Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I9kNJbNnhU1Oir8APlKdFnklms8.roa
File: I9kNJbNnhU1Oir8APlKdFnklms8.roa (raw, json)
Hash identifier: NZ/lacIoZm6is0JgFegeUTHa30tNKls3dEl2jQguXTw=
Subject key identifier: 23:D9:0D:25:B3:67:85:4D:4E:8A:BF:00:3E:52:9D:16:79:25:9A:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187380575A68BBEF0018483B10876971BDB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I9kNJbNnhU1Oir8APlKdFnklms8.roa
Signing time: Fri 31 Mar 2023 14:14:54 +0000
ROA not before: Fri 31 Mar 2023 14:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:38:05:75:a6:8b:be:f0:01:84:83:b1:08:76:97:1b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 14:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23d90d25b367854d4e8abf003e529d1679259acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:db:06:64:f0:68:6e:a8:f7:ec:f3:e9:e5:
82:63:0d:26:a9:ad:05:7e:d9:f7:bb:ee:61:b5:ec:
e3:a8:42:02:00:9d:d5:7c:65:0e:ff:5a:21:48:73:
25:c5:66:40:dc:da:1c:43:11:3b:6b:7f:4f:dc:97:
fc:f4:2c:88:72:b4:ed:8e:b5:0f:e5:49:ee:92:b4:
c4:6f:65:36:fd:63:5d:1d:4e:2d:a4:3f:29:40:88:
0d:52:36:c9:25:6f:bd:82:9b:fc:da:f3:d3:d7:e7:
20:8c:56:b2:2a:1b:c6:28:a3:87:99:fb:2e:2b:4d:
fe:ab:fa:85:b1:05:7f:e0:89:6b:65:c9:36:c4:88:
d8:da:9a:41:51:b7:24:9c:8b:13:d7:03:8e:0b:65:
3c:16:e2:e8:dc:fa:10:4f:40:d3:ba:a8:8f:7f:68:
04:96:14:d3:b5:0e:86:2e:b8:e2:65:79:e4:e2:14:
95:cb:46:c2:d1:e2:e6:9d:ac:67:7c:ba:a7:d1:8c:
cd:da:18:5b:f9:14:90:41:03:fc:94:72:37:21:2c:
a5:06:90:bf:eb:69:fd:d5:87:2b:52:61:6e:01:74:
2a:c9:ca:63:4c:f2:74:c7:f1:59:5f:1d:64:8d:1a:
34:ac:b7:f9:6f:fa:98:c9:7b:e6:3c:98:e5:18:a9:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D9:0D:25:B3:67:85:4D:4E:8A:BF:00:3E:52:9D:16:79:25:9A:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I9kNJbNnhU1Oir8APlKdFnklms8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:9f:73:6b:93:14:86:4f:f2:c9:cd:7f:6f:23:32:67:04:f6:
8d:22:30:95:c8:14:a9:39:95:8d:50:78:d1:3f:0c:1f:d5:23:
2d:d0:67:41:f1:ef:28:7e:3f:ad:35:26:0a:2e:fd:a0:1c:40:
ff:e2:20:fe:90:bc:e1:95:c9:82:f2:ea:20:c4:09:49:8b:ed:
2c:e5:62:86:1e:bb:85:f2:0d:ae:99:a0:3e:58:c6:7c:d7:61:
31:24:7e:7b:89:82:ee:0e:2d:a1:76:9a:a2:82:ec:ca:fe:80:
e2:90:ca:82:03:f1:da:cd:7d:f2:85:0f:ab:a4:8a:24:d8:70:
db:c1:62:07:32:e1:8c:fe:c6:e4:8e:04:a4:49:9f:d9:27:0c:
ec:1d:c0:04:31:b2:04:94:93:ab:de:d0:4f:c4:a9:fe:40:49:
a9:6e:0e:7e:bf:d1:5a:cc:0e:a0:e0:3e:02:2e:29:c3:23:c3:
ea:6a:7b:18:ed:6b:32:82:bc:32:28:5a:8b:8e:9d:b0:b5:8f:
b6:85:9d:ad:9b:41:79:82:64:12:8f:cb:52:27:d8:52:5c:79:
50:e2:0e:1e:46:ed:ee:ab:67:d5:91:f6:05:33:6c:2c:4f:e0:
b6:3c:45:6d:32:23:10:76:ba:fe:08:58:2f:13:d1:b7:30:da:
60:13:68:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:16:16 2025 by rpki-client