Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9cbQGqrfh9nD2qTNxnGt3edEJH8.roa
File: 9cbQGqrfh9nD2qTNxnGt3edEJH8.roa (raw, json)
Hash identifier: zwte0M2+E8fTMz/hME+32a4Zp1WIhYvRBonCeZn2u1M=
Subject key identifier: F5:C6:D0:1A:AA:DF:87:D9:C3:DA:A4:CD:C6:71:AD:DD:E7:44:24:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A42819A6A58CCB7628D783B6D1F8ABC35
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9cbQGqrfh9nD2qTNxnGt3edEJH8.roa
Signing time: Tue 29 Aug 2023 18:15:04 +0000
ROA not before: Tue 29 Aug 2023 18:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:42:81:9a:6a:58:cc:b7:62:8d:78:3b:6d:1f:8a:bc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 18:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5c6d01aaadf87d9c3daa4cdc671addde744247f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:d1:40:90:ec:41:1c:ea:5c:dd:ae:57:08:
9c:37:4f:28:72:4f:f7:c1:01:17:8a:55:2a:bc:b7:
37:ff:c3:13:23:7c:6d:cd:1a:cb:4e:27:a0:69:94:
8a:5d:77:e8:33:c5:b7:ce:1b:6b:2f:1e:a6:6a:00:
7f:6c:e0:c8:af:07:e6:8f:65:ea:a3:24:76:6d:35:
d3:38:27:de:9c:dd:7d:22:65:62:bf:64:56:f2:7c:
84:87:2d:d9:c1:37:4c:70:74:a3:31:ec:21:8a:e9:
68:75:a0:ab:84:c2:a1:c6:5a:f4:6f:75:8c:67:41:
70:18:7e:67:da:82:f3:c2:38:24:75:9c:5f:b6:93:
ba:27:23:f9:9a:b1:5c:1f:d2:9c:39:93:8e:93:43:
ce:e3:de:77:e2:0c:e6:bd:4e:02:1a:de:41:39:b6:
d3:e0:3d:90:8c:9a:07:e0:88:1c:ce:f6:9b:5a:63:
80:8d:1d:59:0a:11:be:9b:7f:54:50:93:24:a8:be:
2e:cf:fb:80:c8:03:09:40:2a:29:a7:34:36:4b:66:
c4:2b:f4:d1:b5:23:a8:f8:f4:6e:c4:c6:a1:5a:38:
67:dd:4e:71:93:f2:a3:ea:de:8c:76:57:a9:65:26:
ea:c8:1c:e6:d2:e1:e5:f9:29:65:da:6e:8f:7f:bd:
62:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C6:D0:1A:AA:DF:87:D9:C3:DA:A4:CD:C6:71:AD:DD:E7:44:24:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9cbQGqrfh9nD2qTNxnGt3edEJH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:64:ba:62:6a:b3:b6:bc:7d:18:56:6f:26:f7:88:58:10:5c:
91:6b:c9:6b:de:f8:44:21:89:10:cb:96:9e:cd:c4:da:f0:7b:
a4:35:e5:64:46:4d:10:26:7c:88:e1:13:1e:db:92:e7:28:b2:
bb:4f:2d:d2:ed:6a:d7:02:a8:db:fc:63:37:75:97:fd:04:b6:
f2:b1:91:aa:cb:7c:5b:23:5e:ef:c8:f1:ad:e8:7d:09:96:d4:
ad:45:4c:b2:32:a6:05:4a:72:75:38:71:7d:ea:01:90:a8:7e:
df:3d:49:af:ba:fb:bd:43:e6:4d:82:ca:e7:51:09:89:a9:c6:
67:2f:00:ae:06:21:ff:45:a8:4c:18:6c:b4:7b:63:d1:eb:c2:
7d:0e:82:18:7f:15:8a:0c:69:04:d7:3d:5e:35:8d:ee:7c:a7:
51:41:c0:17:98:9f:f7:14:22:c0:20:94:47:4e:6d:55:5d:c6:
0b:7c:97:20:41:14:d8:1a:d2:5c:69:a7:a2:4b:2d:3c:44:4c:
a3:64:8b:8f:92:63:d9:20:bb:dc:81:56:19:62:6f:ee:83:85:
bc:c0:ad:bb:fe:52:35:db:7c:80:72:39:39:2e:2f:84:e7:72:
d3:57:4a:1f:c4:cd:6d:c2:2b:b5:45:12:88:9b:36:99:ca:08:
6a:a3:66:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:38:13 2025 by rpki-client