Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V9BYfhR82nxITuffjJR8sjxQff4.roa
File: V9BYfhR82nxITuffjJR8sjxQff4.roa (raw, json)
Hash identifier: 6SqfNOgw5k120uYoWgYrOuPUeelRdIVDdn81uX5cois=
Subject key identifier: 57:D0:58:7E:14:7C:DA:7C:48:4E:E7:DF:8C:94:7C:B2:3C:50:7D:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187191F2FCA5B622D2EEE9CE4645513F5E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V9BYfhR82nxITuffjJR8sjxQff4.roa
Signing time: Sat 25 Mar 2023 14:14:46 +0000
ROA not before: Sat 25 Mar 2023 14:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:19:1f:2f:ca:5b:62:2d:2e:ee:9c:e4:64:55:13:f5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 25 14:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57d0587e147cda7c484ee7df8c947cb23c507dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:40:7e:20:87:6c:05:c1:7e:bc:98:30:c0:
25:96:c2:32:fe:b1:6f:42:34:25:61:a7:b5:e1:f5:
81:35:0d:8c:4d:4e:42:11:71:d7:4f:5b:ee:33:80:
7d:d1:2b:15:44:3c:a2:97:09:93:a2:82:5c:f8:66:
4f:ca:1d:6c:fb:3f:ab:83:cf:e2:2f:6e:8c:cd:cf:
24:56:a6:ad:2a:13:68:5f:7f:2c:27:8d:d5:64:93:
98:02:f5:b7:c4:26:85:84:7a:fb:12:36:46:a2:76:
05:58:c7:3a:e8:13:d8:cc:22:d7:16:36:93:35:71:
47:21:2c:4f:87:be:af:c3:c5:2c:07:63:64:90:32:
79:37:ec:6a:d2:ea:2e:dd:cb:53:5d:48:89:94:62:
23:08:7f:46:51:18:4f:55:37:fb:61:39:14:17:76:
6f:08:48:ef:ad:37:7d:d2:bc:b0:d1:9a:e4:4a:92:
d1:6c:34:f4:d5:ac:f6:3b:6c:c5:1f:a4:f9:83:ef:
e3:aa:55:ec:dc:1b:a4:d7:53:e9:0d:12:4b:2e:ba:
03:21:ca:73:2a:bc:5f:41:f5:52:64:f3:7c:32:8d:
af:a1:c8:c4:4f:95:91:ed:c3:03:65:f6:7f:a2:f4:
8d:b7:d9:29:4c:fc:1d:4b:b4:d2:7b:72:27:ea:e6:
e6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D0:58:7E:14:7C:DA:7C:48:4E:E7:DF:8C:94:7C:B2:3C:50:7D:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V9BYfhR82nxITuffjJR8sjxQff4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
83:03:70:20:a8:71:03:70:5c:c4:c4:ab:de:52:27:e5:0c:e6:
eb:49:c5:94:37:9f:53:73:9f:e5:55:fd:c0:02:b4:3e:47:03:
23:59:7f:c8:3b:ad:70:8f:f9:ee:29:22:07:1d:f5:69:a5:fc:
68:01:9a:06:7a:0e:ee:6b:68:73:d9:dd:30:ae:0e:93:37:0c:
ce:6e:8a:7c:eb:8b:b0:33:57:82:c0:4e:e0:fc:9e:b6:bc:8f:
b3:97:19:18:de:b5:83:01:73:e3:d8:52:da:37:b6:f4:62:71:
34:95:fc:55:84:bf:e3:88:d8:42:8c:4e:42:4f:f3:3e:3a:2a:
6b:75:f4:9a:3c:09:49:bf:08:80:6a:68:98:75:40:bd:e2:a4:
db:c7:ab:33:34:59:1b:21:4a:0b:ce:a6:08:4b:ad:42:db:c9:
23:bc:a3:d0:ad:cd:0e:9d:eb:1e:52:c8:68:a3:23:4a:2a:54:
44:88:64:98:75:98:36:ac:00:6c:5b:4d:b8:87:46:ed:a7:09:
8f:ad:71:dd:c0:1c:fc:8a:d8:1d:6e:27:bb:7b:cf:55:4d:ac:
13:a5:db:0d:60:01:24:32:be:79:bf:36:98:41:87:26:ac:b2:
21:0e:42:77:4a:89:53:a9:0d:0e:5e:ab:8f:08:5b:5a:bb:29:
ea:6c:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:39 2025 by rpki-client