Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l9GxliH7R_PKPcwE_VF4iIbWxFQ.roa
File: l9GxliH7R_PKPcwE_VF4iIbWxFQ.roa (raw, json)
Hash identifier: BDKn6VODSaGKN/IHO10B3RwfJ+dKC7CS8c1fto0F5WY=
Subject key identifier: 97:D1:B1:96:21:FB:47:F3:CA:3D:CC:04:FD:51:78:88:86:D6:C4:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018596DD88FAFFB607D4BD13D318834EEC5D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l9GxliH7R_PKPcwE_VF4iIbWxFQ.roa
Signing time: Mon 09 Jan 2023 14:09:39 +0000
ROA not before: Mon 09 Jan 2023 14:09:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:dd:88:fa:ff:b6:07:d4:bd:13:d3:18:83:4e:ec:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 9 14:09:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97d1b19621fb47f3ca3dcc04fd51788886d6c454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:e0:6b:47:45:cb:3c:06:82:79:9b:33:f5:
47:29:b2:84:c8:ac:3d:4c:e5:93:d0:a7:03:c4:58:
0e:55:7a:a6:ec:5c:6d:f1:f8:01:f1:10:63:91:ec:
f4:7f:17:bc:9d:bb:a2:36:67:9a:05:dd:4b:1c:76:
cc:66:8d:50:af:d7:5b:b1:65:de:ce:9c:20:de:f2:
14:a7:1d:2c:b6:27:5a:c8:cb:9e:ea:cd:2e:cf:f0:
b9:be:ef:42:ee:48:c1:bb:c8:7c:fd:52:3f:1a:47:
86:0f:a2:0e:01:dd:cb:c1:1d:93:d5:46:17:be:90:
6d:2d:71:9c:68:46:0b:13:5b:90:bb:3d:d2:ae:5c:
4e:0a:8e:7e:22:91:b1:01:b5:c2:37:88:e9:ca:82:
c4:8e:e5:1a:52:8e:f3:04:23:da:c5:9c:c2:1a:3c:
57:32:7f:cc:28:7c:89:5c:d3:2f:6e:df:20:e6:9b:
28:53:d5:d1:cd:22:83:54:15:81:b8:96:c2:22:e5:
ca:e3:fc:af:cb:57:b7:fc:76:d1:00:ef:ef:a1:2f:
4d:18:c9:99:85:83:d2:14:28:a1:95:41:ca:87:e4:
72:61:3f:3f:8b:24:03:70:d8:3e:6c:60:72:33:a1:
c9:71:40:4a:fa:17:22:21:cf:e1:f3:75:ef:3f:5e:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D1:B1:96:21:FB:47:F3:CA:3D:CC:04:FD:51:78:88:86:D6:C4:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l9GxliH7R_PKPcwE_VF4iIbWxFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:9b:37:d4:c6:77:f3:fb:72:b8:68:6d:d2:c1:b0:d8:8b:7f:
44:82:e8:5f:c3:72:20:74:e6:c4:52:fc:15:e8:0d:23:67:15:
4b:35:f3:26:80:30:15:27:a5:84:65:d9:58:1a:af:34:ab:c6:
e6:ec:71:98:ff:32:41:45:b8:b6:61:27:a6:70:d2:bb:d6:c2:
12:0c:e3:9d:1f:27:08:2b:3d:3f:d7:2c:1e:a7:56:9a:bb:d4:
04:84:52:5b:e1:11:87:8e:5e:f9:e3:63:cf:bc:27:84:5c:ac:
ac:a7:87:dc:23:0f:fc:ef:3b:f3:07:8c:ee:e5:09:f9:af:09:
3e:d2:09:d5:30:e4:44:41:58:12:77:ec:41:41:90:29:25:64:
5e:5b:55:4c:62:ab:df:34:88:df:a8:52:e8:ef:69:0f:60:75:
ee:b6:b6:f7:aa:28:01:ba:0a:3a:e5:92:4a:25:5d:c9:83:d9:
c1:d9:f4:c8:60:d7:0d:f2:c3:a0:73:dc:ff:8d:e6:ec:c9:47:
e1:76:46:79:aa:29:ab:80:80:30:fc:e1:ed:3f:ae:92:39:84:
22:fc:29:bf:04:50:8a:25:5e:db:74:8c:ae:85:7e:7d:c4:b2:
02:6c:cf:90:f0:5d:1b:03:f3:9d:65:be:a5:9e:03:4c:35:f9:
02:4f:d2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:37:06 2025 by rpki-client