Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d9icheXgmU9zKGVQUFEvvwOiKgw.roa
File: d9icheXgmU9zKGVQUFEvvwOiKgw.roa (raw, json)
Hash identifier: 8ar0M+DHBKGNuMKrKboTkrXfV+/Zz1l5f7pRqB3SXrM=
Subject key identifier: 77:D8:9C:85:E5:E0:99:4F:73:28:65:50:50:51:2F:BF:03:A2:2A:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018664A5906C8EF307BAB4EDDD91263EABB1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d9icheXgmU9zKGVQUFEvvwOiKgw.roa
Signing time: Sat 18 Feb 2023 13:10:17 +0000
ROA not before: Sat 18 Feb 2023 13:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:64:a5:90:6c:8e:f3:07:ba:b4:ed:dd:91:26:3e:ab:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 13:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77d89c85e5e0994f7328655050512fbf03a22a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:77:fc:4b:31:53:89:cf:9b:5e:b5:bf:76:63:
bd:79:cd:3a:f4:42:4c:fa:22:95:fd:0a:43:22:88:
62:85:13:23:08:79:0f:ab:5d:ab:f1:ff:98:c4:9d:
b2:01:f5:13:c8:0c:68:d3:97:da:f0:8c:01:e4:06:
17:8d:60:99:f0:a4:3b:97:ba:fa:39:c9:b9:02:50:
a2:d6:fb:0a:6f:f5:55:2f:c0:6c:1f:18:ab:f7:51:
88:a9:95:cf:2d:e3:f4:1e:ad:d1:2c:73:db:f5:34:
6b:09:92:c1:c1:a8:b5:85:17:4e:c2:85:48:9b:3c:
e0:8b:ba:6a:87:1d:d6:6d:e4:46:9c:9b:98:e4:aa:
e6:45:fb:fe:9d:7f:74:e4:89:e9:b7:59:a9:98:6a:
bc:7f:83:78:7d:4f:60:97:a3:48:51:0c:34:b6:5f:
45:62:69:16:eb:fb:26:b2:61:32:5e:0d:95:9c:cb:
4e:43:10:de:29:c8:6d:ce:30:b6:b2:f6:39:b2:62:
29:98:6d:a7:f4:06:c2:fd:95:34:8e:07:32:89:a3:
d1:90:14:99:6f:65:8c:59:7b:5b:1a:63:8b:22:5c:
29:2b:44:bb:90:49:d6:a8:eb:11:79:dc:d7:6d:bd:
35:4c:a1:f2:d2:6d:93:f4:9b:59:29:c4:57:58:85:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D8:9C:85:E5:E0:99:4F:73:28:65:50:50:51:2F:BF:03:A2:2A:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d9icheXgmU9zKGVQUFEvvwOiKgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:bb:29:f9:ef:be:c0:09:e8:bd:03:2d:dc:23:2e:89:bf:57:
aa:5b:f6:1e:18:e5:ca:e0:a0:42:eb:88:f6:c9:2e:e1:fe:eb:
3c:1e:68:5d:07:a4:31:97:d7:56:df:12:0c:fc:89:4b:55:6f:
16:44:99:91:db:4e:62:41:3a:81:d1:4e:38:94:f7:1f:66:19:
e7:43:bf:e7:18:dc:fa:d3:e2:0f:90:4b:21:5f:59:62:e2:a1:
3a:24:9c:fe:0f:c3:92:76:30:d7:ac:6a:5a:50:cb:db:db:49:
65:5c:74:ef:50:7c:de:2f:55:42:99:3a:3f:9f:f3:f1:98:88:
d5:06:7d:54:f7:a5:9b:d4:82:7b:cb:89:5f:5a:ed:d4:4d:75:
69:b4:4d:eb:65:38:9e:d9:92:f6:39:37:92:29:9a:8a:da:b2:
65:78:05:1d:e5:81:a8:cd:ca:52:c0:75:83:46:4e:22:74:80:
f8:e3:47:cb:ec:32:22:0b:01:ac:47:e7:1d:9b:ab:c3:aa:69:
18:ee:a2:e5:72:83:1d:9b:80:3c:65:17:fc:6f:2c:82:e9:a4:
34:90:8a:b0:b6:f2:45:11:10:34:3b:2b:09:3c:be:df:b9:2f:
6e:b8:cf:28:ae:6c:ff:78:a8:a4:e0:60:c5:25:5a:b6:2e:e9:
51:c3:90:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:18:17 2025 by rpki-client