Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0THX1ftzSE1o8o6_e9NvEwbhtmY.roa
File: 0THX1ftzSE1o8o6_e9NvEwbhtmY.roa (raw, json)
Hash identifier: ZKHUyjniws6704KVrj5Ajo6uWQB6b6WF2QDOo5EoLbo=
Subject key identifier: D1:31:D7:D5:FB:73:48:4D:68:F2:8E:BF:7B:D3:6F:13:06:E1:B6:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A270BA60725B29D1A691D86F24C343238
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0THX1ftzSE1o8o6_e9NvEwbhtmY.roa
Signing time: Thu 24 Aug 2023 10:16:29 +0000
ROA not before: Thu 24 Aug 2023 10:16:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:27:0b:a6:07:25:b2:9d:1a:69:1d:86:f2:4c:34:32:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 10:16:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d131d7d5fb73484d68f28ebf7bd36f1306e1b666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:2a:3d:42:7a:85:fa:cc:67:7a:80:a9:5c:
fa:ad:c0:7c:9d:31:48:84:2a:e2:4d:d5:7b:bd:be:
33:9c:eb:ef:90:1d:bb:f9:82:01:2a:11:9c:b9:07:
2e:fd:30:4c:59:c5:12:9b:87:5b:1d:a0:68:c5:d4:
9c:1d:b9:38:85:22:5e:93:73:fc:c7:cb:e9:d5:81:
1a:e4:70:f1:59:ea:0a:5d:5d:3b:3b:11:14:ad:5b:
f1:55:16:6b:41:7e:4f:a1:ad:d0:ed:ff:4e:cf:57:
27:f5:39:01:d4:09:c7:0e:ee:4d:06:81:37:22:7f:
0b:e9:62:19:52:8f:ba:36:71:d4:5d:9e:16:cc:69:
45:07:3a:80:00:0c:15:15:48:1d:98:eb:f5:b9:9b:
d3:96:7d:9c:fb:eb:1b:9e:08:b9:1d:12:48:e4:2a:
bc:5e:a0:af:71:f5:07:02:10:a7:8d:4a:c4:64:b0:
46:82:eb:64:a5:d8:d5:63:7b:da:5e:74:ea:bc:61:
33:0d:04:3c:6e:f4:69:83:58:05:bd:3a:88:38:a4:
eb:ce:41:0d:aa:8b:6e:3a:1c:1f:6d:73:0b:4e:b7:
73:b7:0c:7b:47:74:0c:50:a0:5b:ba:1c:2e:d0:d6:
e3:49:d9:a2:53:4b:1b:44:ee:0d:d7:ab:e4:77:bd:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:D7:D5:FB:73:48:4D:68:F2:8E:BF:7B:D3:6F:13:06:E1:B6:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0THX1ftzSE1o8o6_e9NvEwbhtmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:d2:db:8a:df:52:5f:3c:95:76:ac:93:81:bd:64:eb:e3:fb:
6d:06:2c:5f:76:58:12:9f:31:32:96:5d:90:6e:82:89:2d:0a:
85:05:97:3e:fa:1d:52:e5:ef:94:9a:8d:4a:a1:ef:40:4e:27:
5d:ce:de:91:b8:d9:2a:63:ff:ce:19:17:be:03:5e:8e:3d:37:
16:0f:b7:22:6a:0c:2f:a4:47:04:b6:a6:69:e0:6e:f4:1d:34:
d3:e1:24:34:56:8e:b2:2f:67:01:5d:45:18:c7:ad:59:dd:74:
b2:68:22:4c:5f:1d:2c:15:36:37:e1:72:25:04:2f:5b:b7:91:
eb:d3:68:73:b0:e4:46:80:d6:76:b1:ee:df:d8:6a:e6:b9:8a:
23:94:3f:6e:03:65:eb:a4:1b:13:89:7e:68:c7:7c:6b:6d:3f:
df:80:77:7d:c9:42:bf:07:f4:3c:f1:0d:aa:74:28:52:9a:02:
8d:58:62:9d:26:ac:0c:66:c5:e7:af:50:0c:33:9d:bc:71:91:
9e:41:3b:e9:5d:de:ba:a9:14:a2:46:27:7f:b3:68:0b:c4:b9:
83:67:17:ea:34:c1:18:ee:f4:91:1e:3f:d0:14:b1:fd:dd:c7:
c1:d1:e3:d1:8e:93:ab:09:77:8c:be:35:02:fe:ed:c7:b5:57:
ca:61:a8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:33:06 2025 by rpki-client