Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0utdu2elcmmdspcvP2Uv4PtrvlA.roa
File: 0utdu2elcmmdspcvP2Uv4PtrvlA.roa (raw, json)
Hash identifier: pgIgCFE1RwwWHSsoiVR1Y2bGjrrCMOajs4ARmdpVEOo=
Subject key identifier: D2:EB:5D:BB:67:A5:72:69:9D:B2:97:2F:3F:65:2F:E0:FB:6B:BE:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018666952E47246801C9FA0CE65419DDB34D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0utdu2elcmmdspcvP2Uv4PtrvlA.roa
Signing time: Sat 18 Feb 2023 22:11:38 +0000
ROA not before: Sat 18 Feb 2023 22:11:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:66:95:2e:47:24:68:01:c9:fa:0c:e6:54:19:dd:b3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 22:11:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2eb5dbb67a572699db2972f3f652fe0fb6bbe50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:b4:3a:6e:a8:4a:60:08:d5:88:2b:8d:31:
1e:34:80:0d:d9:f5:f2:67:5c:1f:c8:92:3c:b3:46:
96:70:8d:c7:1f:df:4d:c8:0a:80:82:a2:2d:e4:8e:
e7:7b:9f:34:59:17:54:36:a5:96:12:6c:d2:07:54:
c9:8a:c1:4b:93:1b:c3:ce:3d:16:be:1a:3c:ca:b9:
b8:0d:19:81:b2:d2:57:1a:ee:c0:4c:32:db:e4:7b:
b0:d8:d2:41:65:64:72:ac:8a:8f:55:69:e8:f5:d4:
18:ba:48:61:99:cd:9a:d3:ab:09:de:a0:45:e8:7f:
f4:29:ca:91:60:c0:42:a1:26:bd:b8:39:e1:44:86:
ab:fe:13:45:ce:00:15:cf:58:bc:93:d9:e4:66:1c:
2d:73:e9:70:17:d5:38:30:3b:a0:97:25:57:6b:be:
6c:6f:ca:3a:b3:ca:eb:63:48:43:c9:1d:f0:4d:ea:
60:92:20:28:37:3f:fa:c9:33:ee:46:72:d7:f8:6f:
c8:a7:c6:8b:58:b6:ab:98:8a:5c:ff:c9:f0:af:e2:
a2:e9:46:a8:0a:c7:1a:ae:a5:f9:cb:b2:9f:f4:91:
f0:49:29:21:9f:43:5a:f9:18:1d:81:70:ba:46:ae:
48:cf:d9:9b:cc:db:04:45:10:57:11:21:f9:17:08:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EB:5D:BB:67:A5:72:69:9D:B2:97:2F:3F:65:2F:E0:FB:6B:BE:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0utdu2elcmmdspcvP2Uv4PtrvlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:8d:9f:d5:b4:66:79:78:38:34:26:62:0a:13:65:f6:1e:bb:
49:17:93:7c:9a:df:da:73:f0:95:91:48:17:e1:37:2c:0f:fb:
dc:b7:e8:57:24:e5:5f:89:28:9d:5f:63:2f:e9:19:c5:c7:68:
69:0b:29:d7:00:db:e4:88:51:17:28:78:4e:e8:a7:b4:7e:7c:
e9:ee:8d:01:62:f8:04:13:1b:81:d8:ee:2b:a1:72:17:ef:39:
4a:72:fe:45:ea:96:1f:cf:d1:30:ae:8d:65:32:34:ac:70:60:
b6:e5:4b:6b:a8:c1:3f:00:08:21:d6:34:12:9e:ae:fb:26:e0:
a8:14:45:1f:da:b9:5c:bb:cb:f9:1a:ef:4d:ed:c1:7f:c5:9e:
55:6d:c1:cf:e6:8c:85:c6:68:e0:49:88:79:86:d7:31:ac:b9:
0a:53:c8:cf:9d:7e:fa:87:9e:f2:79:52:8c:22:4a:f2:3d:42:
c4:54:93:6d:4b:d2:6e:50:46:ca:2f:15:35:5d:ba:b1:37:62:
e0:71:43:8d:4a:71:5d:06:2f:99:52:92:b0:70:4f:8b:1e:9b:
2e:cc:f0:9e:ab:a5:87:ec:15:16:a3:54:2b:4a:c0:bd:ea:d3:
4a:69:84:08:bf:bc:a1:44:f9:f2:be:68:34:a5:1f:49:ec:51:
c4:b0:bf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:14 2025 by rpki-client