Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9J639fNBeG6B_9G2heiMqqJgiFI.roa
File: 9J639fNBeG6B_9G2heiMqqJgiFI.roa (raw, json)
Hash identifier: YT+yFyvTDSl7FARJNT1mkYKixUYds52l9XAfL2Mjzw0=
Subject key identifier: F4:9E:B7:F5:F3:41:78:6E:81:FF:D1:B6:85:E8:8C:AA:A2:60:88:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 690620A8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9J639fNBeG6B_9G2heiMqqJgiFI.roa
Signing time: Wed 09 Feb 2022 01:04:42 +0000
ROA not before: Wed 09 Feb 2022 01:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1762009256 (0x690620a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 9 01:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f49eb7f5f341786e81ffd1b685e88caaa2608852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:12:59:8d:08:f9:09:4c:8a:df:bd:b0:56:
57:45:76:9c:c7:db:e3:0d:7c:ad:ee:8b:aa:e3:3a:
3b:d9:ed:c1:4c:74:d8:1f:4f:65:d6:a5:15:32:39:
b6:ed:a7:b5:51:c2:64:a4:93:02:f5:ad:00:d6:ed:
7a:95:5e:52:8a:79:4b:dd:bc:bb:ec:35:13:64:c8:
c1:93:ff:cb:16:b3:83:f4:1c:d6:37:6e:7b:b8:05:
7a:54:bb:7a:11:1e:ae:71:55:5a:7d:b8:5e:21:cb:
d5:13:85:93:fb:a5:88:22:87:c8:78:c3:00:90:5e:
cf:f0:d0:fd:77:ce:7a:13:4f:02:01:b8:57:81:5c:
cb:fd:65:97:47:e6:5b:d4:e2:57:dd:3f:6c:dc:a5:
6d:60:a3:c7:35:63:fa:5a:b7:6c:39:e4:d9:c6:54:
c6:5f:c0:23:8e:ba:1b:76:c9:1d:05:ef:5c:e3:8a:
d4:6d:ee:67:b1:57:2a:1e:f3:c3:0d:73:e4:dd:d5:
68:cf:e6:3a:3e:6a:f4:71:69:35:d5:0c:99:a9:52:
c1:18:bd:c8:f2:90:69:db:ac:0f:cf:f3:8f:00:c7:
00:8b:19:b3:62:97:9e:b6:1c:44:49:97:7e:cb:08:
d9:de:d6:ea:97:be:f6:75:9f:4d:0f:5f:ff:81:f8:
9f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9E:B7:F5:F3:41:78:6E:81:FF:D1:B6:85:E8:8C:AA:A2:60:88:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9J639fNBeG6B_9G2heiMqqJgiFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:5a:b4:dc:d9:15:e6:86:3b:7f:c8:04:37:4d:1d:c5:7c:2f:
ea:31:15:ed:be:ff:07:94:ce:c9:da:75:f5:76:d3:96:bb:0a:
73:dc:0a:d5:8f:5a:7f:e7:36:25:3c:13:54:68:79:13:fc:97:
4c:1d:83:7a:ef:67:bf:a7:00:c2:68:83:43:12:04:5d:42:e9:
28:86:9c:58:6f:33:66:cc:d5:76:70:10:a5:37:bb:20:ea:1c:
11:6e:be:ca:42:d8:a6:9f:d8:28:ae:fd:a5:37:9d:c4:7d:36:
8c:5f:74:36:8f:a2:1f:4f:79:5e:6f:c1:9d:d5:c6:28:b1:05:
31:8a:18:c3:8d:60:ce:30:c4:d1:b6:d0:af:39:91:f8:a1:5d:
34:c0:e6:1a:ca:64:60:93:66:d2:13:62:43:51:cf:c1:90:e7:
76:db:cd:14:a3:74:77:85:f0:84:fe:b9:b5:0e:f5:5c:37:0d:
30:43:ad:b1:96:11:8c:8b:fe:18:50:71:20:74:4a:69:23:6d:
3f:ef:70:de:0c:a2:63:51:45:9c:e3:96:f9:89:a0:ca:ef:f2:
1e:14:e0:28:77:e3:6b:41:30:95:b4:51:33:60:51:81:bc:74:
60:7b:e2:1d:af:e5:2a:fc:4c:ac:b9:bf:4a:77:6c:d3:5d:ba:
32:b1:3f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:23:13 2025 by rpki-client