Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0eWnJOeG2ddeqC3DOfo81UQk4D8.roa
File: 0eWnJOeG2ddeqC3DOfo81UQk4D8.roa (raw, json)
Hash identifier: BC7/cQmoXNj0bVg9vx1V8mtIDVJN6s6slz+/YQVGVp4=
Subject key identifier: D1:E5:A7:24:E7:86:D9:D7:5E:A8:2D:C3:39:FA:3C:D5:44:24:E0:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018839B0C01A34F579EB6FA9406D3325CD7E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0eWnJOeG2ddeqC3DOfo81UQk4D8.roa
Signing time: Sat 20 May 2023 15:04:24 +0000
ROA not before: Sat 20 May 2023 15:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:39b0:7f9b/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:39:b0:c0:1a:34:f5:79:eb:6f:a9:40:6d:33:25:cd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 15:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1e5a724e786d9d75ea82dc339fa3cd54424e03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:6b:80:f0:71:e9:71:7e:8d:4b:b3:ed:b1:
7b:d9:6a:16:44:f2:83:99:2f:39:70:ac:fc:a1:af:
d0:d9:4a:95:3d:db:96:13:05:0b:69:e2:f2:3a:19:
8a:ff:39:ea:a5:b0:4f:a3:a5:34:5b:73:be:84:4b:
45:c7:49:b7:e2:eb:2d:85:40:7b:18:71:76:d6:3a:
32:a8:f3:f0:36:4b:fc:db:1d:4e:55:17:57:b3:68:
86:81:3f:5f:83:f2:28:e0:c1:f8:a7:39:df:0e:2c:
5b:ae:b5:b4:72:ae:e0:02:5d:07:79:63:a8:7d:63:
24:e6:f7:05:79:e6:05:2c:40:79:e7:7e:3c:17:fd:
5a:42:51:d0:22:55:44:b4:ef:36:d1:14:c8:d3:70:
2c:83:81:bb:93:57:77:7a:3c:36:20:f7:4b:53:a3:
2b:65:88:ba:87:76:1c:f8:6a:a7:9e:f4:37:e2:8f:
c5:df:30:06:d7:8f:c4:33:53:5f:d1:87:f3:f8:bf:
87:49:0f:b3:42:72:10:bb:95:33:a9:03:c2:ce:34:
05:1e:c5:2a:5b:82:3e:0f:0b:08:05:2d:a6:40:5a:
e6:a2:bc:ec:af:f0:7a:80:6e:77:07:5d:3a:2b:fe:
45:fd:2c:d9:3b:fe:34:90:a5:31:35:98:3c:28:ee:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E5:A7:24:E7:86:D9:D7:5E:A8:2D:C3:39:FA:3C:D5:44:24:E0:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0eWnJOeG2ddeqC3DOfo81UQk4D8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:34:7c:d4:55:52:b4:4d:f1:a6:9e:92:97:7c:8a:c7:1e:a6:
a2:e5:42:31:4c:6c:d2:a1:c2:8a:22:e1:a4:45:e5:91:02:67:
b2:09:9b:70:1c:b7:d2:8f:64:6e:5d:26:35:3d:53:c3:75:5c:
7f:29:70:14:bb:42:dc:99:57:62:c5:98:82:f5:a2:0f:5f:7b:
90:d3:f5:e2:c6:5f:70:90:e0:ac:74:56:df:f7:50:f4:e1:97:
ab:e0:e6:62:da:ba:3e:fb:c0:67:1c:eb:75:f0:e6:1e:80:9e:
56:2d:74:23:96:50:61:07:ba:6f:4c:a6:ac:77:51:88:1e:52:
79:07:3b:0a:10:e7:e3:c6:e8:30:bf:cf:de:94:e4:17:4d:10:
ff:7e:a6:0e:d9:51:89:37:fd:b3:bf:73:82:80:ba:ec:e0:a2:
cc:a2:81:f8:7e:00:76:ce:86:6d:53:ed:6d:7f:23:71:d6:9f:
6c:d0:8d:a3:24:04:9a:bf:02:15:57:7d:85:bf:8c:91:87:84:
ac:19:1b:82:8c:b3:2e:1e:32:0e:8a:a8:79:1b:50:20:d9:ab:
8e:9a:17:9c:f7:87:3a:04:73:55:2c:a2:dc:61:ad:34:93:55:
0f:25:95:73:f9:54:c5:a6:89:b4:c9:4b:06:91:aa:0c:d2:74:
5f:72:f1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:23 2025 by rpki-client