Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0eN_8xwKLdCybtOs2vYq9XNjR94.roa
File: 0eN_8xwKLdCybtOs2vYq9XNjR94.roa (raw, json)
Hash identifier: w7wMXcZ3b8QTTr0lpSis+DaaMQ5CSAAn/A5HRd9lmCs=
Subject key identifier: D1:E3:7F:F3:1C:0A:2D:D0:B2:6E:D3:AC:DA:F6:2A:F5:73:63:47:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018951122A8CCA699B37F09A9A28D3A4D562
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0eN_8xwKLdCybtOs2vYq9XNjR94.roa
Signing time: Thu 13 Jul 2023 21:04:52 +0000
ROA not before: Thu 13 Jul 2023 21:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:189:5111:9ee6/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:51:12:2a:8c:ca:69:9b:37:f0:9a:9a:28:d3:a4:d5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 21:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1e37ff31c0a2dd0b26ed3acdaf62af5736347de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:1f:be:80:0b:c1:9e:b8:83:19:3f:17:a0:
46:56:f3:ad:1b:5e:56:0e:90:2f:3f:57:fd:66:67:
bc:a6:3f:dc:a8:dd:e1:1e:57:87:72:b7:40:55:e2:
69:d9:76:80:9c:c8:13:cc:ad:34:b2:cf:2a:ff:e7:
2f:de:5e:7d:f8:b5:11:84:03:9c:66:5b:26:c3:db:
51:79:21:79:5c:93:17:a1:e0:bc:fd:d8:53:4a:06:
41:30:58:57:b5:ca:f6:d0:10:d1:95:0b:4e:6b:e5:
b0:75:6d:ab:60:03:3f:f5:e0:03:ca:cf:8a:18:3f:
66:12:52:1b:cc:ac:66:db:35:da:5f:e0:48:3c:d1:
00:6e:60:d5:6f:4a:03:a0:7c:1f:d5:b1:d6:b1:c5:
3f:2a:92:35:5b:9a:fd:5a:5b:7e:1b:ec:ba:7e:9c:
29:0c:3a:72:a3:70:77:73:03:48:f5:12:fe:f5:a9:
fd:3f:ae:2f:48:55:d8:70:21:6c:ae:9a:1d:bb:7a:
84:4e:ad:3b:dd:51:43:16:d5:21:5a:1c:ff:1e:c2:
cd:2d:62:f8:a1:20:59:6e:ed:64:0e:45:15:a0:a7:
7f:f8:e6:f6:ff:24:8a:3c:72:3f:d3:b9:4c:07:7d:
ee:74:1e:90:bc:51:d8:c7:3b:2d:11:07:1f:9b:ae:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E3:7F:F3:1C:0A:2D:D0:B2:6E:D3:AC:DA:F6:2A:F5:73:63:47:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0eN_8xwKLdCybtOs2vYq9XNjR94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:49:d8:2d:98:82:6b:9b:9b:3f:a7:f2:51:31:4f:4a:5d:80:
0b:f6:de:51:c4:a6:09:47:28:96:93:90:db:09:99:51:50:8c:
13:57:76:b8:1a:f1:1c:5c:5e:72:e8:52:8f:41:1f:34:6a:18:
b4:96:1a:8e:4c:52:66:77:40:33:ab:92:3c:ac:98:e3:8c:8e:
0f:d0:39:6b:6e:d9:21:5e:62:b8:02:95:d4:b1:db:af:61:0e:
16:07:31:c0:c1:95:ef:c0:c8:1a:3d:97:29:a9:1c:5c:77:14:
1d:58:11:68:a6:15:dc:8d:2a:ea:62:b9:52:77:75:8a:d5:f9:
b5:80:83:7a:78:d1:e2:10:da:3f:f8:fc:22:87:c9:d1:80:0b:
a5:97:6e:72:3b:9f:fd:1e:12:58:63:c0:07:7d:3a:10:12:e1:
c4:39:ae:2b:c8:de:4e:08:37:78:4c:c1:a1:7d:82:47:72:99:
47:3c:52:18:4f:ee:cb:b6:8a:fc:1f:60:0d:30:a3:55:c1:cd:
fd:2a:b0:d1:2f:70:b3:ca:56:7d:d2:e9:2d:fc:d1:e1:40:a0:
7e:bd:98:f6:a9:d3:a3:62:eb:a4:f0:94:ae:9f:ec:a8:4d:9a:
28:b5:2d:6d:61:00:dc:0f:a1:b9:30:89:98:0c:74:ce:68:d6:
24:eb:bb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:10 2025 by rpki-client