Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H9q6omKpCuEHlzdC2cUgC7gEEpg.roa
File: H9q6omKpCuEHlzdC2cUgC7gEEpg.roa (raw, json)
Hash identifier: WKNYBGq3T9O4oSPtSJ4YSfQfphjsn9NIl6BQGo+gsbs=
Subject key identifier: 1F:DA:BA:A2:62:A9:0A:E1:07:97:37:42:D9:C5:20:0B:B8:04:12:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01836222E8AAB135EEE0C3CE3A5F2B71A447
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H9q6omKpCuEHlzdC2cUgC7gEEpg.roa
Signing time: Wed 21 Sep 2022 22:19:58 +0000
ROA not before: Wed 21 Sep 2022 22:19:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:62:22:e8:aa:b1:35:ee:e0:c3:ce:3a:5f:2b:71:a4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 21 22:19:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fdabaa262a90ae107973742d9c5200bb8041298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:58:5b:2f:3e:60:50:15:77:5f:cc:31:35:8a:
cb:9b:41:e0:35:42:9b:be:68:35:1d:e8:24:3c:e5:
c0:3a:b7:d5:ec:8b:ff:7a:60:fa:0d:76:2c:93:ad:
19:10:2f:58:8a:bc:57:eb:c7:0a:0f:9f:10:4b:58:
b9:19:9b:b7:14:c1:34:a7:b8:9b:f3:12:5b:9e:84:
7e:a1:ab:24:22:28:4f:b6:b4:97:8d:8c:6e:59:64:
55:8c:3e:a4:7b:69:b1:0a:3f:3a:54:57:f2:17:af:
9d:5e:2d:26:be:18:79:ff:6a:d4:0f:89:80:c9:18:
1b:9a:c4:7e:bd:76:a3:21:17:43:02:06:a7:a4:8e:
e9:94:ca:02:f4:98:67:ce:32:ba:0e:9d:38:0f:cb:
d5:5c:9a:47:a1:45:af:47:7a:d3:b0:a2:4a:2d:dc:
ec:bb:ed:39:6e:9a:62:3c:eb:30:63:95:81:2f:40:
42:e0:91:0b:b8:74:0b:04:88:19:7f:73:57:8a:c4:
b8:64:76:cd:e1:81:73:5b:ee:09:0c:58:ab:34:22:
1c:3c:38:86:41:b7:41:db:59:39:cf:cc:4a:3b:e4:
70:10:35:d7:9a:a8:ff:f6:b9:c6:b9:c9:d1:fe:10:
31:79:20:11:d7:20:e5:7c:50:46:6b:b0:42:5d:b8:
64:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DA:BA:A2:62:A9:0A:E1:07:97:37:42:D9:C5:20:0B:B8:04:12:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/H9q6omKpCuEHlzdC2cUgC7gEEpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:a6:7d:f0:df:7a:9d:dd:82:e9:e2:f0:27:5b:df:8e:9f:41:
89:61:e7:af:bd:92:2b:1d:20:21:23:c0:9f:96:67:b2:5c:03:
ba:82:ac:1a:cb:73:0c:84:f8:0e:1f:69:d0:fb:40:b2:79:29:
c4:6e:c6:5b:d9:44:67:83:a8:e9:21:a6:81:b1:44:1a:99:ec:
d1:c9:4d:6f:94:aa:c6:e7:50:98:1a:46:f4:e2:83:4a:f6:99:
fc:0d:3f:1b:ef:64:e1:65:15:90:95:f6:ad:23:01:39:bb:5e:
23:a1:ef:dc:94:23:42:01:25:8b:19:db:91:63:ab:4d:5a:f7:
1a:60:d9:ac:64:a5:bc:5c:fc:e8:76:b0:b4:e7:5d:b5:68:a9:
8f:87:9b:30:68:91:05:92:fb:5c:8e:fe:fb:d5:11:0d:7d:9d:
39:c8:a3:9b:66:f1:d3:42:b0:46:4a:34:cd:35:bd:0d:14:57:
60:82:7a:45:91:08:d7:7f:55:a8:39:de:60:c8:00:02:f4:3e:
43:ae:08:37:37:f4:d2:f2:3e:60:57:50:19:1e:40:26:dd:ea:
e9:43:84:2a:59:7b:03:00:51:f0:1b:ca:31:a2:72:f3:60:37:
69:51:86:f7:be:15:fa:34:29:ff:27:d5:da:fe:34:0f:0e:cb:
f9:21:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:23:13 2025 by rpki-client