Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9u4N8hpO5lJw7ub8pRI8J6wcXP4.roa
File: 9u4N8hpO5lJw7ub8pRI8J6wcXP4.roa (raw, json)
Hash identifier: Kql552EwTvPCCYmd2lBqWuHvNofrrCBf4ZUCiLjyMRg=
Subject key identifier: F6:EE:0D:F2:1A:4E:E6:52:70:EE:E6:FC:A5:12:3C:27:AC:1C:5C:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EB2A7F100C746524994D64601EC4BA95
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9u4N8hpO5lJw7ub8pRI8J6wcXP4.roa
Signing time: Sat 12 Aug 2023 19:12:58 +0000
ROA not before: Sat 12 Aug 2023 19:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:eb:2a:7f:10:0c:74:65:24:99:4d:64:60:1e:c4:ba:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 19:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6ee0df21a4ee65270eee6fca5123c27ac1c5cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:91:53:70:f9:14:fd:36:c7:40:0e:c5:41:79:
68:46:24:3d:3d:fe:7a:a6:5c:47:3a:a1:96:c8:94:
b1:3e:99:47:a9:3d:98:31:f9:44:ec:df:ae:6b:cc:
5e:a3:c6:cf:4c:4e:6e:54:ad:8d:f8:99:2c:1a:14:
ce:a7:89:8a:88:43:20:72:e8:2d:73:ff:85:9f:27:
14:ef:8f:03:d7:39:a4:2f:8b:35:24:50:36:7a:94:
db:6a:bf:4a:eb:34:66:41:8f:36:1b:3e:d7:de:cf:
0d:4b:b4:82:b9:d5:d4:4b:34:ca:4c:92:09:97:ef:
57:07:09:fa:23:91:c8:a1:a0:60:1b:71:bb:00:8c:
68:df:25:9c:96:b0:a9:4e:85:1e:79:73:3f:84:b5:
70:2b:9f:d8:18:72:7f:17:2b:cb:23:f9:ff:74:fb:
1a:fa:0c:56:24:58:06:9f:ad:0b:fd:c1:86:f7:d7:
16:ce:48:8c:e6:ee:fd:59:1a:c7:76:e0:21:11:00:
de:4b:36:f5:1f:d9:b0:9a:ff:27:63:23:d0:b7:cb:
a5:ef:0b:63:98:50:05:57:98:b6:a9:b1:5d:0a:b5:
c7:06:e2:2d:75:86:01:4b:a5:bf:57:ac:a4:36:a7:
a1:9b:02:6f:2c:53:a1:80:f4:da:48:c0:86:16:d8:
b0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EE:0D:F2:1A:4E:E6:52:70:EE:E6:FC:A5:12:3C:27:AC:1C:5C:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9u4N8hpO5lJw7ub8pRI8J6wcXP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:fc:b7:62:08:90:77:98:49:df:81:8f:ce:1c:d2:59:89:40:
18:bb:24:1d:e9:8e:7f:db:a1:73:02:49:c9:99:dc:72:b9:89:
1c:00:7a:4e:5c:1f:4e:f1:e9:de:54:9a:5d:6e:66:8c:c3:b1:
6c:03:a1:ed:52:2c:c5:9d:7f:70:31:00:e3:0f:cc:e1:80:a5:
ff:fd:ed:2c:74:9b:2e:36:b0:9a:a7:04:ff:9e:e9:fa:62:37:
d9:49:15:26:3b:e5:2c:5c:38:e0:09:0c:44:6c:d4:ca:dc:67:
9a:db:2d:d2:30:b6:0f:46:00:00:03:96:5d:aa:dd:72:61:64:
66:a6:c9:e5:77:20:a0:ad:0b:aa:cd:21:7a:cd:2f:3c:44:05:
ff:5c:19:0d:18:94:ce:02:f6:04:1d:1b:fa:33:83:6c:c0:8b:
6d:29:b0:9a:04:13:5d:e1:c1:4e:70:a7:34:cf:f3:d3:d2:ee:
43:c5:04:08:8f:38:ee:f7:1a:84:94:8a:9d:8c:d3:42:e1:ca:
c8:22:19:b4:6e:45:aa:11:a2:09:8b:79:89:e6:b6:65:4d:c4:
ef:18:10:16:bf:f2:51:81:a7:df:a6:e1:c3:07:61:7a:83:fc:
20:9a:fc:23:20:98:8d:e4:36:02:ec:fc:ce:db:1e:58:d5:b9:
ec:af:4c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:32:13 2025 by rpki-client