Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0v4Lltft7t5TEZ-vFWeLtNduceQ.roa
File: 0v4Lltft7t5TEZ-vFWeLtNduceQ.roa (raw, json)
Hash identifier: x1Q4d9kCpcKWU5A1hZLKe8ldRceBmFM8DD6prsBTF0Y=
Subject key identifier: D2:FE:0B:96:D7:ED:EE:DE:53:11:9F:AF:15:67:8B:B4:D7:6E:71:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183AD016709A31E3D95C8E290EB43038DF3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0v4Lltft7t5TEZ-vFWeLtNduceQ.roa
Signing time: Thu 06 Oct 2022 11:14:53 +0000
ROA not before: Thu 06 Oct 2022 11:14:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ad:01:67:09:a3:1e:3d:95:c8:e2:90:eb:43:03:8d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 6 11:14:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2fe0b96d7edeede53119faf15678bb4d76e71e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f4:08:aa:ad:70:a8:e6:9a:28:b4:7b:88:d4:
b4:37:63:33:8c:5e:fa:6b:e7:43:1c:db:12:2e:36:
25:ec:ad:62:b9:a5:da:18:32:18:23:bc:eb:b3:41:
45:c1:37:83:16:1b:86:f2:d5:16:df:80:bc:9b:86:
d2:1b:a4:ba:03:77:2c:6d:a9:1f:b7:d7:3f:9b:bb:
a6:c6:74:bd:2d:7a:41:77:c2:95:10:ff:f7:78:84:
be:64:60:c6:6d:63:29:dd:83:61:62:8d:8a:10:01:
4c:78:5c:b9:ba:5f:97:5d:6e:af:7b:79:f0:f9:c4:
aa:ea:1c:81:90:51:92:6e:e8:d0:dc:ca:b9:95:a3:
4e:e1:db:a0:07:92:ab:7e:93:e3:dd:ac:c8:f9:70:
2d:46:05:35:81:5a:db:54:33:32:41:23:d5:e8:3f:
91:bf:b9:78:8f:cd:80:a9:08:bf:ac:7d:8d:a5:21:
4b:8e:f7:fe:c3:64:94:b4:f0:1d:02:75:a3:42:20:
2b:4b:fe:92:21:d7:cb:3c:ef:3b:cf:3c:ed:d6:76:
7b:84:98:42:ad:24:40:ac:90:5d:23:ce:eb:8e:1e:
3e:88:83:7d:97:a1:47:86:57:b9:43:7f:6e:d0:c7:
b0:ee:18:ec:0f:e3:ac:16:08:69:58:b7:ed:86:22:
f7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FE:0B:96:D7:ED:EE:DE:53:11:9F:AF:15:67:8B:B4:D7:6E:71:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0v4Lltft7t5TEZ-vFWeLtNduceQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:ee:a7:6a:6d:25:27:ba:30:6a:ba:0b:18:ff:79:c8:2d:92:
b2:23:06:48:36:52:02:e6:6c:f8:fe:aa:f3:f5:96:db:3e:1a:
6d:f3:7d:ec:d6:06:2e:52:95:bf:2c:2f:f4:90:89:ef:c1:fa:
ef:a7:43:ad:67:8d:e4:1a:95:26:dc:2f:22:10:28:8b:eb:8b:
d7:86:a7:22:cd:8f:e4:72:45:79:78:d5:ba:e1:de:cc:e3:69:
c7:3d:03:98:02:af:73:91:d5:60:f0:cf:9d:61:3d:74:a0:ca:
58:c7:4a:ae:f1:b4:1f:3a:f2:d6:9f:90:65:6d:c6:d2:94:a3:
72:d1:fb:f4:72:5f:00:76:39:99:d1:ec:fb:14:b9:79:ed:0d:
2b:71:08:da:2f:ee:a7:42:f0:33:1a:be:1d:33:9f:7f:74:54:
72:48:e1:7f:7a:3b:af:4e:f7:88:8b:ef:f2:ee:04:56:c4:5c:
95:b3:05:c7:30:77:c1:27:8e:8f:e0:ae:65:60:62:99:ab:5b:
80:f9:42:f5:2e:12:06:2c:2b:2e:b5:0c:96:99:22:d2:71:61:
4e:b0:9f:2a:b1:16:f3:ec:c3:58:bc:a5:7e:05:1b:e6:ab:ff:
5e:0e:df:ec:c9:28:4a:dd:a1:b7:36:d2:27:80:d4:6b:3c:b4:
47:63:95:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:52 2025 by rpki-client