Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0hbmQwVIZlRiwo3Le-6PXYq6LPA.roa
File: 0hbmQwVIZlRiwo3Le-6PXYq6LPA.roa (raw, json)
Hash identifier: Nf+5SKGzIO1ygnEB9vEAp+lauVuet+kgWjo/8LzYDxU=
Subject key identifier: D2:16:E6:43:05:48:66:54:62:C2:8D:CB:7B:EE:8F:5D:8A:BA:2C:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869B683F43C2BF68DCC31A71505BEC5634
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0hbmQwVIZlRiwo3Le-6PXYq6LPA.roa
Signing time: Wed 01 Mar 2023 04:22:25 +0000
ROA not before: Wed 01 Mar 2023 04:22:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9b:68:3f:43:c2:bf:68:dc:c3:1a:71:50:5b:ec:56:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 04:22:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d216e6430548665462c28dcb7bee8f5d8aba2cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:30:b9:0b:fb:41:37:cb:1e:1a:b4:0b:ae:75:
d1:2c:03:42:96:96:1c:77:f9:2a:70:ed:44:39:11:
3e:c2:53:6f:ed:28:cf:98:a6:f2:9f:19:83:e5:e0:
65:69:6e:30:20:cd:56:5e:20:4d:a0:f4:1d:a5:a2:
83:b1:70:9e:b9:73:da:cc:55:1e:ad:aa:99:43:8f:
95:b7:c2:b9:89:fc:95:2e:d6:73:fc:e5:d1:32:ab:
c6:da:4c:18:e8:b9:6c:90:ed:94:41:07:d5:b8:17:
a9:39:86:4f:bd:ab:47:e5:a1:dd:09:69:29:35:29:
dc:6a:ed:65:62:d5:38:e1:af:03:b7:65:5c:1c:04:
62:ea:13:4a:c5:e3:c6:a2:a1:bc:b3:57:5b:cf:d3:
a0:61:a5:e4:1c:7e:70:9b:19:b0:a7:cd:eb:e0:21:
35:77:cb:21:ee:6b:5d:c5:4b:06:40:43:cc:8e:3f:
0e:7e:3a:9b:13:47:20:a1:51:bc:af:62:74:e4:21:
22:17:bd:06:31:ce:82:56:b3:7b:4b:08:a7:14:84:
e4:82:03:04:1e:3b:a6:98:ef:29:4f:65:2a:57:1b:
f7:7b:49:0b:86:84:4c:e4:6b:d4:b6:da:0a:bc:44:
95:18:c9:7a:cb:d4:ff:03:12:56:f9:a1:3d:43:6b:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:16:E6:43:05:48:66:54:62:C2:8D:CB:7B:EE:8F:5D:8A:BA:2C:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0hbmQwVIZlRiwo3Le-6PXYq6LPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:3e:ab:87:a4:1b:a6:c6:ef:c3:72:91:a1:4f:67:3b:9c:2a:
c2:b2:96:c1:d8:c8:80:30:35:99:1c:a7:97:6e:90:2f:9f:14:
e3:f9:65:72:af:0a:98:0b:38:1c:0d:ab:98:12:f7:9d:f5:17:
09:f1:0d:a7:be:02:ca:45:a4:a7:93:9b:15:a1:7e:30:e4:e9:
4f:fe:bf:e0:59:5a:78:ef:4f:94:b8:2c:13:c6:67:af:0f:b2:
b5:72:9d:5e:18:ca:82:2f:9c:6e:24:05:a6:59:25:d0:fc:3b:
84:fc:1b:75:11:8f:aa:da:f1:0f:2c:8b:35:51:d5:e1:f8:34:
1e:e1:3a:01:46:97:0f:3d:75:99:73:7f:6b:1e:52:77:42:96:
c5:e8:dd:b8:1a:53:f9:c4:37:e4:f3:05:48:d6:c9:c1:06:b3:
c0:c5:5a:31:31:80:dd:1a:f4:9d:27:de:13:ff:05:71:02:52:
7e:c7:f9:88:4a:fe:63:6d:6f:34:a1:4b:25:e3:0b:4d:80:bd:
ec:85:f6:24:5d:8e:6b:79:08:cc:33:83:e3:ec:cf:5d:de:cc:
ae:cc:72:1f:72:7c:3e:b2:21:ff:ac:aa:1f:7e:aa:44:87:1b:
df:b4:37:95:cc:98:97:72:48:9a:6f:18:21:c5:d1:65:ba:58:
a5:d4:2f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:16:30 2025 by rpki-client