Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Ulsx7VyeBELvQW-1horaAz1Hoc.roa
File: 0Ulsx7VyeBELvQW-1horaAz1Hoc.roa (raw, json)
Hash identifier: 7Xz8FxG4/yOrifwhi8jcDTsF1k7jAhPOJAhT18WPX8s=
Subject key identifier: D1:49:6C:C7:B5:72:78:11:0B:BD:05:BE:D6:1A:2B:68:0C:F5:1E:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189ABDC47B03D0E52BCF248459B76DB2D12
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Ulsx7VyeBELvQW-1horaAz1Hoc.roa
Signing time: Mon 31 Jul 2023 12:11:27 +0000
ROA not before: Mon 31 Jul 2023 12:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:dc:47:b0:3d:0e:52:bc:f2:48:45:9b:76:db:2d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 12:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1496cc7b57278110bbd05bed61a2b680cf51e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:0a:4e:90:8f:05:ca:14:ca:7e:c9:93:be:
10:f6:c2:e3:9b:27:f8:c6:07:7b:fd:3b:3d:5c:97:
0f:3b:72:61:08:74:2e:6f:63:f0:e2:64:83:73:9d:
da:08:a3:85:93:03:37:42:da:ba:1c:9f:cf:fb:bc:
95:d7:16:d1:0a:e6:2c:b8:d7:40:fa:3f:00:07:17:
56:eb:20:8f:0b:96:86:5c:8c:03:6a:25:81:58:00:
c4:37:6e:08:e5:d6:f4:c0:31:47:57:b5:6c:1a:94:
4d:4e:97:71:9f:9c:74:97:69:6d:a0:10:2d:81:c1:
78:35:18:6a:d4:ec:f2:c0:f0:89:cd:fc:82:7b:af:
2a:e1:9e:05:d9:d9:3f:c8:68:8c:70:dc:20:86:49:
47:a5:74:55:26:c7:3f:15:e3:88:a7:12:e5:16:1a:
44:ec:a3:8e:25:65:46:b1:f9:b0:6d:2b:c6:16:4d:
c2:a8:0b:ed:54:d2:cf:3e:0d:a9:8c:ce:7a:43:42:
a0:0a:27:a5:77:2b:23:e6:dd:ee:79:91:64:50:78:
f5:43:29:36:3e:dd:21:72:5c:36:a3:93:5e:fd:30:
3b:03:5e:10:d9:6a:cc:e8:91:6d:d5:34:69:41:a6:
71:5b:67:98:5b:f0:bb:c9:32:00:37:74:8c:9b:bd:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:49:6C:C7:B5:72:78:11:0B:BD:05:BE:D6:1A:2B:68:0C:F5:1E:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0Ulsx7VyeBELvQW-1horaAz1Hoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:b1:b7:35:d1:c0:c5:40:4e:fb:63:69:0c:09:de:29:d1:e0:
94:60:cb:72:ab:d9:ca:bb:b1:52:ec:f9:5d:5c:d9:ec:70:f5:
6e:db:22:de:ca:cf:97:f8:5c:99:99:10:e0:67:2b:c4:cd:2d:
6d:f2:1e:8c:9f:5a:4f:52:1e:83:e1:90:d1:fb:2c:eb:3c:69:
b0:01:4b:ed:9a:a8:3a:87:d7:7a:4d:3d:cb:d7:d2:32:1e:37:
b9:1f:32:53:91:e5:b1:cd:4a:09:53:f1:64:82:66:d6:7a:70:
2c:51:ba:f4:6e:98:fa:c5:97:2e:f7:d8:f8:79:33:03:29:c2:
da:c6:9f:0c:e8:19:69:9b:5c:96:07:90:f9:25:66:f5:1c:98:
6b:e1:c2:6d:b6:8f:e2:a9:26:bc:3f:1e:00:fe:0f:69:f3:af:
e1:12:b9:03:72:58:bc:da:80:28:9d:ca:97:53:e7:a5:12:8b:
5b:da:91:09:ee:c4:3c:1a:e5:28:35:70:ea:fc:d8:c9:e3:0c:
f3:bc:f2:21:e4:c3:3c:c2:c7:34:54:e9:9c:c8:c8:d0:07:91:
12:0e:c4:90:31:b5:ba:45:9d:4d:3f:f7:37:58:e9:d1:28:8c:
01:8a:df:11:11:46:44:ed:28:01:d6:45:06:87:53:19:f7:f5:
7e:1c:a2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:23:19 2025 by rpki-client