Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9BClbUnZJ7VDbMeHrKqbr4up52c.roa
File: 9BClbUnZJ7VDbMeHrKqbr4up52c.roa (raw, json)
Hash identifier: rhTGNHZjdlP+Fh1w/3+KthIHt9guxbNCUxY52ikPtSQ=
Subject key identifier: F4:10:A5:6D:49:D9:27:B5:43:6C:C7:87:AC:AA:9B:AF:8B:A9:E7:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182929E445F68A7776FEA6E75E7F266599E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9BClbUnZJ7VDbMeHrKqbr4up52c.roa
Signing time: Fri 12 Aug 2022 15:13:41 +0000
ROA not before: Fri 12 Aug 2022 15:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:92:9e:44:5f:68:a7:77:6f:ea:6e:75:e7:f2:66:59:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 15:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f410a56d49d927b5436cc787acaa9baf8ba9e767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:e2:76:cb:5f:64:27:54:95:ad:36:ec:1b:
56:0b:74:70:03:90:7e:9e:f0:54:10:4a:95:ca:eb:
b8:72:65:aa:e6:a6:f6:70:e0:ac:73:cf:5b:e3:86:
e9:9f:6e:9d:22:8f:73:3f:ef:d6:e4:36:ec:db:6c:
9d:c9:31:7f:fd:d7:5d:bc:61:b8:12:d0:3f:5d:7f:
10:cd:80:43:1f:f7:9a:96:22:00:6f:a6:6f:0c:18:
01:1a:23:0e:d7:6c:e2:c2:38:a0:74:11:d6:f6:d5:
33:50:e3:e4:cd:f9:d5:38:43:c2:9e:7c:85:72:57:
07:50:92:2b:9d:89:73:6f:3e:89:fb:bf:a3:b1:77:
67:64:d3:07:d6:58:6e:ac:9d:45:83:c3:22:aa:dc:
70:2c:59:3f:0d:6e:59:51:6f:2a:44:8a:47:85:16:
58:75:bb:9a:c8:84:fa:04:14:7b:fe:0d:a0:b5:a9:
02:b2:01:3a:a9:9e:34:7f:b9:f4:d1:1e:1c:c8:f8:
fe:33:49:5e:4d:ca:09:92:61:31:4f:c7:75:e2:b3:
08:97:bf:ee:d4:32:45:7c:fd:18:49:51:30:9c:84:
3a:69:75:44:b0:4b:ad:85:61:75:93:2b:82:c6:14:
b0:e7:2d:31:81:12:34:d8:ea:ae:c6:05:ca:ef:da:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:10:A5:6D:49:D9:27:B5:43:6C:C7:87:AC:AA:9B:AF:8B:A9:E7:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9BClbUnZJ7VDbMeHrKqbr4up52c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:d7:38:37:c8:09:08:ee:72:14:12:28:b8:7c:a3:02:bd:ff:
48:67:3b:7e:94:d5:57:26:68:ac:c3:a3:ae:30:00:13:13:1c:
63:1f:12:ad:ec:db:48:1f:fb:5b:30:a0:dd:65:9e:51:a0:18:
93:86:8b:65:b6:24:6a:ef:7b:8a:60:2e:c6:1f:15:c7:f6:11:
3c:ce:98:e3:e7:96:1a:30:49:34:95:39:42:68:26:7d:87:29:
7d:bc:96:b4:26:af:66:ad:48:2e:05:7d:ae:b4:bc:06:c5:88:
f1:ea:21:39:25:f5:b6:40:90:ca:72:17:ab:2e:c0:c3:f4:ce:
bb:f0:42:26:dd:aa:2c:a4:75:d3:f1:ae:11:54:de:7b:8e:8e:
2b:62:9e:1e:00:86:50:31:1a:a1:7f:20:17:5d:bc:37:46:e3:
b4:1c:52:51:84:bf:cc:f3:f8:5b:3c:77:ce:6c:aa:8b:c5:64:
81:1d:cd:a7:a4:ae:68:ec:eb:33:12:8d:ac:70:72:18:8f:42:
63:d9:84:48:97:a4:c8:82:15:82:c6:e2:ae:68:05:b5:a5:07:
9a:f0:55:84:c8:25:ad:df:c5:6f:f9:b2:7d:c9:e2:45:cf:73:
92:b0:07:4c:4f:e2:a9:6a:e2:4b:d3:0f:9d:f2:fe:89:f1:0b:
88:4f:ba:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:17:52 2025 by rpki-client