Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u9Sil73XJ1I8NoOt3pEnqSzDUbU.roa
File: u9Sil73XJ1I8NoOt3pEnqSzDUbU.roa (raw, json)
Hash identifier: s/QJYFr+QzLOEAKoJU/nflUSaCszKxudcRmm5ejA2qM=
Subject key identifier: BB:D4:A2:97:BD:D7:27:52:3C:36:83:AD:DE:91:27:A9:2C:C3:51:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6DB28200
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u9Sil73XJ1I8NoOt3pEnqSzDUbU.roa
Signing time: Fri 25 Feb 2022 21:20:25 +0000
ROA not before: Fri 25 Feb 2022 21:20:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840415232 (0x6db28200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 21:20:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bbd4a297bdd727523c3683adde9127a92cc351b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:96:2d:7f:91:49:61:ea:9a:4f:26:3f:c9:0b:
f3:7e:46:19:6a:f3:43:ea:c9:f6:c9:ce:64:25:40:
6b:f3:a1:a1:36:73:c7:f1:13:e0:6c:54:cd:cf:45:
fc:14:03:2f:00:b1:b4:8e:60:9e:85:05:19:72:55:
64:1d:1c:dd:0d:5a:d8:dc:62:75:3b:f5:57:b8:c9:
f4:d9:da:27:b5:80:f2:c8:ca:e4:5f:42:25:3e:5d:
d0:98:da:2f:24:eb:f0:0e:c4:76:ed:92:83:81:86:
22:4a:bd:62:02:34:35:4f:df:fa:e5:40:f8:41:cf:
5e:f0:35:a2:c1:6b:91:d2:68:1a:d7:11:8f:9f:22:
ca:1d:aa:56:9a:6f:8a:14:6d:00:ab:ef:e7:2f:12:
f2:39:01:0e:75:22:4d:86:7a:3a:87:79:71:36:36:
e0:fa:2f:9c:35:33:3a:79:90:f9:d6:1d:2e:f7:2b:
28:f2:9f:04:e5:f7:c4:4e:6b:dc:29:68:79:8d:0c:
21:4a:f5:93:9d:7c:b7:c4:aa:9e:c2:5f:1e:40:4b:
ad:fd:9e:a6:2d:e8:1d:71:35:d8:be:79:a5:7b:df:
54:23:5c:bd:ee:72:d2:47:dd:b4:e7:dd:b4:30:58:
4f:3c:19:b1:b6:35:88:b8:21:cc:12:cc:52:b9:a6:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D4:A2:97:BD:D7:27:52:3C:36:83:AD:DE:91:27:A9:2C:C3:51:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u9Sil73XJ1I8NoOt3pEnqSzDUbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:37:37:62:30:aa:94:70:03:ef:3c:18:34:87:26:01:37:ff:
46:81:ec:06:40:75:33:75:c4:25:2f:c6:1e:b6:1a:14:ea:bb:
a7:34:90:0b:b4:57:40:24:5b:cb:d7:d0:f7:b8:7c:3c:d4:37:
14:a1:a9:66:b3:9d:50:3e:8a:f2:ab:57:3f:25:39:c9:5b:c4:
c2:5c:b5:8c:d8:f0:f4:33:32:82:1f:20:b4:63:89:4d:73:0f:
2c:b7:bb:14:35:11:76:3b:2b:d4:53:a8:5c:db:59:6c:cd:56:
e2:1d:be:94:44:24:e4:f7:51:78:07:0f:1a:c6:5e:47:c9:38:
3b:35:e9:ba:a8:be:b1:37:13:c7:97:af:38:6a:d8:b3:48:46:
bd:a1:1a:1e:b9:47:5d:22:6a:29:88:47:00:b0:cc:24:f6:ce:
53:c3:5f:86:59:75:44:8c:8b:47:eb:d1:fc:ab:36:13:43:27:
05:1a:7e:0b:5c:16:be:db:98:a4:2a:c7:a5:67:21:4d:32:cb:
56:e2:64:5d:43:74:9e:b2:e5:8d:52:be:d9:2d:0d:1b:27:96:
02:b3:49:a9:d1:db:2c:da:3d:85:c2:d6:fc:f4:b7:08:b3:3b:
49:b1:38:c1:f0:14:a1:6e:b0:00:1c:7a:7e:01:18:fa:ae:b7:
fd:a1:79:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:31:42 2025 by rpki-client