Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R9a7wiyR7ZDNFw_TiCmdZPMlR_Q.roa
File: R9a7wiyR7ZDNFw_TiCmdZPMlR_Q.roa (raw, json)
Hash identifier: rFhXZCXTR9wuLYwuY/xeKmVzwJCWe9ufbJWPSj5y7BA=
Subject key identifier: 47:D6:BB:C2:2C:91:ED:90:CD:17:0F:D3:88:29:9D:64:F3:25:47:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182C2E756AAB65C37F06722BC4165C38BCC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R9a7wiyR7ZDNFw_TiCmdZPMlR_Q.roa
Signing time: Mon 22 Aug 2022 00:15:17 +0000
ROA not before: Mon 22 Aug 2022 00:15:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c2:e7:56:aa:b6:5c:37:f0:67:22:bc:41:65:c3:8b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 22 00:15:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47d6bbc22c91ed90cd170fd388299d64f32547f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:5d:23:14:71:17:df:bc:52:4f:04:1a:ca:
e6:c1:e1:15:e5:38:a0:2e:a5:5a:0c:23:8a:89:82:
a6:20:bb:33:7b:0f:78:ab:24:17:fc:5a:13:c5:64:
85:2f:3e:bf:92:21:1e:a5:1a:fc:b5:06:4e:ec:af:
ad:c5:30:1e:e8:eb:07:e1:d5:59:c8:43:d3:63:09:
ab:1f:d0:ea:e9:0c:ba:7c:37:31:72:58:ff:c6:7e:
a8:a4:6a:3d:f1:37:7c:05:86:7f:6e:4b:cc:55:45:
5a:48:42:e8:c3:fd:de:9e:85:2c:87:fd:16:c7:fb:
c9:2a:a0:9b:c0:92:28:a1:2c:de:66:94:c0:a2:02:
b6:d3:8d:8b:66:de:53:5e:de:37:95:91:cb:55:2c:
47:37:77:93:2e:d4:2b:46:08:75:74:91:ab:e9:2e:
ba:d6:f7:99:81:7c:42:83:3c:2f:15:95:08:c1:4a:
b4:fd:5a:4d:5f:08:70:9a:c3:81:0d:39:48:47:e4:
a7:55:2b:a0:05:1f:ab:38:26:86:2c:60:bf:19:35:
32:55:ba:be:5a:16:ab:a7:e2:b8:14:20:c5:b7:75:
da:9d:85:bd:9e:f1:9b:4e:91:70:70:e8:16:bc:63:
4e:1a:85:5a:fd:bf:c7:61:46:f8:fa:be:bb:86:79:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D6:BB:C2:2C:91:ED:90:CD:17:0F:D3:88:29:9D:64:F3:25:47:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R9a7wiyR7ZDNFw_TiCmdZPMlR_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:5a:20:b7:4c:11:61:c9:08:f2:b5:0f:e6:38:23:c3:6a:08:
d8:a7:0f:d5:dc:50:9c:76:ff:39:5f:0e:75:42:5e:1f:68:aa:
c9:8e:4d:d7:af:87:c4:c4:48:b6:fe:3c:f2:3e:37:bf:fd:29:
86:e5:33:4a:e1:2d:da:e2:c2:cd:f5:b4:ff:1c:4d:01:d2:16:
ea:97:2e:05:eb:e1:97:6a:62:04:29:8e:a3:8c:eb:5d:09:de:
ba:93:30:55:87:46:df:53:97:ba:a2:69:6a:d5:29:99:a9:4f:
8f:9e:29:74:47:14:80:2b:2b:3b:db:21:3b:11:91:11:63:e5:
c6:2e:a2:22:70:b5:87:43:ee:83:e6:cc:f4:29:db:c9:dc:ed:
cd:e7:b9:c8:1d:1c:76:6c:24:81:40:50:e6:89:6f:4b:18:90:
d8:ba:6b:47:b0:32:4c:ff:18:97:67:ab:27:ab:48:83:a2:fa:
3c:cb:58:e6:05:70:dd:f1:18:85:16:7c:15:fc:d0:e8:e7:4c:
8e:9f:a3:d4:8e:d0:24:7b:05:55:2d:b7:28:7a:bf:df:94:c0:
f8:24:22:d7:94:05:d7:c3:2c:07:94:c1:ba:8c:25:6d:71:de:
ab:63:f2:54:9d:6a:1f:1f:ae:c1:d1:5e:fa:1a:fe:5d:14:38:
03:d0:f2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:21 2025 by rpki-client