Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9AxfR7D-BIPWIn7k-Ke4EqM5klk.roa
File: 9AxfR7D-BIPWIn7k-Ke4EqM5klk.roa (raw, json)
Hash identifier: OMA0QFiCIEwyuZxHi2j0OJBUDmJAXO8bs0ATIYsGaqs=
Subject key identifier: F4:0C:5F:47:B0:FE:04:83:D6:22:7E:E4:F8:A7:B8:12:A3:39:92:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018580F5FAAA13AA3CA183F6CA7F82B25F5F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9AxfR7D-BIPWIn7k-Ke4EqM5klk.roa
Signing time: Thu 05 Jan 2023 08:04:41 +0000
ROA not before: Thu 05 Jan 2023 08:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:80f5:b59a/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:80:f5:fa:aa:13:aa:3c:a1:83:f6:ca:7f:82:b2:5f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 5 08:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f40c5f47b0fe0483d6227ee4f8a7b812a3399259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:b7:00:3c:32:33:b1:64:99:cd:c5:1e:e9:
38:9c:5b:60:db:7d:75:8b:87:9d:dd:c5:18:0d:03:
d8:65:8d:ea:7a:be:a9:cc:1a:c4:23:4a:c1:a6:5b:
2e:d4:c5:68:27:43:1c:7b:16:3f:b2:50:33:7c:9f:
b4:91:8e:1c:97:97:79:a7:e7:12:73:2e:26:c8:11:
3b:00:cc:2b:39:4d:6a:e1:da:51:70:3f:54:f9:0f:
de:91:e2:22:1d:88:c6:f9:49:d3:f5:90:1c:f4:1d:
b7:e4:bd:88:68:6e:61:fb:02:d2:98:5a:b6:70:d9:
ec:19:14:36:f7:d9:70:9d:9f:14:d6:31:e1:1b:72:
1c:57:8b:eb:51:54:f5:63:f6:a1:01:10:9a:f6:3a:
53:2e:dd:f9:69:0c:e9:80:00:ba:b5:c2:4f:e1:30:
82:91:7b:6f:51:5a:57:bd:6b:3b:ca:1d:a0:bb:5c:
ca:af:ec:25:86:16:c1:1b:1e:f2:e4:66:c2:2b:d4:
f4:6a:fb:c8:9e:fa:c5:87:67:a7:bc:b9:60:93:68:
22:4c:47:9c:63:68:25:50:c7:e8:e8:dd:e6:98:3f:
c2:6d:f3:1c:02:18:64:9e:59:5a:3c:fc:cc:ea:5b:
63:55:fe:ef:1b:e0:b3:af:3e:d9:58:d0:70:46:1c:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0C:5F:47:B0:FE:04:83:D6:22:7E:E4:F8:A7:B8:12:A3:39:92:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9AxfR7D-BIPWIn7k-Ke4EqM5klk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:ee:92:90:c0:ad:ae:b9:aa:36:f9:b2:91:86:90:84:ba:52:
f8:80:cd:3f:1d:f9:20:87:db:61:75:b3:80:71:b4:ba:3f:1e:
3c:78:ef:e0:29:d8:33:b4:af:71:81:d7:5e:1c:d4:3e:e1:5e:
38:64:7d:e3:19:e2:e0:66:d5:47:f0:54:2b:f7:da:ea:3c:d8:
d3:0e:44:5b:db:18:e3:bc:02:1f:08:87:73:ed:12:ed:c1:f6:
13:b9:9e:bc:56:b9:f6:2e:25:d9:c1:28:d9:a8:83:91:36:12:
73:b8:0d:87:5b:5a:85:0e:98:06:f2:b6:00:aa:41:2d:aa:19:
01:20:a2:7e:b6:0d:ee:97:9d:89:68:b3:9d:0e:23:9a:a4:68:
02:f9:cf:9a:5e:6d:5c:15:93:9a:5c:d3:a8:7a:7c:b4:fc:d9:
09:25:56:9c:6d:a8:48:77:ba:4a:06:ae:3f:48:83:06:8c:bb:
7b:58:ad:86:23:79:47:0d:05:cd:4f:df:4e:7b:d3:42:58:9f:
1e:b0:c4:9b:3d:f7:06:05:d1:39:09:73:38:33:b4:29:95:bb:
2f:2f:b5:2a:53:60:0f:ab:0d:6b:cf:cf:dc:11:2f:1d:77:33:
f3:07:b2:b4:54:22:7d:fd:cf:0f:91:69:76:7e:da:b3:d1:39:
dd:6b:c1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:43:02 2025 by rpki-client