Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P9IkqOdmVK3xKcVTw_w0XJextq0.roa
File: P9IkqOdmVK3xKcVTw_w0XJextq0.roa (raw, json)
Hash identifier: 24vWSs7yVLejx9zjLWgDLbFUdML/TNbuqSLobHskdEs=
Subject key identifier: 3F:D2:24:A8:E7:66:54:AD:F1:29:C5:53:C3:FC:34:5C:97:B1:B6:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188AFEC18A512A6DA4714BEF2525408E5DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P9IkqOdmVK3xKcVTw_w0XJextq0.roa
Signing time: Mon 12 Jun 2023 14:04:25 +0000
ROA not before: Mon 12 Jun 2023 14:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:188:afeb:f7f3/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:ec:18:a5:12:a6:da:47:14:be:f2:52:54:08:e5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 12 14:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fd224a8e76654adf129c553c3fc345c97b1b6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:90:85:33:3d:09:ee:c9:d4:40:a9:e7:72:
63:c4:e9:c7:7c:3d:18:7e:47:e8:72:6c:97:50:cd:
d9:1b:77:d1:19:cf:46:6b:0b:4c:66:c9:b2:2e:81:
71:fd:89:d3:a8:0d:99:e2:bc:ed:12:e1:ff:06:1b:
b9:f3:ea:74:eb:1d:10:f7:5c:b4:76:68:e4:13:a0:
24:b2:f1:07:1a:af:38:47:8d:30:04:97:21:f8:c3:
79:03:a3:2a:4a:f1:4c:76:2e:81:44:05:da:d7:1b:
85:eb:b3:e5:72:c6:9e:3a:ec:25:31:22:12:41:cc:
d6:5e:f4:69:a0:ab:a8:9f:5d:cc:36:0f:7f:64:43:
38:1b:4e:73:7e:b9:2d:36:8a:63:f2:a8:57:08:80:
2d:2e:c5:a3:ad:4e:5f:8b:fe:11:f7:16:ae:8f:d3:
d6:92:69:8c:42:2b:9e:32:16:73:49:c8:cf:c8:a4:
96:ac:3a:8f:76:2e:b2:6c:01:e8:aa:a4:72:df:39:
6c:fe:5b:09:61:d5:57:3f:29:eb:28:ed:28:c3:3a:
58:a8:f7:ec:eb:bb:6f:41:f7:e9:2d:8e:2f:ca:b3:
8d:56:f1:af:4f:ae:0e:6a:43:13:94:81:1b:11:e7:
4b:20:46:90:d6:2c:e4:45:ff:2e:0b:ba:b6:8b:65:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D2:24:A8:E7:66:54:AD:F1:29:C5:53:C3:FC:34:5C:97:B1:B6:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P9IkqOdmVK3xKcVTw_w0XJextq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:12:dd:7e:87:c2:95:25:90:6a:19:c5:ad:07:9c:ce:d4:f0:
94:87:a7:03:50:e2:30:e3:95:93:c1:d8:a6:72:70:78:fd:df:
24:bd:b9:21:42:eb:7f:05:64:56:07:19:b5:99:42:1b:a8:3b:
44:9c:24:4e:74:ab:53:be:e0:87:d7:fe:11:c9:8a:c2:fe:b7:
1f:e2:b2:a2:d3:22:8d:0e:ef:9a:0e:38:ef:49:96:14:90:61:
43:ab:c0:6b:f4:26:65:ae:bf:6e:d6:03:86:9a:92:59:2c:ec:
d0:eb:71:61:15:93:22:12:e1:83:d6:b9:ca:dd:ff:cf:16:74:
07:e6:ce:41:b9:76:a5:09:a2:e5:4e:6e:be:ee:bf:cb:ef:9d:
7c:77:dc:e0:1a:3f:d9:ec:71:d5:c9:03:bc:12:26:e4:cb:a1:
af:5f:c0:fc:02:52:74:8f:17:e7:e2:50:73:d2:29:f4:f2:2c:
e8:32:e4:66:0d:b0:a4:0d:fe:c3:62:67:26:77:fa:17:00:98:
c6:29:8f:f2:bd:4f:3b:36:5c:13:60:34:23:f4:f2:5b:30:ff:
0d:8e:d7:64:ff:ef:2b:a7:e7:4b:e8:11:46:d6:7b:08:92:10:
c2:3b:a7:b5:77:c1:68:69:df:bc:b3:20:e7:87:90:f8:40:e3:
e5:a5:ff:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:27 2025 by rpki-client