Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9sll-xx8mZ-fb4IP8Y0VnrK63dg.roa
File: 9sll-xx8mZ-fb4IP8Y0VnrK63dg.roa (raw, json)
Hash identifier: hGdXRl5F8Ky53cstWxeQNvvcHtEopOqBqtEqQUnIELc=
Subject key identifier: F6:C9:65:FB:1C:7C:99:9F:9F:6F:82:0F:F1:8D:15:9E:B2:BA:DD:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 894536F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9sll-xx8mZ-fb4IP8Y0VnrK63dg.roa
Signing time: Thu 02 Jun 2022 10:15:21 +0000
ROA not before: Thu 02 Jun 2022 10:15:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2303014642 (0x894536f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 10:15:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6c965fb1c7c999f9f6f820ff18d159eb2baddd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:4f:9b:17:a4:88:1b:0b:ae:5a:c2:8f:4f:
be:f9:ed:58:8c:56:9b:e6:47:19:cc:23:1b:b4:61:
8b:95:7c:43:eb:66:b6:1d:9e:89:f4:c4:7a:60:b5:
8b:a2:6a:e9:aa:be:6a:a9:13:df:a0:98:4a:34:87:
9b:c5:92:b9:63:55:c3:c1:74:0f:eb:92:b5:f6:f0:
95:fc:39:19:96:da:25:b7:12:e0:00:8e:c5:b7:26:
8d:80:5a:83:32:26:89:e3:39:8a:32:cb:85:13:3e:
2f:c0:ee:c9:1c:e4:65:e7:63:09:1b:3d:7e:01:da:
fb:f3:07:d6:20:9f:32:d1:2f:1d:94:43:a9:36:91:
a3:fa:03:d7:27:09:1d:ef:0e:7e:e1:56:74:97:74:
d1:34:73:fc:f6:26:0c:92:fd:11:0f:e5:b2:b7:f3:
38:fb:96:b7:3a:13:98:0d:b7:18:2f:6e:94:01:4a:
df:e5:da:da:ea:18:c6:f6:4d:86:9b:c5:ab:e0:1d:
1a:f2:8d:96:97:1b:b8:13:a9:4c:bd:de:87:e8:70:
5a:3a:d5:27:6b:67:81:14:7e:76:02:a1:2e:95:42:
10:e3:7b:db:f4:0d:4c:40:30:26:32:cf:d5:fd:91:
d8:db:a8:6b:ea:ba:c0:7d:b5:fa:c8:7f:a9:c8:22:
49:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C9:65:FB:1C:7C:99:9F:9F:6F:82:0F:F1:8D:15:9E:B2:BA:DD:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9sll-xx8mZ-fb4IP8Y0VnrK63dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:3d:54:84:e6:21:87:96:37:6e:82:4b:98:7c:de:c5:12:ca:
82:bd:9f:66:c1:c4:48:10:7b:f3:bb:06:ad:20:d2:99:4b:91:
f3:54:97:53:70:43:38:62:a9:78:81:0c:07:79:a9:82:46:2a:
8c:ed:7a:5d:19:ca:43:89:93:be:b1:f4:63:a7:0e:20:94:cb:
84:d0:1b:ae:e0:52:6e:71:54:1a:6a:6a:f5:40:cd:11:57:37:
84:d8:58:c5:96:05:49:2c:c8:3a:ad:a9:f7:79:74:a1:48:e0:
4f:1c:1e:55:c9:32:8a:d5:ae:8e:f7:cb:7a:39:6b:ff:77:8f:
7a:54:9c:c4:70:71:9d:28:5c:8d:8a:7b:ad:7d:a5:1e:b2:bd:
04:05:a2:42:c2:1c:8b:da:d4:fa:4b:dc:6a:a2:44:4c:c8:1a:
b6:fa:15:c6:11:62:21:1f:6b:17:85:93:60:82:59:90:94:10:
30:a9:f6:c8:28:50:21:dd:81:66:bd:d5:bc:7f:74:da:62:74:
a7:88:c0:68:84:58:a6:c5:56:fb:de:3e:f4:8b:c9:99:d6:22:
41:1d:df:60:18:f4:1d:6e:a3:35:20:5f:b6:1a:bc:40:a2:7e:
6b:98:c5:35:4f:9b:60:8d:90:c3:a8:c1:6b:64:e8:65:d5:0d:
6f:f2:f8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:42:22 2025 by rpki-client