Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aw9rpx9MClFFs-QkONobVYfvrAQ.roa
File: aw9rpx9MClFFs-QkONobVYfvrAQ.roa (raw, json)
Hash identifier: po/EAVvFHlB7wGga7UHPWjoJX8bSvxxoRw5gaCs17pw=
Subject key identifier: 6B:0F:6B:A7:1F:4C:0A:51:45:B3:E4:24:38:DA:1B:55:87:EF:AC:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 711DD9E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aw9rpx9MClFFs-QkONobVYfvrAQ.roa
Signing time: Wed 09 Mar 2022 19:09:25 +0000
ROA not before: Wed 09 Mar 2022 19:09:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1897781737 (0x711dd9e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 19:09:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b0f6ba71f4c0a5145b3e42438da1b5587efac04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:ea:6e:44:7f:94:bd:24:e7:7b:fe:e3:62:
4c:7c:15:7f:86:da:53:25:06:21:b1:2c:19:f0:7b:
fd:2d:e6:92:c3:61:24:47:c9:5a:33:01:d2:58:5f:
cd:d4:47:9e:21:85:7c:69:3f:11:56:29:90:38:de:
02:d3:b4:52:e8:d1:05:39:85:f3:16:1a:44:e5:ab:
e7:f1:8f:46:7a:69:fe:6f:e4:9f:51:66:a9:74:75:
b1:b8:82:75:7d:89:57:d0:cc:a1:78:db:95:3d:34:
22:a4:d7:9a:d1:31:33:18:77:63:cf:ea:dc:08:95:
ca:81:11:ce:14:26:b7:73:01:a3:01:ae:7a:2e:38:
43:1a:69:5a:d0:cc:34:b9:bf:89:9e:36:5f:4c:23:
4e:20:4f:c2:e9:d1:40:39:bb:b7:cb:45:d3:a3:bb:
f0:d8:25:03:c5:ca:40:43:cf:c8:83:58:c1:72:00:
c9:7d:87:5b:ae:78:b0:f1:b7:0f:b8:5a:b9:98:82:
a8:db:8b:33:3b:52:e5:bd:74:f8:1c:33:84:4d:27:
6e:c4:9b:b8:bc:b7:3f:b4:43:94:81:e6:ab:a7:8a:
44:da:49:e8:7f:a3:19:70:ff:c2:20:0a:35:c0:19:
f0:bc:a1:12:2d:de:d8:cc:dc:c8:17:a9:40:b9:53:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0F:6B:A7:1F:4C:0A:51:45:B3:E4:24:38:DA:1B:55:87:EF:AC:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/aw9rpx9MClFFs-QkONobVYfvrAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:66:e4:ca:0d:e2:7e:fd:cc:db:f4:75:f0:9c:f8:a6:44:92:
3b:72:0c:44:af:4c:0e:f7:d9:8b:80:e6:4c:c8:cf:e7:b1:4b:
79:d0:e1:df:7b:8b:7b:f0:a1:d6:5c:ea:64:1d:65:fd:49:a9:
3d:4d:f3:12:b7:d4:c1:c0:26:03:83:51:fb:7f:b8:4e:43:df:
d7:d8:15:78:99:86:64:72:f3:00:97:b4:a1:b5:52:02:8b:22:
ec:af:97:33:89:6f:8b:b3:4f:01:1c:a3:92:60:88:77:80:9a:
3a:52:fa:a6:b5:66:c2:d3:cf:ab:4a:c5:c2:bf:8f:77:d9:89:
66:90:d5:1f:61:47:e2:39:91:51:8a:49:1b:0c:56:10:68:11:
89:15:b7:52:c3:15:72:89:07:52:24:86:5e:74:fc:fd:52:fb:
92:56:16:2d:69:ed:6f:d6:0d:81:bd:8f:3e:fd:fb:6c:88:b2:
fd:f7:5a:7a:d2:97:b3:42:47:82:3f:0c:88:fd:d6:6b:0b:ca:
46:d0:ad:6f:2a:68:e2:c1:00:42:ad:d1:23:47:8b:cc:2e:3e:
a1:ef:54:3d:a0:ae:63:19:e6:73:38:04:d5:95:94:17:af:f4:
5b:72:10:ce:d9:02:42:81:2b:f1:04:e3:35:a4:20:e2:49:a2:
c6:f2:3e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 21:27:02 2025 by rpki-client