Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-0z0-E_M4LhsEFuuSlZF4hOWpl0.roa
File: 1-0z0-E_M4LhsEFuuSlZF4hOWpl0.roa (raw, json)
Hash identifier: qnCmwBx7oyH6bqzv9pD5OAKAOUkojCnfzN3ordmocWs=
Subject key identifier: FB:4C:F4:F8:4F:CC:E0:B8:6C:10:5B:AE:4A:56:45:E2:13:96:A6:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187044E83C3F199132197DF977AB644C450
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-0z0-E_M4LhsEFuuSlZF4hOWpl0.roa
Signing time: Tue 21 Mar 2023 13:14:27 +0000
ROA not before: Tue 21 Mar 2023 13:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:4e:83:c3:f1:99:13:21:97:df:97:7a:b6:44:c4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 13:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb4cf4f84fcce0b86c105bae4a5645e21396a65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5f:73:67:9c:50:fa:20:d2:59:49:ed:b8:82:
d8:e5:26:a1:a1:64:a5:b7:a0:c2:31:17:eb:8d:b2:
28:42:46:9c:9c:b1:56:e5:82:27:99:03:aa:8a:ce:
cd:e1:39:33:a7:b8:87:85:c9:b8:0c:fa:bf:ee:bc:
da:46:ba:d0:1f:88:40:e8:d0:ac:11:7c:c6:33:f0:
1a:0f:69:8c:2c:03:6a:1c:c4:6f:9d:2b:ed:86:b7:
84:38:44:52:d9:d6:df:9b:f9:55:e3:4e:d6:a8:d2:
69:59:26:65:33:a1:6e:38:af:84:6d:8e:cd:eb:76:
fa:31:66:c8:de:b8:d1:07:26:82:39:58:d3:ce:6e:
d0:54:a2:a8:d7:24:44:3c:ce:8b:40:80:52:2e:ec:
5c:fc:1b:b3:b2:9c:28:28:7d:0d:df:27:5e:eb:ea:
44:9d:3b:7d:66:50:f8:19:c3:c6:57:d4:cb:f6:20:
0e:dd:4b:32:18:46:ca:1c:4c:8b:d6:34:55:5c:8c:
7a:b7:1b:d9:91:12:ed:27:8f:52:ea:d0:ae:b3:43:
e8:8b:f9:c9:5f:dc:58:f0:f7:0a:d1:d5:66:c1:8e:
49:6a:14:98:79:de:64:c4:90:de:d4:a9:94:90:29:
88:cd:f4:f1:44:f0:64:88:ec:ab:2f:54:10:9c:21:
05:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4C:F4:F8:4F:CC:E0:B8:6C:10:5B:AE:4A:56:45:E2:13:96:A6:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-0z0-E_M4LhsEFuuSlZF4hOWpl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:d6:fe:38:91:a4:e5:f4:67:53:ae:19:ab:11:36:59:9e:2a:
94:28:be:d0:f0:c3:5a:a7:9c:21:40:63:76:44:d5:9e:53:28:
11:13:35:9d:60:24:58:65:b1:96:65:d9:0b:b5:3c:6a:6c:98:
36:3c:1d:9a:72:99:08:a9:b7:fc:fa:9d:88:40:6d:4e:1c:88:
9a:53:2a:bf:91:f0:e3:95:88:46:f2:c9:01:c8:f3:74:df:84:
80:67:81:e2:ab:e6:18:a0:71:56:36:28:ed:7f:c7:47:cb:f1:
f7:d1:f3:68:56:ae:4c:a2:4a:73:fa:65:3b:36:17:0a:f3:a3:
c8:c4:3d:94:56:1a:ae:f7:f7:fd:86:36:0d:c7:dd:04:31:1a:
38:da:76:b6:e8:fc:71:93:76:37:9a:09:30:19:2f:43:5c:55:
ae:79:1d:ac:73:07:fa:12:c7:6e:54:b2:ca:41:ea:df:b0:f5:
2b:19:17:a9:73:67:c5:26:fc:49:83:70:1d:0e:3a:0e:cb:76:
d4:41:96:7f:1a:45:cc:ee:d2:73:58:0b:f8:36:88:92:7d:7e:
ef:ba:fd:da:7a:78:28:b4:12:55:bd:96:e7:ba:c4:a5:6d:33:
9f:82:79:73:4e:65:c6:59:17:e0:cd:b5:86:f2:7b:8f:d2:f6:
26:b6:01:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:23:44 2025 by rpki-client