Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f9HL528b3mdTr1t690q0gveBXns.roa
File: f9HL528b3mdTr1t690q0gveBXns.roa (raw, json)
Hash identifier: /L4j4mP+th9uhQrRzmbgJEieLsYR+fh4QKNXn+oU54o=
Subject key identifier: 7F:D1:CB:E7:6F:1B:DE:67:53:AF:5B:7A:F7:4A:B4:82:F7:81:5E:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A10483F2DF7D43D414741DAA3AC02AFB7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f9HL528b3mdTr1t690q0gveBXns.roa
Signing time: Sun 20 Aug 2023 00:11:24 +0000
ROA not before: Sun 20 Aug 2023 00:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:10:48:3f:2d:f7:d4:3d:41:47:41:da:a3:ac:02:af:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 00:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fd1cbe76f1bde6753af5b7af74ab482f7815e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:b0:4b:5e:04:0d:eb:eb:f5:7c:d0:47:ec:
c1:cb:23:eb:b0:49:a2:3c:98:4b:92:f2:fa:71:ec:
ce:97:07:ae:24:22:45:0a:c0:81:72:84:18:2b:1f:
ba:c3:83:58:a8:82:db:0a:ba:65:1a:eb:1e:4d:d4:
9b:26:a9:e5:a6:33:59:26:aa:67:e2:80:67:36:4a:
ab:60:10:02:69:ce:5b:ea:d0:08:db:d0:0d:60:d3:
0d:b1:72:8e:3d:c3:13:32:72:0b:59:d4:7d:17:2b:
d5:b8:4d:94:3a:da:da:e6:16:41:20:61:7e:09:7a:
15:4c:33:8f:d7:96:53:95:f6:d8:d6:b2:6a:ac:2c:
4f:d6:e8:8e:e2:bc:47:c8:10:71:77:cb:11:c3:3e:
36:ea:67:3f:ed:c0:e8:0f:e5:bb:12:4b:00:14:f5:
a5:8b:70:67:46:71:4d:c7:ae:a4:65:f5:a4:1e:7e:
6b:6b:68:85:7c:d4:aa:83:d6:2b:a3:6e:7b:f8:f9:
56:1b:72:d9:7e:6a:d4:c7:9b:05:6a:9d:df:84:0d:
3a:75:cb:8f:a8:bd:2a:a7:f2:07:be:99:5a:bc:bb:
b4:64:43:fc:fa:12:45:85:7d:5a:77:a0:ce:9e:90:
ac:62:c6:b7:80:b7:6e:13:1b:b8:c8:d5:46:2e:b9:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D1:CB:E7:6F:1B:DE:67:53:AF:5B:7A:F7:4A:B4:82:F7:81:5E:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/f9HL528b3mdTr1t690q0gveBXns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:b7:f6:7d:e9:4a:1c:f8:88:41:40:e1:01:fe:35:6e:40:18:
d3:07:86:cb:14:b3:f2:96:2a:e4:3e:70:4b:49:44:1b:f7:7b:
92:95:f1:a7:76:d3:04:de:4e:49:b1:e5:b9:15:4e:ee:22:53:
3e:79:0d:78:6d:dd:c0:56:eb:84:63:82:ac:51:ca:d7:d4:df:
79:30:11:e1:52:4d:69:4a:6f:51:72:e0:ab:38:41:eb:ad:fd:
16:0d:8b:dc:97:b5:1d:dd:b7:96:79:51:a6:c3:57:8c:a1:72:
0c:cc:45:0b:8a:60:24:33:80:ee:11:64:f4:45:3a:07:de:de:
87:c0:43:2e:fe:4b:fd:11:e5:f6:44:98:b5:d8:4e:ed:2b:a1:
91:0e:0e:09:58:ed:91:8d:ab:8c:77:64:72:02:b1:dd:77:c6:
3b:a4:78:72:a7:89:e4:40:b7:ea:86:d9:1d:be:da:0c:76:92:
8e:02:33:67:97:74:40:ce:28:22:1c:df:14:97:9e:01:32:8e:
de:8b:7c:d3:dd:9c:bf:22:5b:ee:4b:31:38:54:0e:2d:49:61:
93:be:48:b8:8f:2d:43:25:13:e1:68:d0:3b:85:01:a5:10:12:
11:6f:24:8b:06:36:c2:7e:7d:74:0b:bd:e5:ae:2a:c3:14:7d:
ed:3f:8f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:59:53 2025 by rpki-client