Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a9RhIUhshz51wInhA1U6CYViTJ8.roa
File: a9RhIUhshz51wInhA1U6CYViTJ8.roa (raw, json)
Hash identifier: b6JIIm+vISl/FRobF6gs/owalx2XxKIS2OXtq3YudlU=
Subject key identifier: 6B:D4:61:21:48:6C:87:3E:75:C0:89:E1:03:55:3A:09:85:62:4C:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183BAEB3C5E8462ED64DA23D027D3C5DC1B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a9RhIUhshz51wInhA1U6CYViTJ8.roa
Signing time: Sun 09 Oct 2022 04:05:21 +0000
ROA not before: Sun 09 Oct 2022 04:05:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:183:baea:b9b5/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ba:eb:3c:5e:84:62:ed:64:da:23:d0:27:d3:c5:dc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 9 04:05:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bd46121486c873e75c089e103553a0985624c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cc:e5:aa:3f:2c:ae:15:6c:57:8a:29:da:8e:
ac:2e:32:53:c4:7a:db:fa:a2:a8:52:e2:b0:f7:7f:
54:9a:fb:0c:74:11:74:22:e9:c0:81:fb:e5:15:ee:
02:de:4f:b8:92:26:a8:94:fb:82:1b:3c:8d:5c:21:
82:37:86:0d:3a:25:e3:9d:08:ff:97:01:47:37:0b:
6d:9f:40:c0:ba:3f:27:8d:5a:cc:d4:17:ae:d0:85:
be:ae:50:7b:be:a2:b1:89:77:da:4a:8c:18:57:44:
d3:4b:4d:23:bc:58:2b:37:f1:17:fa:1c:81:e4:14:
26:32:9a:bb:72:92:17:e1:b4:57:68:cc:29:d0:b8:
71:dc:1e:49:aa:92:7b:23:cf:09:cd:9e:f5:ba:f6:
f9:e4:3e:e1:a6:ea:f7:c2:4d:38:5b:83:fe:01:eb:
69:4a:f2:d6:e4:52:11:24:53:c0:48:94:5a:cf:51:
9c:89:61:cf:7e:d0:8e:7c:79:22:20:0e:d5:1d:f6:
0d:76:29:6f:a8:62:cb:36:be:83:c4:f2:4e:e3:8a:
c9:90:c1:5c:b6:f5:3d:d7:5e:d4:4b:a6:0f:67:7c:
5d:fe:8f:a7:8e:78:89:ca:e3:e7:9d:83:5d:f2:e5:
7a:95:e6:66:04:e9:23:9f:2a:84:67:7d:01:6f:75:
92:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D4:61:21:48:6C:87:3E:75:C0:89:E1:03:55:3A:09:85:62:4C:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a9RhIUhshz51wInhA1U6CYViTJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:7f:f0:eb:8b:57:c6:56:c9:3d:3a:9d:96:f2:7c:10:e6:31:
24:e9:03:80:19:5b:36:4c:a8:ad:e7:98:be:3c:4d:93:18:40:
d4:03:4f:3e:dd:48:7a:a4:bc:6f:2b:1f:9a:ce:f4:8a:9b:29:
94:87:7b:06:b1:57:41:e0:a9:d4:0a:3f:29:10:a7:08:06:9d:
43:0a:fe:89:e2:4f:11:47:20:4c:d2:9c:04:89:91:da:af:14:
37:a1:09:72:3e:d0:f0:1d:7d:41:20:93:6b:0e:c7:04:e5:5a:
77:86:bb:08:0e:d7:51:69:55:4a:16:a1:86:89:42:4f:6c:32:
1a:e4:73:3c:4b:5d:f3:c8:65:e8:be:d4:5f:ee:3c:3f:2d:43:
3e:1d:75:39:60:9c:64:a1:51:8e:5b:48:b6:11:d0:e2:1c:87:
bc:af:ad:96:7d:67:50:fd:c3:0c:96:8e:af:03:6d:e6:86:ee:
93:54:95:d7:f9:b4:cf:c9:92:5d:34:85:ac:03:c8:16:d7:b3:
fa:b4:73:e2:7e:68:b6:66:db:61:d6:e6:19:77:28:6c:c2:68:
20:54:cf:23:7c:80:f3:df:ab:50:80:1c:f7:d2:07:d3:16:99:
89:6e:07:be:1b:82:47:63:9c:44:ca:1a:ed:a4:5c:1e:ed:0f:
05:60:be:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:39:13 2025 by rpki-client