Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/72HR-hRT9gF6biKk0TwBkXWxX9E.roa
File: 72HR-hRT9gF6biKk0TwBkXWxX9E.roa (raw, json)
Hash identifier: Fnme0eTlojSJ1gzdroVRJDqJQZPSZvt1VyKu2v868Qg=
Subject key identifier: EF:61:D1:FA:14:53:F6:01:7A:6E:22:A4:D1:3C:01:91:75:B1:5F:D1
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F9DDAF9D081B7D6E3427F8717FD63C872
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/72HR-hRT9gF6biKk0TwBkXWxX9E.roa
Signing time: Wed 22 May 2024 01:12:04 +0000
ROA not before: Wed 22 May 2024 01:12:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:9689:3f54/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9d:da:f9:d0:81:b7:d6:e3:42:7f:87:17:fd:63:c8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 22 01:12:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef61d1fa1453f6017a6e22a4d13c019175b15fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bc:da:9c:96:e7:a4:6e:e0:81:31:da:96:5c:
94:e6:b9:61:9b:ca:ac:43:d6:ff:e0:29:bb:5e:c0:
84:dc:fe:90:da:ea:10:12:31:a4:94:73:ec:14:71:
9a:77:06:27:63:47:13:56:d4:02:3f:98:2b:ec:ab:
e8:5b:d1:0d:66:ba:d3:fc:f8:1e:e6:35:5a:d4:4f:
05:e2:95:42:f3:37:e5:4c:92:72:4e:0c:8c:fe:fe:
e9:a4:6f:75:69:b0:3b:ec:1a:6e:c8:02:c2:aa:83:
2b:d9:cf:b2:a3:c6:8e:45:17:aa:c7:7e:bc:2a:25:
c7:cf:f5:a6:d8:d5:52:0c:40:3c:c0:2d:e0:7d:fc:
bc:9a:5b:18:20:0d:f5:77:8a:03:d7:ae:93:46:ad:
b0:fe:68:79:60:58:a4:1d:c6:1a:47:41:f3:3d:a6:
c3:7c:67:13:48:a2:c6:62:26:1b:11:a6:8a:28:eb:
93:fd:af:23:b4:46:fc:82:67:d2:05:98:4b:8e:0f:
af:bc:13:ab:a8:b3:3b:9c:a6:fe:d3:df:93:48:11:
bd:d0:06:71:3a:ae:58:ab:a7:35:c6:07:ed:99:1c:
97:b3:35:4f:46:a3:d1:4b:32:8e:46:ad:e0:24:73:
7e:e9:75:58:10:94:4d:b0:cf:2e:cf:19:a9:8d:22:
a1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:61:D1:FA:14:53:F6:01:7A:6E:22:A4:D1:3C:01:91:75:B1:5F:D1
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/72HR-hRT9gF6biKk0TwBkXWxX9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:ae:78:d6:a5:c7:08:15:c9:cb:27:69:54:cc:01:a4:09:1a:
f0:22:25:72:af:5f:ce:41:9c:44:d5:72:ef:26:2c:9b:46:54:
dd:86:0c:9c:3a:1a:f4:36:5e:d2:cd:e6:d1:7f:4d:25:bb:af:
f3:9f:0d:cf:83:62:26:c8:cc:8b:21:bc:f4:fc:ec:f6:2c:0d:
30:8f:0e:00:f6:15:cf:85:60:db:68:8b:1e:14:c0:0c:91:dc:
80:e8:60:4c:93:b9:e4:c4:35:79:71:17:bb:82:37:7d:0a:2f:
e4:95:80:01:43:53:33:24:99:df:16:7a:e7:3b:f9:13:f9:a6:
25:24:2e:bb:b8:6f:27:3a:96:17:61:79:da:5f:65:03:c7:2d:
30:22:a3:66:63:bc:27:83:ce:20:ae:b0:a7:a3:f6:ee:ae:d4:
b5:3e:c1:d3:b9:20:bf:b1:14:ce:1d:47:6c:7b:1b:40:65:96:
d1:cf:26:6e:fd:ac:d6:c5:ab:d1:10:5e:69:55:1b:13:5f:80:
f9:06:6b:32:c4:01:a7:2d:0c:fb:44:52:6e:81:b7:9b:0e:5a:
58:dc:e1:08:60:c0:7c:2c:11:12:be:cc:4d:7b:08:7f:0c:24:
2e:8c:4a:cd:87:7d:9e:c5:81:72:b5:d7:d5:1d:70:03:93:b2:
20:bb:51:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:14:23 2025 by rpki-client