Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_9Fq-NeVPeUhRrwaHbXeDm0LymU.roa
File: _9Fq-NeVPeUhRrwaHbXeDm0LymU.roa (raw, json)
Hash identifier: 1FRALEWtMj+UmNPDgMIb6zqrR+crDXL6fem55aa+oJE=
Subject key identifier: FF:D1:6A:F8:D7:95:3D:E5:21:46:BC:1A:1D:B5:DE:0E:6D:0B:CA:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899DE8CE28D5907DEEBBF3F479F3D12F18
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_9Fq-NeVPeUhRrwaHbXeDm0LymU.roa
Signing time: Fri 28 Jul 2023 19:10:27 +0000
ROA not before: Fri 28 Jul 2023 19:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9d:e8:ce:28:d5:90:7d:ee:bb:f3:f4:79:f3:d1:2f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 19:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffd16af8d7953de52146bc1a1db5de0e6d0bca65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1a:b2:b6:13:a0:6c:f6:d0:02:c2:e7:2c:92:
33:63:c1:0b:0d:1d:04:a9:46:51:dd:5c:79:a9:5a:
49:7a:88:1c:97:23:54:5e:52:b0:87:e2:7c:1d:8d:
ae:cc:b9:9b:ef:9f:0a:94:70:0d:ac:c7:23:c1:3f:
e7:73:4f:84:61:c8:d2:92:24:34:1d:08:ab:75:49:
e3:31:13:38:00:44:b2:13:90:7d:0a:24:33:83:a3:
e9:95:d6:38:a4:00:14:22:50:e5:45:bc:2c:26:02:
ab:0b:38:72:7e:bb:82:e0:c5:01:f8:16:e0:3e:a6:
2c:61:70:2e:e4:e2:ec:8d:4e:a3:59:9b:de:46:80:
1c:9e:f5:f6:7a:33:cc:71:76:c4:91:c9:4e:35:ad:
de:93:63:f5:e4:18:db:12:b2:24:47:e3:77:e8:d6:
d9:5c:a3:c0:5c:db:9f:c7:87:f9:e9:e3:1b:cc:ae:
08:e5:2f:23:ae:04:f4:12:60:a6:de:99:63:ef:ef:
0e:38:6c:f8:a1:ea:a1:3e:cd:e9:9c:66:d1:ec:53:
6f:ba:de:03:02:9d:31:70:ae:e3:ca:19:17:02:e9:
3c:bb:71:ee:a7:36:1d:c8:0e:1d:6f:81:99:05:94:
13:75:83:62:21:cb:7b:80:44:c4:22:4d:95:30:05:
5d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D1:6A:F8:D7:95:3D:E5:21:46:BC:1A:1D:B5:DE:0E:6D:0B:CA:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_9Fq-NeVPeUhRrwaHbXeDm0LymU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:ec:79:cb:64:78:b8:1c:2f:48:ed:d9:d6:27:ee:32:a4:27:
44:d3:cf:4c:cf:bf:c8:21:9a:ba:de:9b:10:bd:c3:07:a6:04:
4a:32:81:43:77:57:25:c7:c6:d8:7b:e0:92:40:4c:49:6f:a8:
ad:50:6b:0c:15:5b:12:36:7f:cd:c4:e1:b1:cf:d8:a6:50:dc:
6a:33:dd:48:00:28:86:84:31:20:87:4c:01:fc:43:8b:1c:fb:
1b:c6:0f:c0:a3:56:e6:47:b8:3b:da:3a:b9:f2:45:10:72:32:
75:ab:c1:3c:d7:6f:6e:7a:b1:8e:06:b5:cf:e0:8b:30:fa:0d:
4f:10:66:6e:6a:7d:35:c7:5c:e0:38:80:e9:2e:f3:87:52:54:
04:39:1f:7f:f7:a2:9b:7d:96:a3:f2:7a:ab:cf:ea:eb:8f:af:
04:aa:54:56:02:e6:b2:5a:ab:10:fe:f1:56:b3:4e:b0:bb:f8:
43:8b:89:23:d0:d6:99:c3:63:0b:f2:a8:16:08:83:6f:a9:a6:
80:26:c9:f2:c5:5c:e4:e6:20:3a:cd:ce:57:ab:e5:d0:e3:e6:
35:92:23:1d:b5:d8:dc:6b:cd:bc:d0:61:7e:5a:35:17:35:33:
8a:b7:1a:59:0d:eb:b6:11:d4:97:a2:cc:78:a3:16:69:1a:ba:
b8:99:76:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:27:44 2025 by rpki-client