Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CaR9YP668U7cLrWXLGN6DyUx05c.roa
File: CaR9YP668U7cLrWXLGN6DyUx05c.roa (raw, json)
Hash identifier: kBM0FwhJp1i6wFlrQHhYUPMWnayfGGThkOSQXfzU8n0=
Subject key identifier: 09:A4:7D:60:FE:BA:F1:4E:DC:2E:B5:97:2C:63:7A:0F:25:31:D3:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018556EF9C48A8024BF6D4FFD8A4973EA903
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CaR9YP668U7cLrWXLGN6DyUx05c.roa
Signing time: Wed 28 Dec 2022 04:13:41 +0000
ROA not before: Wed 28 Dec 2022 04:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:56:ef:9c:48:a8:02:4b:f6:d4:ff:d8:a4:97:3e:a9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 04:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09a47d60febaf14edc2eb5972c637a0f2531d397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:ba:43:2f:75:9c:bd:b8:aa:11:14:cb:87:
c1:52:68:9d:1f:d8:a3:86:86:98:cc:79:52:1b:bc:
33:a4:c8:8d:79:fc:92:05:c5:a5:39:2f:4b:de:d0:
cc:af:57:c7:f1:b3:c8:98:f1:e7:94:6f:8d:0d:21:
cf:e8:80:e4:49:4e:3b:b4:43:1f:57:97:59:9e:31:
ad:12:c2:af:10:b9:a3:4c:e1:70:b1:ac:5c:da:98:
94:28:7b:43:f5:c3:59:c7:fb:31:f5:21:60:64:d9:
76:52:2b:fd:65:ac:90:07:fe:67:8b:01:27:e7:b9:
51:7b:69:4a:09:d6:b2:ae:a9:97:47:7f:ca:5c:f7:
e8:0a:2d:5e:3b:5c:03:8f:07:9c:c7:f8:12:79:89:
0b:b0:1c:00:56:5a:b4:ef:cd:a7:9b:dc:5e:75:27:
44:6a:07:29:b5:4f:f8:41:7c:80:b6:3d:f7:01:d0:
b1:20:f6:5d:05:08:fa:0f:d4:fd:34:18:76:37:ac:
cd:42:63:05:68:de:7c:a8:cb:a8:8a:c8:8c:0e:de:
98:3e:00:25:ca:ad:66:4c:0b:ce:87:65:95:7c:2b:
2d:ac:55:6e:da:c8:d9:ef:68:48:d1:c5:83:98:54:
59:75:0b:6c:72:e7:81:27:fe:c9:d1:4d:93:19:d8:
83:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A4:7D:60:FE:BA:F1:4E:DC:2E:B5:97:2C:63:7A:0F:25:31:D3:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CaR9YP668U7cLrWXLGN6DyUx05c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:2b:74:22:3a:bc:1d:f0:93:32:19:d4:f0:28:d6:23:4f:f1:
6e:d5:3a:d4:5d:30:72:e6:7e:59:95:17:22:52:a4:5f:78:f7:
ce:a4:d5:57:09:52:6f:da:3c:ad:7f:5c:74:1c:69:c4:7d:14:
8a:e0:ac:1c:db:8c:d6:1a:f5:db:ae:93:86:c7:4a:2e:62:b7:
35:37:18:c0:be:41:3e:0f:ae:11:df:b1:c0:bd:46:be:0a:c2:
3f:39:32:5b:07:7d:14:56:29:45:ff:27:81:ce:f9:80:05:9d:
7e:bf:49:88:c0:09:0e:06:ec:10:a1:37:f0:25:e9:09:2d:a7:
6d:38:e1:bc:f8:df:97:f0:3c:4b:9b:b3:f3:a6:e2:fa:c8:4c:
21:bf:4a:a8:57:ef:cd:56:1e:72:b2:29:39:dc:5f:00:c1:de:
eb:5c:83:25:e5:9d:a2:72:e6:9d:4e:2b:36:8b:d2:7d:79:5a:
0e:c8:40:e6:40:89:6e:a5:7c:33:5e:25:0e:a5:97:dc:53:b2:
29:90:49:c0:4d:c4:e3:74:bd:34:ef:52:03:3c:d1:44:ec:71:
c6:6e:7a:c6:c9:ca:ce:38:f4:8b:b1:eb:e7:03:86:ff:fe:9f:
62:1c:e8:73:92:29:5c:eb:f6:0d:4a:9f:fa:d8:3b:44:71:7c:
7a:98:8f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:42:07 2025 by rpki-client