Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9KaIb5L36B0Nr3eTIvCHsFEQLQg.roa
File: 9KaIb5L36B0Nr3eTIvCHsFEQLQg.roa (raw, json)
Hash identifier: btukVOmQYQjSZTwV+Xzim4zhgKye4IgG0/Lm3dN9Y14=
Subject key identifier: F4:A6:88:6F:92:F7:E8:1D:0D:AF:77:93:22:F0:87:B0:51:10:2D:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185537DF58CAFDC7E412E31F2132517AE72
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9KaIb5L36B0Nr3eTIvCHsFEQLQg.roa
Signing time: Tue 27 Dec 2022 12:10:41 +0000
ROA not before: Tue 27 Dec 2022 12:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:7d:f5:8c:af:dc:7e:41:2e:31:f2:13:25:17:ae:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 12:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4a6886f92f7e81d0daf779322f087b051102d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8a:c6:cf:d8:3b:42:1c:5c:4d:4f:dc:58:c5:
f7:2d:b6:ad:9d:e2:d3:55:28:6f:90:ae:16:64:a1:
d2:7c:98:d8:a6:bd:59:ec:9f:6b:88:4c:b7:d6:be:
24:60:d5:bf:91:cb:20:31:4b:6d:af:7a:17:6e:ce:
52:10:eb:8f:7b:58:56:e2:b8:d3:6e:5c:0d:e8:4a:
f9:6f:59:8f:c3:41:ce:04:2f:99:29:8c:d4:fd:6f:
16:40:ae:1b:bd:10:f6:34:65:53:70:de:09:1d:07:
48:a0:24:7e:58:cf:2d:1d:55:29:21:61:a5:3a:00:
c9:c6:fe:c7:a0:a8:c6:5e:75:9e:8f:ff:88:96:28:
db:3a:93:22:1f:68:1c:d6:21:e7:0f:1c:aa:9c:35:
09:10:55:16:a2:96:f7:62:b3:31:ab:5a:08:81:bf:
af:b0:50:72:d4:06:1b:f8:32:ea:48:ed:8f:52:90:
1c:57:aa:a0:7e:fe:8d:50:5d:91:57:24:04:99:94:
45:99:89:56:dd:8a:73:0b:9e:d7:84:84:13:a1:11:
74:df:d5:3e:d7:87:69:22:2a:32:d8:f1:35:5d:29:
93:e2:cc:c7:86:a0:70:71:a6:f6:6d:bd:ce:80:8b:
06:4f:81:74:c5:7d:b3:36:fe:3c:43:0f:be:ee:25:
d9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A6:88:6F:92:F7:E8:1D:0D:AF:77:93:22:F0:87:B0:51:10:2D:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9KaIb5L36B0Nr3eTIvCHsFEQLQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:28:25:97:d7:23:5e:07:e8:69:d9:9f:6c:97:e2:8f:e4:67:
f3:7f:d7:f0:c7:e7:46:0c:f1:e6:77:f6:04:16:9b:75:d5:b5:
69:28:12:82:30:f3:94:ec:a3:42:46:6e:5a:22:ca:14:56:be:
fa:23:52:ff:ac:2b:08:9d:a2:ec:f8:22:f5:9a:0e:76:83:0f:
7a:dc:e5:57:99:05:4f:ee:ce:ce:ac:d6:4a:33:68:f2:12:c2:
08:90:00:f4:ce:4c:bf:7b:af:da:b6:f0:d8:56:7a:c7:1c:80:
49:bd:e2:a3:b5:6f:11:90:78:a8:33:48:50:2c:e5:ee:25:c5:
04:3e:9d:55:a2:39:5a:c8:2b:5a:dd:f4:05:03:3f:48:46:b1:
ea:83:6b:7a:5f:c0:28:67:57:2f:d9:d2:3f:5a:11:3c:40:86:
65:d0:88:d3:2d:9e:fe:3a:25:10:d3:b0:ff:ef:e4:60:9c:38:
fb:4c:95:f0:1c:0a:b8:83:93:1e:39:f0:1a:7b:b5:a0:aa:ac:
ad:88:4f:af:c3:ea:d8:ce:53:dd:19:8e:e1:11:9a:d8:f1:c4:
56:f9:c4:6f:3a:a9:65:64:a9:24:a8:61:a0:ab:e3:e4:c7:b3:
7f:b9:c0:9f:79:53:7f:dd:97:97:9f:8f:15:27:14:3c:11:af:
30:9f:c2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:47 2025 by rpki-client