Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v9q6J0RATKZssnnp83M8Fu1JZYc.roa
File: v9q6J0RATKZssnnp83M8Fu1JZYc.roa (raw, json)
Hash identifier: 85VQa4pkECVlToOPsPpU5XWivQvEUkeMV0nGQM/V01w=
Subject key identifier: BF:DA:BA:27:44:40:4C:A6:6C:B2:79:E9:F3:73:3C:16:ED:49:65:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 813E0B11
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v9q6J0RATKZssnnp83M8Fu1JZYc.roa
Signing time: Thu 05 May 2022 00:12:40 +0000
ROA not before: Thu 05 May 2022 00:12:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2168326929 (0x813e0b11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 00:12:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfdaba2744404ca66cb279e9f3733c16ed496587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:32:e1:38:6f:81:7e:f9:f5:ae:10:0a:3b:
45:9c:bd:34:e6:2f:4d:8d:09:b1:9d:02:ca:6c:7d:
4d:35:39:9b:fb:26:68:76:81:d1:30:c5:b9:5d:38:
7a:91:b0:cc:53:66:53:58:50:19:7e:cf:6b:1d:70:
cc:0c:1c:53:f3:d1:52:9a:ce:ab:88:98:33:dd:80:
77:a5:bf:13:59:d4:7d:5a:d6:d6:2c:82:1f:4c:d9:
04:df:9a:0e:41:c0:fa:d0:d8:61:01:de:ab:19:c9:
75:c3:9b:37:e1:02:29:07:91:08:90:4f:35:cf:05:
64:20:95:06:b2:98:4c:cd:0e:03:55:27:6c:ee:64:
0a:d6:b4:86:da:81:b1:60:2d:bc:44:34:62:1e:09:
15:e4:fc:1d:89:5b:d3:25:d1:e0:96:fa:f3:fd:77:
62:a0:ca:34:0a:c7:57:a2:f6:cb:09:d3:97:0e:21:
9c:c3:e1:cd:2e:ed:d6:9a:40:8c:88:d4:8a:f9:f1:
39:57:18:be:c4:c8:42:87:0f:8b:93:61:4e:bf:dd:
40:8c:35:a0:86:10:eb:ba:35:2c:6c:c8:35:78:d2:
a6:c9:2d:ea:f7:a1:e7:ae:ad:56:69:97:b3:ef:e1:
c1:80:51:65:f3:2d:72:df:6c:de:9c:1f:5d:7c:24:
a7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DA:BA:27:44:40:4C:A6:6C:B2:79:E9:F3:73:3C:16:ED:49:65:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v9q6J0RATKZssnnp83M8Fu1JZYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:f0:a0:07:c4:ac:8c:27:9a:03:35:f0:ca:5c:d3:ea:b7:5d:
c9:2a:af:f0:25:70:e5:3f:77:f0:40:85:1c:29:5c:4a:06:32:
c1:9b:42:24:77:44:81:0c:c7:a5:5a:8c:61:5b:a4:58:66:ef:
1c:bf:a7:2e:13:be:86:69:36:31:4b:6e:06:90:52:c3:98:de:
26:88:5d:9c:65:22:90:ab:16:d3:9d:b6:13:ea:c3:35:2d:47:
68:f7:41:84:e4:12:dc:c9:2d:4b:a5:2b:12:71:6b:17:23:90:
6d:5b:ed:da:23:3c:15:d1:b5:a7:b3:61:25:08:99:e9:1a:37:
70:02:57:24:ae:86:db:75:c3:4d:ef:18:42:04:16:74:83:7b:
fd:00:dc:6e:32:c2:b0:5c:43:d9:1e:e7:cd:d7:60:c9:b3:e1:
f8:ca:1a:9e:68:19:3a:73:c7:05:86:17:09:3b:ba:6f:a1:87:
7c:22:8e:f8:4c:6a:87:8d:85:26:54:d5:1e:3d:7b:75:67:f3:
17:f8:c0:75:02:b3:0a:1f:3c:91:75:69:0a:93:2d:22:bf:cd:
c0:89:f7:4b:cd:40:8e:35:13:5f:8f:3f:7d:51:0c:ed:93:35:
26:6c:96:89:33:5a:40:e7:c8:42:d1:c6:64:9b:95:d6:c2:a9:
cf:0d:0f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:22 2025 by rpki-client