Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Ln56hQy65bJLbuCMPWWqFNmy60.roa
File: 0Ln56hQy65bJLbuCMPWWqFNmy60.roa (raw, json)
Hash identifier: xirrg+uPw22fGh1vDsbblhqr9ypPmKQWXaooUTQnVnU=
Subject key identifier: D0:B9:F9:EA:14:32:EB:96:C9:2D:BB:82:30:F5:96:A8:53:66:CB:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 85D15042
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Ln56hQy65bJLbuCMPWWqFNmy60.roa
Signing time: Fri 20 May 2022 19:12:29 +0000
ROA not before: Fri 20 May 2022 19:12:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245087298 (0x85d15042)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 19:12:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0b9f9ea1432eb96c92dbb8230f596a85366cbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:b4:73:56:7c:ad:a0:54:d1:6c:da:67:df:
83:d3:47:5c:c5:db:df:73:40:8e:66:09:21:a0:0b:
75:16:1c:5a:da:1f:25:20:f2:12:e3:52:45:27:18:
e3:bf:2d:55:43:a5:a1:76:09:fa:ed:d8:de:57:11:
84:8c:ea:e7:21:74:94:57:ea:76:8d:5f:c9:75:f9:
ec:dc:0a:1c:08:b7:84:da:ab:aa:c3:0c:5e:1d:46:
3e:78:e7:f5:a1:83:40:ba:18:ca:07:13:88:42:a0:
02:b3:3f:74:ec:27:2a:b4:84:a8:b7:e1:2d:b1:32:
c2:81:ef:06:03:13:1b:58:13:37:1f:4c:9b:e8:ce:
31:d9:93:e9:d4:10:2b:e8:e5:f0:2b:1d:b6:51:cc:
17:62:2d:bb:47:71:ba:9d:dc:33:23:5c:7e:78:09:
77:3d:0b:45:97:76:5e:7a:98:b6:16:80:f6:88:cc:
f5:3f:3d:54:84:f9:b6:5b:b6:24:d9:7b:c1:48:9b:
f4:57:b8:51:6a:53:89:e8:e1:06:9d:88:c4:3b:dd:
de:71:0c:3f:09:3f:08:62:d5:bd:29:6f:0c:e3:82:
bf:1d:4e:aa:8b:1a:b6:8c:7b:47:58:29:c4:f6:fb:
5c:4f:d8:60:d3:7b:79:56:cf:b6:1e:7e:ee:8a:b5:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B9:F9:EA:14:32:EB:96:C9:2D:BB:82:30:F5:96:A8:53:66:CB:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Ln56hQy65bJLbuCMPWWqFNmy60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:bb:2b:8e:d0:12:f8:f9:f3:c9:1c:e5:6a:02:44:30:d2:23:
3f:b7:96:30:35:bb:aa:7c:2b:0f:ec:eb:63:00:50:17:c4:35:
6a:6c:2f:05:67:5d:e9:7e:3c:c4:2a:3f:10:60:2b:86:5a:02:
46:5a:a3:3d:6f:73:9f:7e:bb:12:ec:ee:2a:87:2a:85:c3:a1:
e0:80:ec:5e:dc:00:a1:cd:fa:f1:e5:76:7e:14:bd:44:52:57:
26:eb:f8:e1:84:d3:8a:9d:12:1c:10:1e:15:38:a1:51:14:83:
d4:2f:ab:45:6a:3c:47:e6:85:f9:f1:ad:3b:7a:a3:c1:66:18:
1e:37:01:41:ef:cb:8f:61:37:c3:8c:f9:67:3a:d9:7f:fa:39:
56:47:a9:dc:e1:40:8b:b9:ba:01:fd:8b:06:f3:10:e2:02:c1:
32:ed:16:6a:a5:d5:c2:b3:bc:34:44:ee:78:cd:e2:0a:de:c6:
c8:ae:c9:ca:03:e5:c4:d5:c0:e3:9a:ef:41:d3:d2:4d:5c:5c:
d2:0e:ca:ea:6b:ca:11:74:ca:c4:59:91:fb:b7:f1:f0:4b:23:
af:4a:0e:75:7d:a8:8d:a3:55:7e:d4:d4:4b:82:14:e9:c4:2b:
5a:1b:d9:b7:96:ab:2c:f9:62:be:ba:29:80:0e:f3:2d:76:15:
13:2f:83:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:00:50 2025 by rpki-client