Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Na-_VuLe4B9dCh0ByxAhdaI4Ck.roa
File: 0Na-_VuLe4B9dCh0ByxAhdaI4Ck.roa (raw, json)
Hash identifier: D08mvSYpDz8QvnX0n/RWI3iIet6LIgmHHPyNmUWP6jo=
Subject key identifier: D0:D6:BE:FD:5B:8B:7B:80:7D:74:28:74:07:2C:40:85:D6:88:E0:29
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183794ACBEBC268BC2CF11DF7F93B7DB429
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Na-_VuLe4B9dCh0ByxAhdaI4Ck.roa
Signing time: Mon 26 Sep 2022 10:14:48 +0000
ROA not before: Mon 26 Sep 2022 10:14:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:4a:cb:eb:c2:68:bc:2c:f1:1d:f7:f9:3b:7d:b4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 26 10:14:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0d6befd5b8b7b807d742874072c4085d688e029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:09:d9:e1:73:3b:24:b1:c1:d3:46:18:ff:ab:
ed:50:27:18:76:ec:88:d5:ef:ba:3c:bd:91:32:0e:
5b:a4:1b:ae:58:b2:34:09:1e:5b:a5:d7:94:ca:98:
86:d2:39:eb:0b:8f:52:79:cd:a7:ea:61:1d:c8:62:
87:e2:d4:f0:35:6b:49:c0:f0:c3:01:34:03:16:9f:
24:b7:f7:ec:b6:d6:e2:d4:f7:8c:e7:ce:5e:f9:b1:
f4:0f:7b:66:2d:8e:ce:77:69:e4:d4:9f:c6:20:92:
27:da:a2:c8:5a:a0:37:42:7a:bf:a6:1c:4a:fa:24:
c7:82:e0:43:cd:57:f3:55:89:17:d8:91:52:de:d3:
b4:25:41:6b:eb:6c:fa:ce:4a:90:86:38:27:2f:2e:
ee:04:fb:d4:d0:dd:8e:f1:f1:c2:70:8e:0b:48:c1:
8a:3a:eb:ac:7f:90:22:ca:6f:af:04:31:59:81:b0:
bb:d9:68:cc:04:f2:a4:90:6d:9b:5f:8e:f5:77:05:
a4:dc:f5:80:2c:9e:d5:da:2a:d4:e6:19:d6:12:ee:
c9:84:93:48:66:84:39:ad:bf:fd:66:8f:7e:05:39:
4d:26:dc:5c:de:6c:5c:b3:b8:15:38:d3:f0:f5:84:
e8:d0:57:36:88:6c:b8:30:2c:76:04:04:ca:60:11:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D6:BE:FD:5B:8B:7B:80:7D:74:28:74:07:2C:40:85:D6:88:E0:29
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Na-_VuLe4B9dCh0ByxAhdaI4Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:0d:39:46:fb:2f:d6:21:ec:0c:60:c6:99:32:09:76:21:5f:
91:17:36:65:c9:28:da:f7:e9:8c:74:82:7f:f1:8c:19:ad:0f:
ab:81:84:9f:4d:6b:84:b6:c9:26:c4:5b:c3:69:68:8f:7a:c4:
7c:07:d2:58:21:26:88:8c:da:b5:5d:52:17:7c:39:34:ab:ba:
c5:e7:19:a7:e1:2a:05:d8:fd:c2:36:7f:16:b4:af:2b:ac:4b:
b0:5b:5b:a0:8a:ef:3f:0c:6d:30:41:84:0a:73:73:a2:f4:cf:
f8:14:ed:b3:a6:a1:5e:a6:33:26:8c:a9:d1:bd:6c:b3:f5:ba:
f7:5e:a5:4d:6a:b0:4d:78:cf:c3:f9:f7:b9:37:7c:b1:fe:5f:
00:4b:63:ee:2d:40:95:32:86:9d:bd:ca:7a:59:7c:d2:05:ff:
2e:b0:38:69:6e:33:fd:b6:c7:3b:f8:20:b9:25:6c:d0:74:6c:
b9:1a:be:80:f4:ea:d1:57:71:13:5e:dd:11:4f:7d:f6:e8:41:
4a:3c:eb:14:a1:2b:c5:b9:a6:7b:41:0a:81:72:66:aa:40:77:
31:a2:1f:47:43:ae:2b:72:ab:e2:34:0b:0f:20:80:aa:5a:c0:
73:45:bb:3f:2d:d2:22:d0:56:d0:1a:e3:45:e2:33:d2:77:df:
84:42:0e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:47 2025 by rpki-client