Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9WrAx8o1sZu8HVN_GUFhUZijp_c.roa
File: 9WrAx8o1sZu8HVN_GUFhUZijp_c.roa (raw, json)
Hash identifier: cHEC4LBcoOGitkUz3vFrwGooQaQo2hlAeGrFnlSxjaY=
Subject key identifier: F5:6A:C0:C7:CA:35:B1:9B:BC:1D:53:7F:19:41:61:51:98:A3:A7:F7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2A3967DF0182BBF59745DC9792E6A0DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9WrAx8o1sZu8HVN_GUFhUZijp_c.roa
Signing time: Fri 25 Aug 2023 01:05:19 +0000
ROA not before: Fri 25 Aug 2023 01:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:2a38:7fc4/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2a:39:67:df:01:82:bb:f5:97:45:dc:97:92:e6:a0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 01:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f56ac0c7ca35b19bbc1d537f1941615198a3a7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:a9:f1:3a:a0:e2:7b:02:66:ef:5c:dc:46:
e6:50:03:4c:b5:13:20:33:7d:38:a6:0b:06:09:ec:
e6:c7:84:8e:e5:84:81:48:f9:b2:9a:21:4a:40:2b:
db:f5:8c:19:5a:de:6f:cf:03:84:34:4a:34:88:91:
a9:42:62:e8:17:4a:3f:f8:9a:2a:a3:64:11:29:ab:
e8:a1:bc:4b:27:42:67:fe:05:42:a8:65:45:de:21:
72:21:d5:3d:96:d0:cf:bc:49:b1:be:e8:12:de:8e:
49:a0:23:35:05:bb:df:29:26:3f:cf:fe:23:64:a0:
fc:de:a2:3a:83:75:a4:c3:43:1e:13:4c:f2:63:f5:
2c:f2:01:6a:76:71:84:37:99:cd:0e:11:de:2e:fa:
34:09:48:48:23:ee:f2:e2:60:2b:92:f3:56:58:66:
f9:e5:af:07:c8:dc:d5:2a:bd:3b:c7:e5:f4:53:f3:
53:67:d7:b7:eb:5e:69:eb:2d:f6:6e:56:17:5d:2d:
a4:4d:57:97:0a:06:7d:c7:e6:49:71:e7:d3:8a:d1:
5d:43:5d:73:0a:2c:35:f8:46:1f:07:5a:02:bd:06:
de:6c:5e:93:f1:76:bb:83:4d:99:14:12:b2:85:cb:
6f:26:a1:6e:ba:05:de:f0:3d:5f:4c:65:c7:26:dc:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6A:C0:C7:CA:35:B1:9B:BC:1D:53:7F:19:41:61:51:98:A3:A7:F7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9WrAx8o1sZu8HVN_GUFhUZijp_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:e0:4b:06:4f:0a:dd:7c:33:d0:17:a0:81:34:98:c6:fd:66:
69:3d:6f:2b:ef:92:27:34:d3:32:e6:0d:86:e5:f3:6e:4d:98:
29:67:ed:80:d9:1b:c5:a6:36:79:15:43:71:2f:c1:7b:e7:14:
e2:a7:25:be:50:75:61:5d:51:f9:6b:a3:49:51:22:0f:ec:05:
22:5a:72:7a:53:5b:36:d5:12:5d:b5:0a:07:24:82:4d:8e:51:
b8:cd:28:8a:69:27:e6:0b:30:3f:98:90:9a:c0:fd:50:7c:62:
10:ef:32:f3:8e:26:64:c2:44:75:c1:9e:ce:53:8e:e6:3a:b5:
a1:ac:63:21:c8:96:41:61:d7:b6:c6:d4:c9:a7:63:d7:c6:8c:
b6:9c:54:53:11:1f:bf:ca:47:63:85:1a:fd:6d:45:c9:d3:c1:
87:fd:cf:5c:42:11:7d:78:ea:87:e8:b6:be:71:3f:9c:a1:df:
1d:e9:64:67:7b:03:9e:7d:3e:50:60:2a:39:1e:47:89:64:f3:
10:d1:07:b2:c9:e1:6d:f3:5c:74:8a:b9:95:9d:6b:4d:a9:43:
74:dd:35:32:65:ab:29:fa:ec:b6:79:1c:d8:4d:0e:b2:99:f1:
15:f9:bd:ee:d0:ba:4d:b3:3b:a0:e3:b1:87:0f:06:e6:36:82:
c5:a9:37:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:37 2025 by rpki-client