Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F9f7BhBBZH8F0tAwgvGzoHgJxJs.roa
File: F9f7BhBBZH8F0tAwgvGzoHgJxJs.roa (raw, json)
Hash identifier: NqgJLQBQPCDtlXcq4iJ2Ayq4FOQyPmnWKqhdd/pGZoc=
Subject key identifier: 17:D7:FB:06:10:41:64:7F:05:D2:D0:30:82:F1:B3:A0:78:09:C4:9B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018707BD6D8F6C0058EA3DA6E69C9DD70686
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F9f7BhBBZH8F0tAwgvGzoHgJxJs.roa
Signing time: Wed 22 Mar 2023 05:14:27 +0000
ROA not before: Wed 22 Mar 2023 05:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:07:bd:6d:8f:6c:00:58:ea:3d:a6:e6:9c:9d:d7:06:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 05:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17d7fb061041647f05d2d03082f1b3a07809c49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:bf:5f:c7:f3:42:17:14:9b:8f:56:23:29:
53:3e:6d:d5:4a:40:66:50:52:93:4e:3a:16:a3:01:
4c:31:f0:b6:59:51:3b:be:ec:75:1e:77:35:42:f5:
2e:4d:53:25:5e:ba:58:f1:dd:ae:82:17:2b:27:88:
e9:52:2c:b7:6f:96:8f:d6:e1:a1:48:7a:28:73:73:
44:6d:a5:d1:90:21:64:b8:87:df:74:84:5c:ba:9d:
e3:56:26:b7:06:e7:e5:57:53:65:bb:af:db:f2:64:
c7:60:cd:2e:00:ca:c1:93:51:20:71:25:52:8b:b2:
4a:2b:25:68:ad:3e:28:7b:df:3c:01:b2:d6:9e:e7:
db:eb:36:bc:b7:59:e8:9f:ac:74:cb:01:69:f7:8d:
f5:71:6c:1e:60:50:f7:fb:01:8e:86:77:12:9f:7e:
d1:98:75:82:16:d0:05:d6:aa:d4:98:15:83:60:f3:
12:17:ce:d5:1d:31:c7:be:5e:db:bd:ef:f8:94:27:
76:e9:be:35:3c:b7:c2:76:73:6e:6f:f3:b0:44:7b:
5d:79:77:5e:47:73:c2:9b:f6:65:21:e4:09:01:90:
ff:a2:32:76:e9:2e:5c:ae:2e:f3:af:aa:95:8c:ec:
5c:13:50:da:97:3a:6f:c1:53:05:4d:f0:c8:94:a9:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D7:FB:06:10:41:64:7F:05:D2:D0:30:82:F1:B3:A0:78:09:C4:9B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F9f7BhBBZH8F0tAwgvGzoHgJxJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:0a:ff:b9:c0:8c:d3:c2:7a:cb:bb:d2:87:e2:bf:a5:20:b6:
61:b2:ae:12:92:69:59:19:ae:1e:44:4b:97:be:d3:57:9c:7e:
00:13:a9:88:a6:d3:a8:98:2a:14:7b:80:e3:4a:18:7c:da:ad:
48:0a:26:b5:5d:4b:00:7a:ee:36:ed:7d:e8:17:af:de:5c:e4:
3f:9c:7f:d8:ff:e5:c1:d2:0e:21:0d:d4:27:2b:e7:8f:9d:32:
49:0f:3a:e3:62:d3:25:60:85:47:47:b2:14:e8:c4:aa:df:a4:
4c:7e:a7:bb:16:34:1b:2f:c7:97:3f:f9:d1:ce:4f:8c:f3:49:
1d:53:fa:22:a4:36:bc:86:8d:3b:51:99:b8:df:1d:ac:cd:88:
7d:96:1b:15:93:62:a6:62:60:a2:e0:07:5f:04:ac:7c:6e:ff:
28:a7:be:74:b9:0d:56:f9:b9:46:9a:d2:92:9d:32:08:9d:9c:
72:e9:d9:52:27:a8:71:30:00:9a:ba:52:ad:cd:b4:0d:60:a6:
a8:43:6a:ba:73:a2:47:01:1d:fa:d3:17:12:c8:14:be:05:90:
ea:6d:ae:63:fa:a0:ca:7e:79:7d:7a:fe:de:c0:f9:36:0f:0c:
64:d9:64:23:52:d6:3c:29:96:37:d7:67:f0:35:40:a7:c5:87:
03:2a:eb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:06:50 2025 by rpki-client