Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9PUpP9Sc0dv80xayXQtq7_W6uIk.roa
File: 9PUpP9Sc0dv80xayXQtq7_W6uIk.roa (raw, json)
Hash identifier: kN1+PidDgkVP01hRNu5kY641J9S2K6jy22+3KGtHASU=
Subject key identifier: F4:F5:29:3F:D4:9C:D1:DB:FC:D3:16:B2:5D:0B:6A:EF:F5:BA:B8:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B390781ECCCFF1427BE05B08320BEB39
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9PUpP9Sc0dv80xayXQtq7_W6uIk.roa
Signing time: Wed 02 Aug 2023 00:05:36 +0000
ROA not before: Wed 02 Aug 2023 00:05:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:b38f:a3b4/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b3:90:78:1e:cc:cf:f1:42:7b:e0:5b:08:32:0b:eb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 00:05:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4f5293fd49cd1dbfcd316b25d0b6aeff5bab889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:69:01:d8:31:29:33:cf:c2:a0:37:e6:f6:b2:
b8:82:b2:24:d4:bb:48:2e:1a:c4:16:9c:69:1a:b5:
a8:8b:df:46:d6:1c:d6:cc:2d:3d:7b:c1:5a:62:dc:
ce:22:35:41:97:6a:31:a0:68:a2:a4:22:64:8b:89:
4a:4e:37:ce:07:94:9d:a4:34:a3:39:bd:2c:ad:8e:
98:97:41:f0:9e:35:56:c0:59:20:0b:76:c7:a8:b8:
c7:d8:0d:82:3f:1f:ed:88:0c:77:03:73:3d:47:64:
a9:7c:b6:8f:8f:1c:21:4e:68:aa:98:d7:56:21:dc:
66:58:cb:a3:57:90:da:96:74:66:6b:c4:f4:0e:c8:
67:f3:3f:a7:b9:29:3d:0d:dd:1c:4e:6e:cd:df:ff:
95:52:f6:ed:39:b4:a1:0d:51:4f:8c:35:e3:d4:af:
4a:8e:d6:0b:11:19:60:ea:d0:d3:ab:fb:28:4e:fd:
0e:71:52:c5:80:a3:5f:54:a7:3c:75:8e:e4:dc:f2:
ba:dd:93:95:06:38:35:2e:7f:13:f9:95:0f:27:ff:
e2:3d:5f:aa:e1:45:87:af:0e:d8:c0:76:de:dc:8e:
03:fd:45:71:82:00:67:e5:6e:db:fe:b3:58:ed:ea:
2a:e2:a4:3d:1a:75:52:59:41:c3:12:21:0f:16:ba:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F5:29:3F:D4:9C:D1:DB:FC:D3:16:B2:5D:0B:6A:EF:F5:BA:B8:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9PUpP9Sc0dv80xayXQtq7_W6uIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:c0:c5:a0:98:69:2d:79:1b:62:4f:5a:25:93:c3:d0:ff:07:
03:3d:83:59:e4:2f:ad:16:ed:0e:1e:bb:ac:34:6c:c8:9f:23:
b1:34:06:73:ee:ac:2a:30:e9:68:50:f8:71:c7:18:27:bf:71:
fb:21:92:9d:85:71:de:7d:1c:1f:17:4d:ef:4f:98:2c:46:d3:
c6:4e:68:97:3c:8f:08:36:f7:66:5a:ca:ea:7d:3d:b6:5b:80:
83:d8:d8:13:73:7a:14:53:c7:e8:1a:2b:c7:49:b5:8c:9b:64:
d4:10:ec:28:7f:d5:4c:fb:5e:c2:fe:70:4e:e3:53:5e:d7:77:
c3:ac:e9:9f:73:68:4e:d3:0d:4c:a1:e0:b1:8e:4c:e9:a0:07:
30:3c:39:35:0d:3f:47:2e:b1:91:fe:6c:19:03:e8:ee:f9:39:
1f:0e:12:95:bc:7d:2d:08:0c:eb:e5:96:0c:04:95:81:0f:a7:
69:16:de:db:de:90:2c:86:df:51:41:0c:36:80:cb:f5:fd:8d:
a5:13:46:e4:5b:66:2d:6e:12:af:0c:cb:b8:d3:a3:33:f2:0f:
65:8a:c9:a1:a5:9c:7f:ec:2a:85:be:56:3c:ef:1a:0d:22:fa:
20:ae:f6:b5:e4:18:65:b5:25:35:30:97:32:6c:d5:b5:23:ea:
ce:8d:fb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:26:36 2025 by rpki-client