Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9tvpPIJ0g4W0FQ-ixATHiaBLOBc.roa
File: 9tvpPIJ0g4W0FQ-ixATHiaBLOBc.roa (raw, json)
Hash identifier: Wzy+VY3B8aZ4E+HeLy4wA7FDHr0HCxCpxfsAo3wjTM4=
Subject key identifier: F6:DB:E9:3C:82:74:83:85:B4:15:0F:A2:C4:04:C7:89:A0:4B:38:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D62F82C63F40A8C8C35D0CD0DA774B8F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9tvpPIJ0g4W0FQ-ixATHiaBLOBc.roa
Signing time: Sat 03 Dec 2022 04:12:28 +0000
ROA not before: Sat 03 Dec 2022 04:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d6:2f:82:c6:3f:40:a8:c8:c3:5d:0c:d0:da:77:4b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 04:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6dbe93c82748385b4150fa2c404c789a04b3817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0a:fe:00:52:86:21:ae:3c:ec:b9:ef:3c:e2:
3e:d1:a6:9d:29:80:13:7e:80:1c:39:1b:fa:0e:e5:
74:62:43:46:12:f6:f1:35:43:65:07:41:36:0d:61:
7d:31:c5:a0:e9:81:03:bf:7f:91:7b:04:b3:65:ce:
8e:5d:6e:1e:30:a5:c0:48:35:bb:f6:a0:6f:58:68:
c2:48:a4:6e:8a:b9:db:d3:02:d8:6c:76:56:62:20:
c1:89:d8:62:fd:d8:0b:c6:ec:40:da:82:fd:ae:41:
b4:1c:64:8e:e0:91:69:22:49:00:f3:a4:c4:6b:7b:
3d:31:ec:78:c4:80:c5:3e:37:44:28:bb:aa:98:3c:
5e:57:de:03:2b:03:2e:8f:5b:44:9c:23:fc:39:8f:
07:08:84:1c:f0:c1:b0:27:b6:4e:2e:d0:6c:a2:29:
a3:7b:1c:7d:52:fb:3c:cb:c4:aa:ed:dc:0e:35:c2:
0c:b1:0e:06:5d:7a:75:21:22:e6:2b:fe:1a:b1:18:
c6:25:4a:f2:63:f2:a1:d7:13:45:28:6b:88:94:b4:
a5:c0:b2:1e:12:36:16:46:d2:1c:f4:c3:f0:39:60:
e3:8f:7b:98:b6:7a:fd:cc:7b:2a:c7:8f:f9:4c:9f:
52:ae:9d:6d:20:9b:ef:ba:bf:0b:f0:7e:a6:1a:13:
02:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DB:E9:3C:82:74:83:85:B4:15:0F:A2:C4:04:C7:89:A0:4B:38:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9tvpPIJ0g4W0FQ-ixATHiaBLOBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:a7:c9:f6:d7:45:0b:6c:a1:ab:3e:a6:e5:66:5e:db:29:86:
a2:8a:a1:76:5b:ca:e5:7d:18:72:88:82:6e:9c:92:ff:68:03:
fc:df:92:08:a3:d0:65:22:89:0b:93:2d:19:65:5d:7b:f7:f7:
78:ad:a7:d0:85:a1:b3:81:e6:ae:61:98:8d:d2:58:a8:10:e9:
c7:32:6e:0a:5f:90:14:aa:3a:10:55:f5:ea:4f:58:c2:1c:82:
88:b3:41:55:19:ae:09:eb:54:1d:37:73:52:78:0e:b2:b5:e9:
37:f2:e6:30:23:0e:ba:1b:b1:75:ba:ee:97:ab:66:5a:9e:74:
2c:22:1e:53:c9:f5:b0:75:8d:71:bc:c4:14:62:66:0f:93:51:
2c:b8:e4:9b:06:41:13:ca:48:11:3a:c8:6a:70:48:b1:9b:45:
2d:4d:6d:29:d1:0b:c5:26:d4:bd:af:58:4d:2b:cd:67:41:c0:
ae:c6:60:90:2e:c8:19:7b:e8:9d:d1:66:db:ab:a1:26:d1:f5:
64:f0:99:e9:18:53:03:e8:3b:a5:d4:14:c1:16:98:ae:74:3e:
d8:ae:45:1d:fe:f8:bb:c9:2b:dc:9a:d0:0f:d3:30:9d:86:71:
8a:c9:b8:a2:5c:7d:38:65:ad:80:3a:1c:98:78:ff:e2:a0:37:
65:66:14:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:31:49 2025 by rpki-client