Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9WOSShmMjXsBMu1G4WZRXIlgUgU.roa
File: 9WOSShmMjXsBMu1G4WZRXIlgUgU.roa (raw, json)
Hash identifier: 8CuVK+utkIeIBpf3kBz4U5XFmg9Vqn/uYYr2AehIw/I=
Subject key identifier: F5:63:92:4A:19:8C:8D:7B:01:32:ED:46:E1:66:51:5C:89:60:52:05
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185B5C387C4298C710BFC0796D173DC87E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9WOSShmMjXsBMu1G4WZRXIlgUgU.roa
Signing time: Sun 15 Jan 2023 14:09:28 +0000
ROA not before: Sun 15 Jan 2023 14:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b5:c3:87:c4:29:8c:71:0b:fc:07:96:d1:73:dc:87:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 15 14:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f563924a198c8d7b0132ed46e166515c89605205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:06:8f:ba:7d:d9:af:4d:5d:4a:e7:8f:72:1d:
82:d7:a0:d0:9f:5a:5e:f7:79:b2:38:2f:57:0c:9e:
59:55:5c:b2:cd:ab:2f:a0:c7:c6:15:6b:c8:72:0c:
58:3d:87:df:30:75:1c:5e:c1:c8:e0:2b:8c:e9:61:
19:ec:1b:8b:bc:4d:ff:1f:9e:ce:a0:10:2a:67:88:
c6:27:bb:17:82:39:c4:36:ff:9f:dc:bb:60:38:eb:
5d:e9:3b:ed:b6:61:90:f9:f3:93:61:15:b4:42:b0:
0d:a2:26:26:31:5c:76:ef:86:b6:8c:7b:09:cc:3a:
e3:de:e4:25:be:06:68:cf:85:f4:d0:b3:4d:81:59:
0b:e9:da:64:1a:62:1e:6a:5e:87:68:28:67:38:44:
b2:7d:ab:df:d4:7f:bb:c3:59:9d:c3:1a:21:93:f8:
8d:0a:ef:b6:91:87:68:06:7e:a3:a2:47:99:d3:4e:
c2:ba:bd:b5:3d:79:2d:ab:56:aa:b2:8a:ac:2d:5b:
72:e1:c7:0b:a3:66:58:e6:e0:a6:f6:0b:db:e7:1c:
47:63:53:43:b8:25:96:e3:9c:4b:d5:be:7e:87:ca:
24:4a:ee:6e:5c:bd:25:df:08:66:01:75:ee:35:22:
66:0a:fe:6d:94:d8:e7:18:de:ed:3a:b9:ef:73:56:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:63:92:4A:19:8C:8D:7B:01:32:ED:46:E1:66:51:5C:89:60:52:05
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9WOSShmMjXsBMu1G4WZRXIlgUgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:86:92:f5:3f:73:30:90:d5:1a:41:c2:64:2d:82:80:8d:36:
e9:c3:dc:f9:9d:c8:10:4f:95:22:20:f8:1a:af:58:06:12:36:
aa:c9:f4:33:e5:9a:22:e6:e0:08:c7:c5:8b:53:df:44:c7:81:
56:f5:82:47:f1:9f:4b:6d:ce:0e:c9:fb:fe:ec:a0:40:5d:ef:
6e:b4:a9:74:19:a2:a1:de:e1:60:64:89:29:94:cf:9c:c2:f1:
8a:eb:21:bf:0f:a9:39:3a:14:e2:79:b1:b6:9a:1a:45:7c:6f:
45:c6:ee:10:b1:c9:f3:18:61:ac:54:f9:41:a4:23:e9:6c:70:
e8:08:92:04:73:04:e9:57:58:02:8e:31:b7:82:4a:a2:d4:d7:
68:9e:cc:81:65:9b:80:a9:bc:9d:56:7d:05:01:35:bf:11:2e:
6e:e2:02:18:14:18:5b:dd:10:68:60:55:33:e2:25:85:b0:c6:
ee:81:e6:e2:23:68:83:af:d0:3a:5b:96:3d:83:11:4c:13:16:
2b:7c:8b:9e:b6:aa:e9:f7:c1:bf:1e:94:8f:66:d0:16:c5:de:
9c:2b:d5:f5:09:03:b3:1d:38:e8:b4:66:e6:64:ce:97:63:ae:
96:b1:ed:96:1f:81:2f:ad:81:be:c9:39:4b:db:ca:2a:e8:ad:
f9:e0:53:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:15:00 2025 by rpki-client