Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e9uQVK1UaEH-Sw0TM4nW_3AqeD0.roa
File: e9uQVK1UaEH-Sw0TM4nW_3AqeD0.roa (raw, json)
Hash identifier: LCa9quaDclVDyZbjbzLjEVuYX2+i2qtEPwenEjryPi4=
Subject key identifier: 7B:DB:90:54:AD:54:68:41:FE:4B:0D:13:33:89:D6:FF:70:2A:78:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182A965E1B4026235123A20D937545C3713
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e9uQVK1UaEH-Sw0TM4nW_3AqeD0.roa
Signing time: Wed 17 Aug 2022 01:23:22 +0000
ROA not before: Wed 17 Aug 2022 01:23:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a9:65:e1:b4:02:62:35:12:3a:20:d9:37:54:5c:37:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 01:23:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bdb9054ad546841fe4b0d133389d6ff702a783d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:ba:1b:2b:ae:18:8c:f5:25:1e:0d:63:4d:
e8:37:59:db:7a:9d:39:9a:79:1c:f8:05:79:ca:49:
1a:64:13:bf:25:15:32:83:d5:7e:1d:f4:44:a9:25:
f8:0e:e9:27:43:fe:cb:c9:bf:ee:d1:3e:f3:fe:72:
d9:a3:ae:c7:e6:55:37:52:9b:ae:19:fa:cb:f6:40:
28:c6:f9:87:b3:3a:31:68:df:75:e9:f3:d7:b0:01:
a1:37:44:65:f8:d8:f9:19:ac:58:65:45:a9:69:ab:
f1:a2:80:60:ae:fb:77:54:97:f3:7f:70:c6:64:d2:
45:da:f4:18:e4:d2:ab:63:77:f0:75:ec:b9:32:15:
ec:ef:35:c7:f6:90:5d:39:5b:e1:1e:4b:25:34:45:
2d:2a:b6:c3:0d:e9:43:66:9c:32:46:7c:b2:54:ab:
32:05:87:fc:3b:77:df:e4:c8:9a:54:e3:45:03:11:
97:76:12:1e:65:7c:2e:e9:8c:93:96:fa:02:c4:6b:
02:6a:8e:96:b6:bf:a0:cb:8b:76:55:6e:59:14:09:
a3:23:e7:72:67:c8:3f:06:02:f7:71:79:89:76:62:
94:67:58:60:e4:18:64:86:fd:1e:21:bd:0e:e4:79:
9f:be:bb:6c:63:d2:bc:d7:b7:24:81:5c:70:a6:db:
6e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DB:90:54:AD:54:68:41:FE:4B:0D:13:33:89:D6:FF:70:2A:78:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e9uQVK1UaEH-Sw0TM4nW_3AqeD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:96:63:08:2f:b8:02:59:e1:0f:df:ae:f8:6b:d1:0c:32:49:
2a:3e:b7:00:e6:08:80:17:d0:57:ee:93:da:4d:d9:d4:da:49:
f1:2a:e1:23:32:a9:be:16:ff:84:f8:d5:a2:59:5f:c2:fa:4f:
f1:ca:2a:1c:d2:ae:dd:90:1f:e8:74:2e:e0:c4:e6:b0:53:f3:
14:26:c6:6b:e4:ab:12:af:3f:e2:d7:9b:3a:1c:d6:5e:e9:d0:
39:38:2e:4c:cf:18:39:d7:11:33:d4:6b:b0:1e:8a:58:ba:80:
15:be:60:1d:66:29:d5:7c:4b:a7:b9:69:59:ed:32:1e:85:25:
32:88:e6:3c:c6:8a:f1:06:9d:3e:2d:33:69:b3:61:3d:de:98:
6c:2d:50:4a:0c:51:02:22:dd:72:72:2e:c8:75:2f:c4:a3:20:
bc:56:ef:62:2a:c8:51:34:44:16:a6:ab:a5:70:63:65:2e:47:
71:7d:70:84:f2:59:c2:2c:68:31:bc:cb:2a:f3:12:8e:35:dc:
bc:75:d8:42:2e:d5:a3:ce:9f:46:ff:a4:3e:14:60:df:b3:b5:
45:38:bb:f0:e4:df:35:56:67:e4:f8:1f:19:e1:10:a7:09:da:
fd:ba:df:cd:4a:1f:14:5f:1f:86:98:a9:d2:b7:32:92:d0:fd:
ce:a3:8e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:13:36 2025 by rpki-client