Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B9XufaEjsTeZDZCMaOAoEIZlLCs.roa
File: B9XufaEjsTeZDZCMaOAoEIZlLCs.roa (raw, json)
Hash identifier: +IgJZxP3e9eINYxYXImkW7DVCeQzmAgcKtKS17nXGbs=
Subject key identifier: 07:D5:EE:7D:A1:23:B1:37:99:0D:90:8C:68:E0:28:10:86:65:2C:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018710F5098D474DDD20276D5800CF22FB27
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B9XufaEjsTeZDZCMaOAoEIZlLCs.roa
Signing time: Fri 24 Mar 2023 00:11:46 +0000
ROA not before: Fri 24 Mar 2023 00:11:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:f5:09:8d:47:4d:dd:20:27:6d:58:00:cf:22:fb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 00:11:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07d5ee7da123b137990d908c68e0281086652c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:81:6d:ef:48:4d:4d:f1:61:c7:14:40:a5:33:
e9:2d:f0:34:21:b6:5b:12:94:b1:0e:6e:58:c6:48:
27:7e:f7:d0:8e:db:91:e0:3b:a8:90:a4:8b:ac:3a:
b4:8e:8c:4c:86:e5:fc:f2:60:b4:61:42:f6:cf:1e:
06:1a:cd:20:a1:79:e4:45:46:98:f7:98:bd:ef:1c:
f5:c5:07:b8:63:40:90:f5:8a:9b:0d:89:f8:de:07:
82:88:9f:69:c5:b2:23:82:7a:ce:a9:33:43:19:18:
cf:40:a0:4c:cb:fc:71:56:10:2e:78:fd:2a:5a:0e:
f7:0d:b3:2b:52:63:2f:dc:8d:7b:00:2e:4e:fb:c6:
32:20:d1:29:1f:1f:de:aa:1d:67:6b:f8:43:b0:47:
0b:14:be:4f:d9:98:83:99:f8:16:88:52:24:f1:14:
81:20:f3:f5:b6:9d:5e:29:32:50:fa:d6:44:a3:42:
6e:ac:c7:d0:1b:65:4f:8c:2d:17:af:40:66:43:f7:
cc:34:37:01:7e:de:53:08:30:d4:2f:93:19:71:61:
e9:d9:a2:91:c4:0c:61:21:c2:b2:3b:a8:5e:c7:d7:
d2:74:19:71:07:5f:7b:c3:17:03:98:d0:8b:20:6e:
97:62:cc:ca:c6:f7:6d:6a:a3:5e:44:c4:78:93:c7:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D5:EE:7D:A1:23:B1:37:99:0D:90:8C:68:E0:28:10:86:65:2C:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B9XufaEjsTeZDZCMaOAoEIZlLCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:2b:bd:ac:a2:5f:ed:ca:b3:7f:d8:c3:ec:35:e8:ad:5a:40:
32:ff:8c:80:28:18:31:28:42:be:f0:8c:c7:fc:a5:51:9f:ea:
50:66:05:03:9a:4f:dd:dc:1f:53:e7:85:45:b5:37:dd:90:12:
30:9f:ff:f6:15:9a:4f:58:b3:d6:31:27:d4:17:ec:2b:fc:bf:
ba:62:82:6e:e4:0e:14:4c:69:21:f6:74:99:d8:86:46:0f:0d:
10:c0:8b:71:c3:93:e2:e8:43:a9:50:6a:c8:52:73:03:f4:07:
3d:bf:4e:43:c2:88:f1:7b:f2:21:7e:e6:06:2c:9b:98:b4:bd:
5a:d1:87:1b:3f:2d:54:cc:27:ac:af:de:36:fe:f4:f6:42:16:
10:ce:0f:c6:6e:bf:0b:3c:ea:c3:82:ab:5f:94:67:01:f4:01:
55:d8:8e:03:e5:1f:bd:59:33:98:67:13:d5:9a:13:ee:cd:d4:
b6:f6:18:74:03:07:c7:3b:ed:da:a0:1b:a7:a1:52:82:d6:e5:
02:be:ff:da:63:d4:f0:6f:f9:33:aa:ed:2a:c3:31:39:67:87:
81:85:59:03:90:74:0a:47:d1:3f:47:ef:14:ca:62:2b:46:9b:
e0:7d:08:93:cc:56:a9:f8:6e:53:a5:19:5f:96:16:16:8b:3b:
70:f9:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:16:41 2025 by rpki-client