Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9vRVe3SstpeA5XTrEFm6APwHaac.roa
File: 9vRVe3SstpeA5XTrEFm6APwHaac.roa (raw, json)
Hash identifier: 8nxu4zmeRzqmlurYY1ajIiYb7qQWtLDu4Ywk8QfJIME=
Subject key identifier: F6:F4:55:7B:74:AC:B6:97:80:E5:74:EB:10:59:BA:00:FC:07:69:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 84DF32AE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9vRVe3SstpeA5XTrEFm6APwHaac.roa
Signing time: Tue 17 May 2022 14:14:29 +0000
ROA not before: Tue 17 May 2022 14:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2229220014 (0x84df32ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 14:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6f4557b74acb69780e574eb1059ba00fc0769a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:35:9e:42:42:ee:2e:d2:f4:8e:6a:e7:7c:
56:c2:73:f7:ca:36:cd:f5:77:43:95:b5:bf:96:34:
60:50:cb:90:4b:b9:96:66:11:9e:86:ff:cf:dd:cc:
e3:1c:6b:f7:b2:b8:b5:a6:2f:07:30:f3:90:91:73:
9d:6a:30:7f:62:4b:ba:72:8c:a4:a7:a2:93:05:86:
79:3f:58:6a:b1:15:58:32:cd:34:d2:18:7f:29:c0:
f0:52:e2:e2:8e:dc:0c:e7:35:e6:44:1f:91:59:fe:
cd:30:77:19:70:9b:d0:da:0f:28:34:a8:e8:8d:16:
5d:cb:7f:06:f0:ef:0e:78:6a:82:77:a9:84:fe:3d:
73:8c:54:b9:01:e8:41:44:a5:53:e1:97:17:58:a5:
ae:cd:02:c8:da:78:24:e4:33:e0:92:8b:5a:b6:11:
05:5c:90:13:ba:40:2a:1b:74:f0:59:79:bb:95:c9:
6b:da:67:a2:51:38:38:d0:09:8d:78:43:a1:13:77:
d1:92:13:e8:a4:e5:f8:f3:fa:16:0e:19:3c:6a:15:
79:53:00:b2:59:dc:a5:31:ee:97:32:5d:51:fa:a1:
f2:10:bd:ea:b8:f4:8f:ee:1b:6c:41:52:be:e4:c6:
aa:9e:e3:77:70:82:a9:75:5a:e7:d0:6b:68:d1:1c:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F4:55:7B:74:AC:B6:97:80:E5:74:EB:10:59:BA:00:FC:07:69:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9vRVe3SstpeA5XTrEFm6APwHaac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:73:f1:2d:f8:97:b2:b9:80:4a:bc:5a:0d:64:8a:5c:b6:40:
d6:83:bc:e1:58:44:2f:49:bf:6e:ff:ce:d3:7a:90:5b:95:13:
11:3d:13:63:7a:9c:82:03:7b:08:7b:6f:87:0d:e2:b4:a1:15:
1c:d1:47:d2:78:d0:e8:58:e3:c4:13:b3:17:36:7b:a6:ab:f0:
e4:79:dc:b9:1a:00:d9:da:97:b0:9b:8c:02:fa:52:ea:b1:25:
66:4e:c5:dc:33:a3:37:9a:d5:92:2b:8b:1c:a2:3b:0b:97:7b:
4e:36:ba:18:4d:e4:2d:3f:65:be:e8:b5:61:87:7e:51:30:07:
37:25:63:f8:5f:8a:3c:cb:a2:5f:5a:57:82:9a:bd:bc:3a:6a:
31:b2:47:cc:78:f2:7c:0b:14:77:4c:cb:e3:07:16:48:af:ea:
fd:e5:8d:1d:e3:1b:30:12:f7:b7:2a:d0:6d:d2:14:dd:8e:d9:
6f:19:32:8a:6f:0c:17:48:c8:f8:56:25:bd:9a:cb:c4:d1:be:
f0:a8:59:c4:66:23:46:9b:09:2a:fa:3c:8d:5b:28:ac:26:98:
1b:7e:ff:1a:08:e1:6f:0a:a8:08:f0:8e:97:fe:fb:d3:4d:6f:
36:38:f9:48:9c:a2:14:94:a2:d9:a2:5e:f5:a3:1a:37:c1:1e:
33:5b:e9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:17:19 2025 by rpki-client