Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b9QHzwweqzNiWhQrmeUuHE5W3ec.roa
File: b9QHzwweqzNiWhQrmeUuHE5W3ec.roa (raw, json)
Hash identifier: YfWL4CHeBxnaqbEMPNUAN1gMyJMbX3JNQuZsvZPtamk=
Subject key identifier: 6F:D4:07:CF:0C:1E:AB:33:62:5A:14:2B:99:E5:2E:1C:4E:56:DD:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 87DA2B45
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b9QHzwweqzNiWhQrmeUuHE5W3ec.roa
Signing time: Sat 28 May 2022 07:09:13 +0000
ROA not before: Sat 28 May 2022 07:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2279222085 (0x87da2b45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 07:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fd407cf0c1eab33625a142b99e52e1c4e56dde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d0:d5:4c:2c:68:dc:08:98:5c:20:f7:aa:e2:
70:b8:d5:10:ef:ee:ba:8d:d2:f4:0b:f4:14:43:75:
b1:ba:b8:47:0b:45:b2:dc:b6:d3:10:cd:9b:6f:b5:
6f:99:5f:52:0f:57:20:1f:0e:3f:e6:0c:f5:3c:b8:
e7:26:4c:9b:a7:b6:11:de:cc:1d:81:88:b3:43:2d:
6a:8b:fa:0c:a4:c6:77:be:1b:64:44:e5:2f:0d:72:
da:f1:69:a9:01:7d:13:ca:9f:00:fd:33:44:21:ba:
f3:01:81:f5:19:7e:ec:c0:8f:cd:8c:72:65:35:2e:
56:93:45:90:b6:74:10:e9:14:bb:ca:32:35:89:9e:
a4:88:f1:36:d9:0b:6f:49:f3:e3:2e:4b:9d:26:2d:
fd:61:3c:e5:1d:c5:b0:a7:b1:a8:8a:e9:03:6f:e3:
27:b3:2c:de:51:36:55:ac:a4:6e:4a:67:96:1c:d4:
49:34:37:96:d9:1b:e4:88:c4:76:37:c4:2e:bd:04:
58:a7:bc:f4:30:61:69:bd:db:a4:e9:78:a2:0b:53:
fa:3f:d0:80:09:42:8c:ae:b2:e9:e0:9b:ad:d7:9c:
c5:28:31:b4:b5:b2:11:78:19:d8:86:d0:15:fd:d5:
fb:1e:7f:c2:0a:5c:92:83:c0:3b:90:f4:04:52:b9:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D4:07:CF:0C:1E:AB:33:62:5A:14:2B:99:E5:2E:1C:4E:56:DD:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b9QHzwweqzNiWhQrmeUuHE5W3ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:1b:1e:2a:41:f1:55:94:ac:5a:11:78:e5:eb:29:7d:89:31:
7e:02:58:10:22:85:0b:e8:74:8b:93:fc:f1:32:c1:3a:60:a7:
ab:1c:12:36:bf:c2:45:51:a7:0c:d8:22:70:68:1e:4e:05:8c:
11:6d:4f:1c:b2:7a:f6:50:52:28:da:b6:82:8b:8f:02:ca:ae:
ba:ec:df:27:53:a5:f4:fd:12:df:c8:8d:2c:dc:7a:40:fb:5d:
a2:29:91:fc:a8:6b:75:88:cb:7e:5c:1f:ee:7f:f3:c3:71:cd:
85:3b:29:73:a8:4d:de:7f:3d:e1:e2:63:0c:eb:82:53:72:27:
c3:ea:48:fa:01:58:bc:44:78:cb:91:65:49:18:42:a5:d6:c5:
af:55:57:dc:cd:eb:98:b0:3d:3d:a0:3c:3b:1b:ca:c9:ad:13:
51:36:0a:e8:60:53:71:40:c3:d2:a1:93:e1:56:9e:cb:ef:fa:
55:a1:35:52:7c:3d:ad:41:81:32:b1:b6:71:87:52:0d:25:16:
e4:82:57:5c:f9:bf:af:85:b0:1b:81:55:96:40:59:7b:94:57:
06:ec:e1:a3:fc:e6:f0:4c:71:99:85:58:3f:43:4c:3b:1a:d3:
73:10:fc:61:f8:2f:78:d2:ee:1d:c5:3f:31:8e:b4:d9:01:2b:
cf:48:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:27:06 2025 by rpki-client