Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9QxPAJk4XEdIMPD_-f71G89ilww.roa
File: 9QxPAJk4XEdIMPD_-f71G89ilww.roa (raw, json)
Hash identifier: RWZJmSp+5Vqj9mI+1xQ7Yt5BGSWsk3J+pUWEWaCJ4I8=
Subject key identifier: F5:0C:4F:00:99:38:5C:47:48:30:F0:FF:F9:FE:F5:1B:CF:62:97:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 832B47AC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9QxPAJk4XEdIMPD_-f71G89ilww.roa
Signing time: Wed 11 May 2022 20:16:02 +0000
ROA not before: Wed 11 May 2022 20:16:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200651692 (0x832b47ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 20:16:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f50c4f0099385c474830f0fff9fef51bcf62970c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0a:06:2c:0a:5b:87:7c:56:7f:c8:52:01:1a:
1b:5e:28:18:73:75:d6:23:81:1d:e2:e1:ab:e3:e3:
de:87:b1:1b:36:a3:90:af:44:0a:83:e9:ab:e6:c7:
b6:6d:9a:b6:d5:3a:9e:c3:e7:63:f7:cd:3f:bc:58:
1d:bd:34:3e:11:78:97:9e:7c:72:76:c5:bf:9b:5a:
fb:c3:8d:7e:ae:24:5f:6f:3c:f1:fe:6b:3d:05:bc:
ff:84:0d:5f:aa:cf:1e:16:8b:6d:54:44:b2:9b:0d:
0b:60:cb:48:cf:37:88:4d:55:b9:68:d3:03:ad:c9:
f0:51:9d:8e:7a:ab:40:53:5e:85:fb:90:fa:a2:72:
95:8f:36:f1:91:74:01:24:3c:00:47:74:31:eb:1d:
e0:99:3c:e2:f1:4f:b0:32:ba:c1:da:50:6f:1e:d2:
63:d7:4c:9f:e2:bf:6b:dd:d4:83:32:a6:b0:47:ad:
76:d7:63:9f:f5:5f:5b:35:e5:3f:f7:25:25:55:8b:
36:1d:f4:f9:9e:c1:e2:90:11:33:5e:d6:e0:2a:50:
a1:da:e0:93:9c:00:ee:01:29:74:24:82:5a:f2:a6:
77:38:20:31:ca:6b:67:fc:f8:0f:3e:0b:ab:d4:81:
25:db:8b:87:ae:1c:ea:96:46:68:5a:5b:09:f2:9e:
15:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0C:4F:00:99:38:5C:47:48:30:F0:FF:F9:FE:F5:1B:CF:62:97:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9QxPAJk4XEdIMPD_-f71G89ilww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:86:14:8d:0b:ae:c4:d9:2f:a6:5d:82:d2:3b:b7:bb:27:94:
9b:f7:6a:ab:24:73:d8:c4:9d:77:83:d9:02:e0:3d:e5:dd:27:
e2:4e:7e:e7:e4:99:55:ee:a0:97:a0:6d:97:7c:c6:65:6f:a2:
9f:1d:7a:23:55:66:21:65:6b:4f:3e:0c:be:91:7d:c2:6a:15:
6e:2f:29:64:8e:90:2f:75:6e:54:f0:be:69:da:f4:f1:6a:fc:
a2:b5:e7:5c:4a:76:d4:7d:5f:ff:da:9d:a0:cc:ce:68:b7:dc:
10:1e:84:fb:8b:37:10:0f:8a:9a:73:de:6d:92:5f:4a:9f:17:
c5:6b:16:da:e3:93:85:47:c0:fe:f7:df:c8:f0:8d:bb:c5:f8:
62:f7:f4:ac:52:63:a2:f3:92:fd:4a:f6:5c:c2:15:af:7b:e1:
f9:34:66:ce:f7:a1:00:4e:3e:ed:fe:77:b4:50:e5:a5:47:0b:
98:c7:45:90:cc:2a:8d:67:b8:66:81:d2:71:ca:57:eb:ad:c9:
a4:29:3a:b7:b9:0a:d5:87:f2:ee:31:9e:0f:f2:b9:12:56:08:
c0:8b:85:85:55:59:39:58:52:95:12:b2:67:b9:d8:1e:28:06:
29:8c:15:65:ec:15:7c:bb:74:ed:d0:3d:ae:8a:a6:73:4a:f8:
b0:da:b8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:27:03 2025 by rpki-client