Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/10a9p5p2UM-sxo8E663RY4nguwY.roa
File: 10a9p5p2UM-sxo8E663RY4nguwY.roa (raw, json)
Hash identifier: 01DamSVfr965iDpLcSmdFrlKSV5NYeNGS25/F2ZhJ/I=
Subject key identifier: D7:46:BD:A7:9A:76:50:CF:AC:C6:8F:04:EB:AD:D1:63:89:E0:BB:06
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01831FFEEB83CB3EAF7939EACE08BBE140CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/10a9p5p2UM-sxo8E663RY4nguwY.roa
Signing time: Fri 09 Sep 2022 02:05:43 +0000
ROA not before: Fri 09 Sep 2022 02:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:183:1ffe:1870/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1f:fe:eb:83:cb:3e:af:79:39:ea:ce:08:bb:e1:40:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 9 02:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d746bda79a7650cfacc68f04ebadd16389e0bb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f6:fd:4b:d0:f1:c6:09:93:60:18:10:06:c5:
06:c4:9a:fc:e4:db:d9:f9:77:af:a5:1b:7e:47:97:
00:e6:a9:07:48:d8:38:1a:21:32:b0:21:fa:3a:e6:
c1:6f:f7:9a:64:45:72:da:4a:df:47:f4:1c:42:a5:
50:19:77:17:be:8d:66:6a:4a:a4:5c:b7:da:31:1b:
e4:7b:97:7a:ac:61:76:aa:a0:40:4d:29:21:50:a4:
37:cb:08:f4:68:eb:e2:c3:a9:5e:ad:ab:ec:89:29:
37:1a:e1:65:e3:20:08:29:e9:f0:21:b8:90:8c:51:
07:22:71:60:3c:8c:7e:5a:99:e0:1f:c7:20:3d:e9:
68:5f:c0:5e:ae:0e:7d:ab:e7:7d:30:0f:3d:02:2c:
5e:48:f3:c4:74:64:50:7e:41:c6:16:b7:8f:a5:d2:
68:1a:b7:a6:7d:fa:06:16:0d:64:ef:12:a3:a4:2b:
c0:7e:34:d5:8b:90:a8:8c:50:d3:26:8e:c1:23:af:
26:07:2d:2d:39:e3:79:c0:93:17:e9:fc:ab:8f:47:
74:d8:9d:78:07:7b:51:ad:e9:82:bb:bb:60:60:01:
37:5e:0a:2a:c3:ad:e8:aa:d2:48:39:a4:af:bf:48:
51:58:1b:f0:91:09:65:fb:27:24:21:de:99:db:4b:
09:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:46:BD:A7:9A:76:50:CF:AC:C6:8F:04:EB:AD:D1:63:89:E0:BB:06
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/10a9p5p2UM-sxo8E663RY4nguwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:1e:24:b4:45:e8:d2:1f:6b:ce:23:da:fd:91:ab:06:77:a3:
0e:80:9e:6b:0e:9c:15:99:b3:86:66:fd:f3:0b:f1:f3:55:02:
31:46:a3:6f:30:dc:0a:c5:e8:b4:1b:2e:f0:08:29:a9:3b:1b:
09:9f:80:cc:92:3d:e7:88:05:70:38:c5:0b:9a:84:16:66:de:
cf:b3:d4:b8:3b:b0:e6:dd:d1:72:07:c8:67:bb:db:1d:88:0b:
27:47:31:c3:03:3c:2f:f1:79:8a:23:a7:a8:6b:ed:80:03:0d:
17:41:bb:a8:6a:4b:12:b9:09:56:40:e6:98:f4:b3:cc:4d:38:
f8:06:d5:43:29:1a:e5:6c:0e:0d:cc:70:d2:a1:6d:03:ea:ca:
7c:a6:a8:bc:fc:3a:a1:a2:3c:5c:5f:d0:95:31:62:ae:a9:ab:
94:86:05:61:d1:d4:2e:ad:41:47:da:6b:51:a5:ae:5d:95:c7:
f6:bd:a5:9d:dc:f5:c1:c8:a6:53:85:56:0c:b8:7d:4d:04:01:
c6:26:83:c3:2d:fe:ff:a2:dd:ad:d1:a0:96:e8:17:49:86:66:
56:88:68:ce:5b:c1:ee:6d:e3:23:c5:47:04:e0:79:95:e1:a3:
1c:d6:77:5f:4b:9a:b1:b4:c0:32:03:9e:60:b2:21:2b:a4:0e:
af:26:89:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 22:19:19 2025 by rpki-client