Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9dTKzbnRuq3UHVZOhNYfpY_fo8k.roa
File: 9dTKzbnRuq3UHVZOhNYfpY_fo8k.roa (raw, json)
Hash identifier: 0MAlVC+3MtgrDt9Dbxo20+kUzeRhRP93gtnya9+2fCQ=
Subject key identifier: F5:D4:CA:CD:B9:D1:BA:AD:D4:1D:56:4E:84:D6:1F:A5:8F:DF:A3:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01826445A9889E3CA42299BD29D60AE44C10
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9dTKzbnRuq3UHVZOhNYfpY_fo8k.roa
Signing time: Wed 03 Aug 2022 15:14:23 +0000
ROA not before: Wed 03 Aug 2022 15:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:45:a9:88:9e:3c:a4:22:99:bd:29:d6:0a:e4:4c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 15:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5d4cacdb9d1baadd41d564e84d61fa58fdfa3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:58:06:54:33:08:3c:c8:47:49:c9:59:49:ab:
18:f0:b7:b7:f3:6a:25:c8:8a:39:0e:4e:3e:c6:f9:
c7:b7:14:30:fe:da:17:3b:79:37:68:b1:75:05:c4:
2b:c4:62:d5:9f:22:b6:4f:c5:81:e7:6f:6a:6f:cc:
64:34:b0:e6:91:a0:24:08:de:a5:51:ba:39:82:49:
93:1d:89:b3:d5:3f:e8:89:f3:dd:ff:9f:ac:f6:6e:
c7:48:48:9e:c8:74:60:7e:8b:a6:2a:98:e9:47:a8:
62:65:b1:77:1f:40:31:7b:d6:44:38:93:0e:c1:25:
24:cd:3d:48:ae:78:81:2e:0e:b6:ac:0b:d6:09:62:
72:bd:ee:0b:4a:fe:f6:b6:8a:54:7d:2e:eb:c4:c4:
8d:8f:7e:7e:ad:3f:1e:5f:1f:ea:9a:f2:46:e8:97:
65:39:e6:9b:e3:42:08:1f:56:c2:73:e8:46:02:7e:
08:f4:66:d5:24:2a:f7:1e:dd:b5:59:98:75:7e:63:
73:90:87:41:cf:56:78:a8:a2:da:a6:be:a7:89:6e:
bc:a7:3b:38:55:55:72:4b:21:bd:d8:11:67:1d:18:
3e:26:bb:83:43:7b:d4:cc:42:25:66:ad:00:22:9a:
98:81:cf:c2:d4:ce:a3:98:10:d8:18:1a:79:da:b6:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D4:CA:CD:B9:D1:BA:AD:D4:1D:56:4E:84:D6:1F:A5:8F:DF:A3:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9dTKzbnRuq3UHVZOhNYfpY_fo8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:39:9e:53:b9:42:90:67:d4:20:93:3b:96:ca:db:b3:ef:c0:
3d:ed:62:97:e4:c4:6e:7a:44:06:3a:0a:f1:75:d3:60:6e:e8:
2a:0d:23:18:5f:d7:91:fa:cf:ab:d1:2d:e5:a8:dd:27:93:7f:
ea:51:c3:4c:14:d8:62:8b:02:37:52:e2:48:37:59:66:d4:62:
97:99:07:60:b8:c4:28:f9:59:08:c4:ea:f5:1b:50:92:a7:c1:
b1:80:0d:cb:e5:b6:0d:8b:f9:48:ff:b2:b9:f0:ed:47:58:7c:
14:8d:1a:7d:d8:0a:8e:c9:fc:e1:d8:14:bd:a2:33:b1:75:42:
23:db:a6:95:27:be:ea:07:a2:49:68:2e:41:49:61:80:65:04:
00:7e:de:4b:be:0e:57:55:88:9f:fa:42:db:c5:d1:e7:e0:36:
a6:fc:3a:68:cf:47:52:a0:11:83:90:72:bc:89:cb:e1:09:3a:
ce:6b:01:d3:b7:5e:2d:01:ca:7c:8f:1a:35:f2:43:37:1d:9e:
03:70:ba:21:68:be:e5:54:e9:61:59:57:1e:a3:c1:7c:e1:6c:
5c:2a:30:cd:1f:f2:25:78:f1:5c:1b:88:36:5c:8f:55:e9:4c:
42:a0:4b:7b:a9:a8:70:e5:47:4d:f8:96:cf:60:57:1c:cc:2c:
77:48:10:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:59:48 2025 by rpki-client