Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0yhbHqFa656jF23qZuR_wCBxt20.roa
File: 0yhbHqFa656jF23qZuR_wCBxt20.roa (raw, json)
Hash identifier: nbCNidJrUXGjeAhf3XvKZTt2y+Irn3PEVDtj2vEy3OI=
Subject key identifier: D3:28:5B:1E:A1:5A:EB:9E:A3:17:6D:EA:66:E4:7F:C0:20:71:B7:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897D152FF1EFE4B53361FB0C9333E3A625
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0yhbHqFa656jF23qZuR_wCBxt20.roa
Signing time: Sat 22 Jul 2023 10:11:27 +0000
ROA not before: Sat 22 Jul 2023 10:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7d:15:2f:f1:ef:e4:b5:33:61:fb:0c:93:33:e3:a6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 10:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3285b1ea15aeb9ea3176dea66e47fc02071b76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:af:23:05:63:78:d0:fa:9c:45:6d:02:05:
6b:20:0b:2c:71:f8:a2:e3:e2:34:21:73:33:5a:6c:
10:ef:bb:83:c3:c5:c3:0d:0a:11:96:08:8f:b9:c3:
bd:e6:aa:6b:fd:d8:9c:76:07:27:f4:ef:28:a5:e0:
58:fe:3a:1f:d5:cc:cb:41:ef:0f:48:0f:ff:56:8f:
94:29:72:93:4c:92:be:d9:c6:89:55:71:80:0e:46:
da:48:b7:d1:d5:4d:5e:29:ae:98:7c:36:e6:08:04:
43:2f:9c:6b:6d:20:74:8f:53:0e:ed:f3:49:b6:99:
74:de:2e:2f:27:5b:46:6a:b8:d2:53:7f:39:43:b5:
79:1a:6c:cb:24:f5:f8:15:25:a6:37:93:f4:51:24:
0a:4d:c7:09:2d:2d:ba:10:1d:f9:b0:4c:a3:7e:1b:
97:57:49:a6:51:db:f6:28:57:e5:22:27:f3:b0:5f:
7b:80:47:d4:b4:08:b2:c5:6c:ed:51:a1:c1:ca:da:
df:98:a4:76:45:67:12:3e:fb:08:65:05:05:58:7b:
b5:0f:1f:11:4c:92:ff:74:ed:86:1e:53:b5:63:91:
8e:a6:b1:6a:64:36:c1:94:5e:9c:5c:cf:ee:e7:82:
41:7f:4b:90:f5:81:a9:be:1d:36:58:d4:73:e4:5f:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:28:5B:1E:A1:5A:EB:9E:A3:17:6D:EA:66:E4:7F:C0:20:71:B7:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0yhbHqFa656jF23qZuR_wCBxt20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:45:6c:f5:ee:95:65:a8:09:4a:9a:e4:88:39:1f:a2:4d:54:
e9:72:d0:8a:70:1b:11:8a:80:4a:c3:be:32:bf:c5:b8:de:64:
6e:7e:4f:48:eb:1c:ad:f5:67:c5:30:ab:98:05:43:46:26:4e:
7f:d3:82:b6:f4:13:10:c9:68:82:d1:c7:78:0a:c0:65:e2:5d:
e1:39:78:ae:02:dc:10:17:18:15:4f:f2:61:5c:5c:52:2d:22:
06:b7:18:0e:b8:ba:80:5a:b3:b2:0a:d3:42:97:07:98:6a:1d:
48:5d:58:fe:88:54:13:b2:e5:fb:80:25:92:5b:d4:b4:c6:be:
ef:57:1f:33:23:41:f8:97:d2:19:f4:69:bf:f8:ff:48:f5:8e:
27:4a:7f:1d:8c:b0:a9:d1:4a:8c:b0:68:62:c8:ca:bb:4e:31:
7c:49:40:8e:3e:93:0f:d2:34:3c:31:47:d8:ae:8a:fb:58:90:
49:df:7e:f5:92:76:eb:e0:1c:58:78:be:eb:b7:e6:e8:19:ad:
0c:94:5e:b0:51:06:2d:8b:90:48:21:81:8a:01:54:e4:bc:48:
9e:62:25:45:15:3c:85:54:b3:60:6e:1b:b8:ea:8f:9c:24:50:
99:57:eb:6e:63:66:27:c8:ad:99:0a:b3:3a:a8:15:9d:78:fc:
84:b0:7d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:50:54 2025 by rpki-client