Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/00CtE_ioSaJjUx_YSH8Pm18Cy7A.roa
File: 00CtE_ioSaJjUx_YSH8Pm18Cy7A.roa (raw, json)
Hash identifier: /afzKs5s8Av1LuZ/6fkSwkdvZNQJMvUnwN9vjjeKwYQ=
Subject key identifier: D3:40:AD:13:F8:A8:49:A2:63:53:1F:D8:48:7F:0F:9B:5F:02:CB:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B55AEE46ACFCF5B3B893436630FCFFA5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/00CtE_ioSaJjUx_YSH8Pm18Cy7A.roa
Signing time: Mon 06 Mar 2023 05:18:00 +0000
ROA not before: Mon 06 Mar 2023 05:18:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b5:5a:ee:46:ac:fc:f5:b3:b8:93:43:66:30:fc:ff:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 05:18:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d340ad13f8a849a263531fd8487f0f9b5f02cbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:3a:60:c1:34:98:82:ea:3a:4f:32:06:6c:
a1:02:fb:18:1c:c7:60:5c:1e:60:dc:ef:cc:7f:4e:
0d:63:dd:3a:4c:e2:43:c0:28:71:2c:f6:e6:11:17:
91:63:c3:bd:61:a9:4f:99:b9:1e:3b:e1:24:cd:24:
19:1a:3d:01:bd:8c:46:42:f1:36:46:f7:e3:57:40:
1b:b4:10:69:ae:b9:f2:86:47:02:d2:e0:51:66:1a:
d8:dc:ef:fb:7b:00:c5:bf:b1:4e:2f:2b:b6:38:7e:
2d:b2:fb:1e:a1:0d:e0:30:d9:ea:08:93:f8:ca:92:
8f:cd:9b:67:63:2a:71:11:0e:b4:63:1d:7b:93:c4:
16:29:28:fb:78:03:80:63:0f:a2:61:54:0f:db:1c:
6b:ec:52:d7:d5:85:80:6c:65:0b:1c:0c:5e:96:1b:
9c:0d:30:53:69:d2:74:b6:e4:f4:68:c8:b4:c7:42:
00:b8:95:dc:f8:7d:50:64:d3:ee:d5:dc:de:6e:81:
0a:b6:42:4d:c1:0f:5d:6e:3e:25:04:92:14:41:88:
9c:82:e5:bd:c7:64:5a:07:08:84:35:30:90:c6:c0:
d3:a7:38:e7:17:2c:75:bc:40:ce:aa:8c:6c:e0:8c:
f7:1c:4f:f2:a9:73:81:27:04:cc:d9:90:c8:44:08:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:40:AD:13:F8:A8:49:A2:63:53:1F:D8:48:7F:0F:9B:5F:02:CB:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/00CtE_ioSaJjUx_YSH8Pm18Cy7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:82:30:d4:8a:38:c0:b5:7e:ad:24:33:f7:4f:af:3a:76:4b:
bd:66:db:8b:73:c8:e3:26:b6:47:82:09:ae:80:72:94:ff:66:
78:82:6e:a4:7e:16:1e:0a:c3:87:9f:66:69:e0:c5:73:2b:3e:
79:17:eb:37:69:1d:c9:04:8a:03:15:dc:60:1b:ef:d4:c7:45:
d5:4b:bd:f2:9e:3f:4c:56:ca:63:21:44:6d:70:d4:53:20:3a:
42:00:68:7d:6f:99:b7:a2:46:96:55:59:8b:ac:1d:ba:91:f6:
96:df:e7:97:4b:8e:53:38:a5:91:f7:98:ee:80:58:13:a7:82:
f7:19:9b:bb:af:ea:12:78:5e:c0:ed:e6:1c:4a:a0:38:8e:df:
31:e6:2f:61:c9:15:d3:44:02:8f:9f:b1:f3:fd:fa:37:75:e8:
8c:92:0f:de:e6:9f:5d:76:53:c7:74:af:a8:52:97:b9:5b:70:
b3:93:01:d2:d2:4e:31:de:b4:0f:1b:68:3d:a6:9c:a0:8a:f6:
66:f5:1a:bd:67:7e:b7:57:97:c9:13:95:a4:b5:d2:05:cc:a9:
7d:db:a0:d2:7a:77:cd:20:84:e5:cc:b9:af:12:0e:d4:6c:a3:
48:a9:c9:ee:c6:47:50:a7:5c:fc:db:e3:20:c7:4a:0e:41:c4:
3f:cc:e2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:31:32 2025 by rpki-client