Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0sh1YDkh8hpQBDR2TU9yI2SagWg.roa
File: 0sh1YDkh8hpQBDR2TU9yI2SagWg.roa (raw, json)
Hash identifier: 53njoU/VOqbYtyh7gs9Pu1+iT9JMbjTWvZNylbNjuvY=
Subject key identifier: D2:C8:75:60:39:21:F2:1A:50:04:34:76:4D:4F:72:23:64:9A:81:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2442EBF573ADA6464058CE77DC70EA01
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0sh1YDkh8hpQBDR2TU9yI2SagWg.roa
Signing time: Wed 23 Aug 2023 21:18:00 +0000
ROA not before: Wed 23 Aug 2023 21:18:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:24:42:eb:f5:73:ad:a6:46:40:58:ce:77:dc:70:ea:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 21:18:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2c875603921f21a500434764d4f7223649a8168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b9:a1:50:dc:4a:72:af:fe:61:df:6a:34:8e:
4d:12:49:e6:a1:35:73:b3:ef:94:2f:56:08:62:51:
11:1c:a5:0f:a1:28:25:c4:a0:27:11:a6:08:7c:42:
c4:71:c4:57:ba:bc:bf:82:3b:82:9f:1b:ee:ad:7d:
44:25:f1:67:15:76:e5:25:3e:32:78:b5:e9:a0:22:
6b:ac:ab:4c:41:b9:42:5b:60:bc:10:e2:d0:e0:2d:
ff:2d:a4:9a:c1:23:27:d5:22:06:db:ec:db:39:2f:
e3:76:e2:4c:ea:24:92:82:e9:62:f4:70:19:79:ea:
db:48:cb:9d:97:bd:a0:1a:e0:8d:79:e2:1d:60:d1:
ed:f3:1a:a0:a5:2b:cc:78:3f:19:72:6b:10:10:a7:
fc:d8:5e:98:e7:61:0d:ad:d2:e0:48:15:34:f1:72:
ca:db:2f:50:5d:3f:eb:ee:1e:c3:25:f0:82:1e:b7:
52:cd:1f:b8:64:1e:77:84:b9:06:0b:e1:92:24:31:
25:ea:86:04:04:3b:cf:08:71:c2:1a:5f:70:81:13:
09:06:67:2e:fb:21:ea:72:33:52:6e:ff:28:db:75:
ae:7f:cd:d9:66:1e:b0:2d:e6:2e:ef:06:98:e6:da:
1f:09:a2:ba:0e:87:b1:8e:88:8a:13:20:55:ec:9b:
54:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C8:75:60:39:21:F2:1A:50:04:34:76:4D:4F:72:23:64:9A:81:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0sh1YDkh8hpQBDR2TU9yI2SagWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:88:b2:4b:32:42:30:af:bd:2d:2c:b9:cf:fb:e4:98:54:f7:
76:bc:02:fa:fd:8d:3e:92:bd:0a:0e:32:d2:46:0d:49:2a:fe:
09:2f:8a:7f:c6:5b:8c:76:7b:fc:7a:0d:90:27:03:dc:f9:71:
ea:d5:f4:90:ce:39:7a:ce:35:e6:9a:eb:d3:ce:c3:7f:72:a4:
58:f3:e3:89:fd:c2:a2:8e:70:da:ad:13:fb:6c:aa:0f:dd:9e:
c2:a5:0d:d6:2d:62:6a:fc:b5:ed:13:2a:79:c8:66:b5:d8:17:
71:81:2e:65:00:14:a0:b8:6d:1b:c2:bd:d1:33:ae:47:d9:14:
9d:c0:4b:cd:2c:27:25:17:29:80:36:bc:47:0d:80:94:55:da:
3c:d4:94:c4:12:58:98:a1:9c:a3:b6:1a:ff:89:99:d7:de:75:
9f:9d:18:f2:2d:61:e4:6a:c5:d9:09:c3:77:fd:fc:1e:d4:52:
d2:26:2d:c8:1a:80:5d:e9:79:ec:de:33:18:a7:4f:13:02:42:
26:09:78:ed:be:38:f9:5f:90:70:27:df:6a:83:d3:1a:5c:7f:
c7:a3:39:4f:93:92:59:f1:b7:47:57:fd:6a:a9:73:39:55:c9:
f5:e2:eb:1c:78:38:49:f6:c3:37:23:24:03:e2:88:5f:2e:7d:
c1:9d:83:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:27:34 2025 by rpki-client