Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b_9tlxPZp1ulyPWI-knfgM2s88E.roa
File: b_9tlxPZp1ulyPWI-knfgM2s88E.roa (raw, json)
Hash identifier: m0U6faztyD1c38SOW4VQ6mkxWDeMbhvfwfroooG6rXc=
Subject key identifier: 6F:FF:6D:97:13:D9:A7:5B:A5:C8:F5:88:FA:49:DF:80:CD:AC:F3:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D8C1C7D9BF435D009F6D0C6D819B4881
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b_9tlxPZp1ulyPWI-knfgM2s88E.roa
Signing time: Sat 03 Dec 2022 16:11:29 +0000
ROA not before: Sat 03 Dec 2022 16:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d8:c1:c7:d9:bf:43:5d:00:9f:6d:0c:6d:81:9b:48:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 16:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fff6d9713d9a75ba5c8f588fa49df80cdacf3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:c2:b7:fc:f6:09:15:5a:56:3f:50:90:88:
b8:51:9e:32:9f:ff:44:47:8a:0d:4c:61:e6:bb:bc:
4b:e9:a4:57:92:eb:82:3f:35:79:b8:92:6d:a5:d3:
42:85:f2:f1:a6:6b:fd:03:69:76:1d:24:cf:d4:24:
1c:b8:b2:c5:1a:50:ec:9b:0b:08:14:de:fa:01:e7:
c6:b5:36:b2:8e:e2:e7:90:62:ac:8c:36:44:ba:d9:
0c:bd:a0:78:50:a5:d8:dd:6e:e4:d5:db:0e:9e:1a:
b1:e8:6e:2a:f4:ed:70:37:22:28:be:ab:9f:ee:86:
80:f9:30:7d:e8:d7:2e:73:f9:2e:58:4e:0a:a4:03:
9d:e9:47:dd:7d:8f:d1:28:7c:42:b9:d4:d1:b2:f5:
ac:b9:8f:a3:88:e4:93:29:9c:db:c1:b1:03:ab:3f:
eb:02:b8:a1:4b:2f:22:90:60:86:a4:8f:0a:10:c9:
71:c7:b0:a6:06:98:85:72:8b:28:f0:75:cf:cb:af:
f9:2f:eb:53:c7:a1:6b:04:c9:b5:e1:53:72:a9:1b:
e2:03:9f:5c:12:25:71:3a:87:eb:7d:c5:09:ac:b3:
5b:c6:25:90:6b:9f:da:c8:ed:0f:4c:70:c8:17:8a:
3d:93:52:7c:dc:57:e9:3f:fe:4f:5b:46:bd:82:89:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FF:6D:97:13:D9:A7:5B:A5:C8:F5:88:FA:49:DF:80:CD:AC:F3:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b_9tlxPZp1ulyPWI-knfgM2s88E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:3d:b3:d5:57:ad:48:5e:4b:b0:cb:28:94:7b:87:ad:08:5f:
05:79:6a:f5:64:0a:b5:e9:07:2a:e6:50:62:4b:2a:ee:62:89:
74:08:09:99:2a:c6:36:3d:c7:99:c8:cb:6e:bf:13:5c:39:4d:
7c:1f:f9:e8:84:a0:8c:eb:35:0b:ae:9c:cf:5a:d0:9c:a6:0e:
6a:99:e8:5e:52:7f:a2:e4:cd:d0:51:bc:91:6c:5a:80:0a:b6:
3f:6a:7f:53:e2:28:9c:b9:81:2d:10:14:1a:d0:fc:78:c4:fe:
10:82:6d:41:c8:3b:10:fa:ef:83:cc:55:24:d7:54:b5:f7:4d:
33:41:a9:ba:43:fe:ef:c6:e7:c9:98:02:ff:1f:44:c9:37:75:
7b:d8:c4:3e:fd:fb:b5:52:bb:84:fc:ee:3b:59:dd:3d:b0:50:
73:5b:a4:95:0c:29:26:4d:91:13:e9:b7:eb:ca:c7:66:91:ce:
a5:8a:ac:42:53:e5:1f:61:72:8a:c8:e4:64:75:0f:81:39:fe:
93:3a:96:20:b7:57:c0:c0:9e:b9:45:e0:01:42:c9:ce:ed:a0:
75:a3:8a:a5:00:5a:74:ef:40:33:21:d4:f9:62:ee:b0:a7:a4:
8e:97:10:ce:f0:b1:90:4a:da:25:f8:4b:71:67:1f:ca:94:c2:
ee:f8:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:47:59 2025 by rpki-client