Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0hjT0o8j8X3vh03VZOrtj16ZJ8I.roa
File: 0hjT0o8j8X3vh03VZOrtj16ZJ8I.roa (raw, json)
Hash identifier: 28vMR3YOJ+lKdwiJrk8JCcHshWg2FU38ir8oQzi7OKs=
Subject key identifier: D2:18:D3:D2:8F:23:F1:7D:EF:87:4D:D5:64:EA:ED:8F:5E:99:27:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8F33D760
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0hjT0o8j8X3vh03VZOrtj16ZJ8I.roa
Signing time: Thu 23 Jun 2022 10:05:24 +0000
ROA not before: Thu 23 Jun 2022 10:05:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:8f60:592f/128 maxlen: 128
2001:67c:64:ffff:0:181:8d72:6191/128 maxlen: 128
2001:67c:64:ffff:0:181:9005:2635/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2402539360 (0x8f33d760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 23 10:05:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d218d3d28f23f17def874dd564eaed8f5e9927c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:a5:2e:22:6d:56:40:8b:e7:9c:55:97:86:
28:97:b0:39:f1:0d:ce:bf:75:32:47:e8:a2:a9:c0:
c0:84:57:55:7b:5c:ac:e9:c5:5c:de:e7:ee:79:db:
f4:6c:d8:d3:ec:df:bf:db:15:a0:c9:37:3c:40:47:
c4:00:77:0c:d0:56:5b:12:43:04:60:da:9d:2b:9d:
72:04:54:8e:24:15:fb:10:98:13:19:8b:8a:13:90:
a2:b2:28:c1:24:05:f2:91:57:f7:5d:89:82:ba:aa:
f6:07:85:32:e8:b5:d2:d5:97:67:c2:aa:41:3b:eb:
4a:f0:47:9b:a9:b6:62:ba:58:1e:98:16:45:3e:da:
a9:0f:4b:1f:f7:86:32:e1:9c:b8:15:e9:e3:9f:e3:
8d:23:40:27:31:a7:24:c6:88:08:36:03:49:da:e7:
38:ac:ee:7d:df:81:cc:dd:d1:4d:2f:6d:e5:4c:80:
02:92:d4:29:b3:72:ef:d6:2e:07:70:eb:cc:df:dc:
b4:bc:8a:2e:19:0a:d0:ac:8b:c3:56:43:9d:ec:1d:
0e:cf:85:87:07:c3:8b:9c:dc:64:c5:55:36:42:b2:
60:bd:32:ad:89:c7:d9:b3:a0:56:53:73:0c:06:55:
3c:f6:62:5a:4a:33:1a:70:92:88:02:fc:06:f9:fb:
28:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:18:D3:D2:8F:23:F1:7D:EF:87:4D:D5:64:EA:ED:8F:5E:99:27:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0hjT0o8j8X3vh03VZOrtj16ZJ8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:a4:e5:25:55:30:77:19:93:9d:d8:5e:15:ea:bd:1b:55:cf:
7d:61:3b:7a:cf:24:61:3e:2a:12:40:3b:c4:4c:78:f9:bf:0c:
28:85:8b:95:29:ab:26:7a:8c:34:30:bc:dc:29:f2:ce:d9:6f:
5d:3b:4d:aa:1c:f3:e7:cb:fd:21:55:30:c6:b0:c5:53:9b:47:
4a:2d:67:89:02:61:5c:df:19:f0:66:fc:62:12:e9:a5:1c:7c:
18:22:1f:ad:2c:30:6e:b4:44:53:5e:d2:8d:a1:d8:22:8a:f3:
68:65:1b:35:ed:96:8b:7b:c9:81:78:10:48:8d:36:a2:85:c8:
2a:1c:4b:fd:f6:42:49:22:5e:3b:ea:39:3f:ce:16:a4:25:29:
ff:b6:1b:fe:cd:f1:26:8a:67:86:38:91:93:4b:52:f5:f4:40:
f0:e3:ac:84:9c:68:43:78:39:44:51:f3:17:2d:8c:fd:3d:77:
e1:a0:1b:32:42:57:14:9d:6a:0f:68:9b:88:bc:5a:9c:1e:d1:
b7:19:1d:90:85:fe:96:57:7a:45:11:36:7f:7d:a0:30:95:70:
c7:f7:81:49:e8:41:b6:56:5c:42:0f:00:0b:63:1d:66:26:66:
bc:d5:59:b4:0d:9c:47:8e:1a:77:df:f3:23:07:d2:b1:3a:0c:
18:d5:6a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:38:17 2025 by rpki-client