Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-bcU9Qkwuv_YfSfNZosnSVn1whM.roa
File: 1-bcU9Qkwuv_YfSfNZosnSVn1whM.roa (raw, json)
Hash identifier: KigNF8bL/sXU7RuuP4SS+6UH/I074/+LBFCV2g8hwzg=
Subject key identifier: F9:B7:14:F5:09:30:BA:FF:D8:7D:27:CD:66:8B:27:49:59:F5:C2:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E63B137D6148E930E7F8D854D462CEB4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-bcU9Qkwuv_YfSfNZosnSVn1whM.roa
Signing time: Fri 11 Aug 2023 20:12:58 +0000
ROA not before: Fri 11 Aug 2023 20:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e6:3b:13:7d:61:48:e9:30:e7:f8:d8:54:d4:62:ce:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 20:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9b714f50930baffd87d27cd668b274959f5c213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:61:16:f5:7b:bb:75:62:56:cd:b2:71:0a:a5:
1b:b4:98:18:31:79:e9:3c:22:34:ba:75:cc:4a:e1:
5d:07:fe:6f:24:03:5d:7f:b3:72:f8:bf:f9:5d:c4:
74:e4:8c:64:fd:68:a6:4a:4c:3e:cf:dc:c8:58:a7:
d5:87:29:07:0f:e6:6f:30:8f:52:59:c9:b4:a9:4d:
14:c7:2b:a6:b5:73:e2:5e:e2:b9:bf:ff:2e:c7:d8:
bf:72:62:7b:bb:22:44:3c:d7:3d:da:a0:db:da:2d:
71:68:ab:61:02:58:5c:ab:63:ec:de:a8:f4:63:c9:
cb:1a:14:22:9d:4d:24:8e:c5:db:78:14:ad:98:7d:
df:98:ec:9d:25:96:17:86:bf:52:fc:28:65:a0:66:
49:9f:c4:30:aa:7d:07:04:38:b0:27:8b:47:23:aa:
0d:63:24:e7:d8:47:a3:23:ea:2a:c0:53:59:85:33:
36:dc:47:e6:ab:8c:f6:f4:48:78:5a:5c:d9:ef:6b:
34:10:e1:07:73:6d:cf:76:72:40:1a:38:c3:35:8b:
1a:ff:7e:f0:6a:b6:3d:c8:e5:52:1d:be:9e:ae:d0:
1d:ae:c9:75:e6:96:4c:9c:be:25:ed:70:91:0f:69:
ae:56:0d:f5:fd:af:fd:22:cd:04:3b:17:5d:ad:08:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B7:14:F5:09:30:BA:FF:D8:7D:27:CD:66:8B:27:49:59:F5:C2:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-bcU9Qkwuv_YfSfNZosnSVn1whM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:da:96:54:30:ff:64:b5:06:ee:66:27:02:35:d6:1f:a3:9c:
6e:8b:20:aa:ac:02:90:82:59:4b:71:7f:00:2e:a6:6a:0d:87:
c5:a4:7e:7c:dd:b3:e7:74:49:55:57:41:c9:97:94:79:85:c6:
e6:31:71:b1:af:2e:ae:d1:a9:12:66:2c:47:e6:ba:57:18:8a:
74:49:e6:2c:34:91:7f:ae:34:a2:cf:14:91:39:ec:77:74:b7:
56:98:54:f5:62:81:2a:bb:36:1d:a4:8d:a3:75:9f:d5:ac:f3:
d1:34:67:b5:34:cc:dd:a2:0c:a6:be:75:af:b5:b4:97:91:6c:
0d:eb:36:14:3c:56:7e:b6:d8:7d:18:b6:95:e0:07:98:5d:d1:
18:78:48:1a:cd:aa:50:8d:cf:3e:51:6a:7c:ec:73:c2:10:d3:
eb:7b:9c:c6:fa:9d:5b:17:32:8b:24:55:5d:70:a8:4c:3a:18:
d6:1c:01:56:90:61:13:61:18:3c:d5:80:5e:62:b7:8b:df:31:
fa:61:48:a6:b9:b3:2d:3a:3a:43:c4:fb:06:a8:88:5d:40:6a:
77:d7:53:40:2f:ef:55:8f:6e:83:84:c5:bd:2c:7b:8b:c2:3d:
19:36:24:34:c8:81:6a:27:24:85:03:16:7c:f0:73:e3:50:50:
56:82:34:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:33:33 2025 by rpki-client