Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h1YKkqeO6R2GBOm-o2TM-81cBUU.roa
File: h1YKkqeO6R2GBOm-o2TM-81cBUU.roa (raw, json)
Hash identifier: XGIZkvu/K3GAq46STioINWaSnTcd0awRofVsU3DSryg=
Subject key identifier: 87:56:0A:92:A7:8E:E9:1D:86:04:E9:BE:A3:64:CC:FB:CD:5C:05:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 73C7DA09
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h1YKkqeO6R2GBOm-o2TM-81cBUU.roa
Signing time: Sat 19 Mar 2022 09:09:39 +0000
ROA not before: Sat 19 Mar 2022 09:09:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1942477321 (0x73c7da09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 09:09:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87560a92a78ee91d8604e9bea364ccfbcd5c0545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:91:83:89:46:36:c9:7a:36:8c:2e:1d:36:
87:83:6f:31:4f:80:74:2f:cd:e6:0e:09:65:91:75:
93:0a:00:cb:c1:7c:c5:a5:e3:1b:88:32:30:6a:d4:
34:78:ba:8a:02:0d:5d:82:5d:9c:d5:d4:bd:df:9c:
50:f2:e0:43:60:58:dd:f9:ce:09:5d:6d:2e:4a:81:
6d:00:2a:b5:db:0e:9c:d7:61:e4:7a:db:3d:bd:50:
4f:1b:74:3f:62:b8:79:35:6d:8c:3d:eb:34:bb:4e:
a0:78:32:80:aa:5a:e0:d3:f0:8f:e2:fe:d7:ad:7c:
29:d0:a1:40:8b:95:a0:91:f0:d7:c3:41:4f:2a:91:
c4:e0:21:4e:46:b7:04:1b:6a:31:4a:6a:ec:f6:2d:
4b:41:43:a1:a1:58:3c:d8:07:53:02:f2:64:65:54:
15:b3:9e:45:8f:00:7b:e9:ba:85:a8:6c:e3:f2:87:
7b:b5:8b:4a:7d:29:ad:89:bd:ff:2b:4e:9e:ad:d5:
44:01:e0:c8:fa:0e:09:bb:51:ec:0f:1d:e4:e7:23:
05:ef:9b:26:9b:ba:ab:dd:9e:de:b2:6f:46:c7:bb:
ea:fc:59:50:4d:c9:a3:5c:01:b4:7d:61:b7:ae:8b:
cb:e8:9f:66:55:db:a5:dd:85:ef:28:76:07:86:0f:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:56:0A:92:A7:8E:E9:1D:86:04:E9:BE:A3:64:CC:FB:CD:5C:05:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h1YKkqeO6R2GBOm-o2TM-81cBUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:0e:9c:de:23:5b:77:be:4f:59:5c:4a:c2:63:fc:7b:ea:8e:
e4:58:ab:d4:cb:b2:5d:78:b0:71:fa:31:e8:cf:64:bd:3c:ae:
83:0b:0a:a5:8a:b5:ab:5b:21:2f:d5:80:af:c9:56:b5:2e:0a:
01:0c:24:c0:64:e2:c5:9f:e3:23:05:4f:b9:53:5e:e9:98:12:
33:b0:9e:a3:a6:03:09:ea:2b:d2:f7:0f:20:ea:d3:b5:c4:e6:
23:e6:f2:35:ef:70:c4:96:c9:06:cb:45:4f:50:4d:31:ee:5b:
dd:01:ef:1a:e0:0b:40:c9:14:ae:40:79:ac:ca:d4:d2:9d:ea:
c9:df:38:44:70:26:06:06:f2:17:d9:81:29:76:5a:8f:83:ba:
a9:64:7d:ab:9d:7c:48:25:86:b5:4a:02:86:1e:0b:09:86:40:
e4:16:8c:7f:fb:c7:75:94:16:72:08:d5:62:28:37:05:47:8f:
fa:ed:3e:0a:d4:c5:b2:b8:d8:94:56:1e:b6:3d:73:75:c8:32:
f6:da:df:1d:c9:5b:12:f6:d4:f7:66:2f:f0:f1:29:c3:3c:34:
1c:e6:e5:14:3b:42:9e:2d:46:01:0f:b3:cd:06:ed:81:e9:cc:
17:56:5e:62:d1:7b:59:5c:bd:31:41:26:2c:8f:bc:a4:c6:86:
f6:b0:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:05:52 2025 by rpki-client