Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9vbtmIckvkWPODojzq29bwANBuw.roa
File: 9vbtmIckvkWPODojzq29bwANBuw.roa (raw, json)
Hash identifier: d16n999mFbbASScUPrUQ1CQSWVOcOUrvb4xxy3HEE8k=
Subject key identifier: F6:F6:ED:98:87:24:BE:45:8F:38:3A:23:CE:AD:BD:6F:00:0D:06:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871C4E0196364A78A6472AAC28CEFEEBB3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9vbtmIckvkWPODojzq29bwANBuw.roa
Signing time: Sun 26 Mar 2023 05:04:46 +0000
ROA not before: Sun 26 Mar 2023 05:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:1c4d:ce73/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1c:4e:01:96:36:4a:78:a6:47:2a:ac:28:ce:fe:eb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 05:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6f6ed988724be458f383a23ceadbd6f000d06ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:c7:f7:cc:27:46:a6:09:09:41:9d:ed:2a:
c0:84:89:9c:9c:ae:2f:24:0f:dd:91:b7:e6:1b:81:
0d:ca:e1:02:19:d4:62:95:f3:f9:41:c3:34:8a:da:
4b:0d:b1:64:22:cb:d4:f4:e0:fb:6d:6e:c0:0e:b1:
69:bf:41:e0:20:be:c3:95:46:2d:17:a6:9c:26:3c:
f6:59:f4:ff:eb:58:e9:b7:99:3f:e6:76:e9:64:e9:
0c:45:d8:6e:d5:c0:38:b3:32:19:8a:d5:20:e8:88:
47:21:d3:bb:fd:0a:a2:8a:79:2f:0b:9d:1a:21:8f:
c2:89:f3:8b:18:26:29:28:f4:5e:24:2a:d4:29:57:
75:4d:2f:c8:62:b6:c3:e7:39:5e:67:29:31:70:75:
c7:65:1d:a5:97:dc:c9:83:a3:0a:86:3b:48:82:12:
44:79:e2:3d:a9:d4:de:6b:d7:6f:92:6f:60:4e:f6:
96:43:1d:5f:5f:4a:6e:05:e5:e7:c1:23:e0:41:37:
cb:9f:25:3f:56:28:97:24:7f:7f:8a:94:dc:ff:4a:
b2:12:02:79:1f:8c:30:cf:c6:0b:fb:af:2f:67:44:
26:4e:b1:6f:c1:8f:1e:34:12:c8:34:8e:6d:42:95:
9b:f3:4a:e9:72:78:82:ba:25:ec:f4:b3:e9:42:9f:
09:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F6:ED:98:87:24:BE:45:8F:38:3A:23:CE:AD:BD:6F:00:0D:06:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9vbtmIckvkWPODojzq29bwANBuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:d4:05:ba:d8:2b:60:37:fb:9c:d6:8f:51:a9:da:4d:31:61:
4c:e9:22:02:4d:88:b9:17:50:80:fa:63:89:77:89:5c:99:3b:
a8:4b:62:52:10:38:0b:c7:ce:cd:e2:43:e5:e0:46:45:94:a9:
54:c9:f9:d3:1a:e0:77:42:38:e8:ca:26:a7:c9:cd:ae:2f:24:
23:30:30:26:ed:48:e6:02:f3:06:df:e0:bf:b9:15:78:8b:75:
a3:a4:dd:bd:15:56:33:e8:3e:7b:f6:db:f3:48:1b:eb:5a:9f:
d1:83:59:79:ea:46:a8:45:19:88:70:39:44:93:bc:4f:5b:23:
ba:21:4b:0b:dc:20:fa:90:93:a0:f6:da:bf:85:f8:93:00:06:
e2:a8:a4:20:98:28:60:b2:ee:80:a4:d7:de:91:77:ec:0c:1d:
81:86:32:25:46:a6:95:7f:d7:c2:09:76:4f:27:f2:da:a6:4a:
ae:95:fa:b8:5d:87:8c:d3:cd:ae:a9:18:e0:48:61:5e:1b:67:
23:7f:01:89:d4:e1:36:c9:9d:f4:fa:ee:e5:1d:28:df:00:de:
26:bb:36:40:2a:1b:23:1c:36:c6:1d:d6:22:f8:00:7c:3d:68:
de:71:b1:ff:5d:17:1b:ce:a5:4f:35:96:d1:18:ac:3c:6c:66:
ce:53:d7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:23:18 2025 by rpki-client