Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X9FTqP2JMYlWy7wsNaZ0ANadMIA.roa
File: X9FTqP2JMYlWy7wsNaZ0ANadMIA.roa (raw, json)
Hash identifier: w3vri4j3PD7gT3SPbt9DJpsE/4OHqZJLY4+NUiXG1uQ=
Subject key identifier: 5F:D1:53:A8:FD:89:31:89:56:CB:BC:2C:35:A6:74:00:D6:9D:30:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889CD78CDCA45C2B5B8E5169C6D55F534A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X9FTqP2JMYlWy7wsNaZ0ANadMIA.roa
Signing time: Thu 08 Jun 2023 21:09:11 +0000
ROA not before: Thu 08 Jun 2023 21:09:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9c:d7:8c:dc:a4:5c:2b:5b:8e:51:69:c6:d5:5f:53:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 21:09:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fd153a8fd89318956cbbc2c35a67400d69d3080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:1e:dc:a0:e9:7f:fa:78:d9:39:45:15:e5:
73:40:8a:df:22:12:4d:eb:1e:5c:d4:af:b3:07:7c:
86:41:2d:eb:f2:c3:af:4a:8d:b0:b2:72:99:e5:d8:
bb:6d:1e:cf:4b:65:98:c9:70:43:84:36:c8:ab:1a:
71:9a:6e:14:fb:95:44:fa:a8:67:30:91:cf:99:84:
ff:6a:b6:51:0f:4d:b1:e2:72:6e:36:a9:ff:19:01:
09:3a:48:37:a2:1d:b7:d2:ba:28:33:50:8d:64:0b:
42:1c:1d:ad:f0:6d:a4:e4:ac:53:40:b0:28:4e:b9:
00:b3:36:c3:42:b6:24:80:5f:e2:63:bc:cb:99:4c:
b9:0b:eb:7c:5e:3f:21:e1:d2:67:ff:26:b3:67:cd:
e9:13:8c:1b:bd:21:65:d5:b7:18:42:d4:ab:e3:d7:
26:d5:26:c1:b7:60:51:78:77:04:dd:1f:e8:4f:cc:
8d:b5:97:82:5c:80:3f:b6:2c:de:d8:ee:c5:79:f7:
40:ca:7f:c7:87:72:fd:3b:c2:8f:c0:78:41:3a:90:
57:fc:36:e4:aa:0b:b1:f1:44:ac:67:80:cc:f8:60:
d8:82:12:0c:99:59:82:a4:cb:ac:7c:4b:33:b9:f3:
ac:73:7b:5d:57:fb:44:28:e5:92:91:ba:ec:5c:3b:
31:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D1:53:A8:FD:89:31:89:56:CB:BC:2C:35:A6:74:00:D6:9D:30:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/X9FTqP2JMYlWy7wsNaZ0ANadMIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:e1:6c:9e:c2:06:b9:75:9f:9d:ae:ee:80:f4:78:2a:3e:bb:
29:68:2d:b7:4d:14:5d:51:19:01:bd:28:d2:2c:9a:da:ce:4e:
2e:c8:c5:6c:59:af:f1:6f:d6:a5:aa:4a:59:46:50:dc:93:6a:
11:4f:12:57:5a:a9:c1:87:36:2e:c7:53:b8:47:5a:56:6c:47:
b3:72:75:9c:b2:7b:70:86:68:53:a5:5f:59:70:3b:0d:ed:dc:
a3:ad:2d:e7:09:ed:85:e9:f4:9b:a5:ed:99:e8:9e:ad:fe:08:
83:fb:4d:f0:05:b8:52:e2:fe:47:cb:73:73:65:2d:3d:2a:c0:
3e:25:7b:62:93:a2:3c:ba:09:7d:4e:dc:4a:24:9e:80:fd:af:
dc:a2:6a:9a:cd:1b:14:c0:c5:56:da:df:6d:15:70:0d:63:7c:
a8:4c:b6:5f:d4:c2:76:0b:d7:de:4d:8f:dc:d8:9c:a7:bb:e2:
37:b2:c2:c8:b2:f4:b4:c0:ab:93:a2:c6:2a:c1:34:fa:bc:6f:
f4:57:c8:6d:9b:8f:94:f8:f6:87:20:a3:c1:3f:c7:4c:84:cc:
ab:90:4f:11:4f:77:80:6c:c4:f7:86:1b:fc:de:fc:87:f2:2e:
40:e7:8f:9f:b9:cb:05:30:83:13:99:4c:42:32:bf:16:6e:8b:
0f:80:9a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 02:53:53 2025 by rpki-client