae:25:b4:b0:92:94:c1:f6:f9:b6:cd:
d2:be:ff:df:4f:dc:c5:b8:9d:30:27:34:17:02:49:
94:e4:74:b9:8f:b6:75:d3:86:12:52:26:9c:de:46:
72:6c:50:86:49:3f:51:bc:45:6b:5b:63:9d:29:9b:
ff:b1:bd:d8:cc:9a:68:e6:6e:71:10:d8:59:f1:7d:
9c:f8:53:d1:fb:ff:96:b7:17:70:2e:02:b9:b4:c2:
c5:6f:2c:2b:db:63:d4:71:3d:67:9c:cf:8e:75:83:
e8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CF:EE:4D:8E:30:0C:D3:7F:81:98:B6:F9:99:A8:08:97:82:8E:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9s_uTY4wDNN_gZi2-ZmoCJeCjj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:d6:df:98:15:d7:c9:bb:66:63:39:9d:7d:db:44:0c:bf:c9:
58:fc:0f:0d:9c:70:1d:83:fb:91:de:fc:d0:14:c7:b0:3f:c8:
f1:18:79:65:cc:3a:a1:c7:b5:f9:8a:f0:c0:1c:e5:a8:61:58:
01:e3:fb:74:81:f1:88:df:97:51:e0:e2:5f:54:c3:11:7f:65:
f8:b8:38:43:6b:56:31:74:5d:ce:f5:8d:f8:ed:18:ec:4c:fb:
eb:28:be:d1:ab:f8:82:db:e9:ab:57:98:bf:3c:f7:86:51:04:
43:b5:6f:50:63:54:19:2e:97:41:19:84:89:78:04:bc:29:52:
34:1c:9d:e5:72:55:1b:fc:c0:2f:71:dd:3e:88:c9:8d:e9:ee:
73:44:8d:9f:66:d3:01:f6:13:0e:04:2d:cb:15:c2:95:e1:71:
c1:b2:b4:e5:34:18:b2:d1:72:ba:64:ae:29:b6:17:bb:8d:83:
be:90:35:53:57:8f:57:7c:bd:37:e2:62:f4:28:96:de:14:cb:
e8:2d:88:b0:1a:a9:db:b9:7b:2f:61:5d:6f:2f:d5:6a:8c:a6:
a2:ed:47:4e:f1:43:38:2e:24:74:8f:2e:9f:0d:b1:43:29:11:
81:b9:b9:c6:4c:88:0b:f8:d8:2a:14:be:c5:c5:29:e0:d4:51:
12:5b:89:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:09 2025 by rpki-client