Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-D_nG2ug6hp67BrSHgepXHYrFU0.roa
File: 1-D_nG2ug6hp67BrSHgepXHYrFU0.roa (raw, json)
Hash identifier: rPrK7mLzptnXGlAT0WRqj+Bj0YzdYMWNzaQhRSk+f5E=
Subject key identifier: F8:3F:E7:1B:6B:A0:EA:1A:7A:EC:1A:D2:1E:07:A9:5C:76:2B:15:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898CEFB4C00EDB3F46AB156ECF4B2676BD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-D_nG2ug6hp67BrSHgepXHYrFU0.roa
Signing time: Tue 25 Jul 2023 12:04:26 +0000
ROA not before: Tue 25 Jul 2023 12:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:189:8cef:7cca/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:ef:b4:c0:0e:db:3f:46:ab:15:6e:cf:4b:26:76:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 12:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f83fe71b6ba0ea1a7aec1ad21e07a95c762b154d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:10:19:8c:70:82:7f:b2:ce:0b:47:e0:f6:73:
d0:df:de:6b:d8:b3:8a:18:7e:cf:56:d3:0d:e6:bf:
78:30:24:9f:91:92:57:cd:d9:9d:96:f3:3a:1b:32:
d0:6f:43:a9:02:6a:ed:f9:bd:71:3c:62:e0:6b:bd:
15:f7:ff:81:e5:f5:0e:6d:50:4a:5d:15:8f:b8:88:
36:3c:fc:3c:c6:76:56:2d:7b:cb:1a:e3:19:14:d7:
75:02:7e:7c:77:d6:dd:4e:01:c5:49:93:69:b7:25:
73:e6:e6:cc:f0:3e:4b:2b:a2:12:2b:7b:c6:45:e6:
5e:d0:11:71:cc:24:e0:bc:c2:e9:1e:f9:f9:ce:a7:
0d:0d:da:db:7c:63:27:4d:6d:eb:03:90:66:ec:bf:
0f:f9:7e:e7:2c:4c:df:e3:2d:d9:c5:7f:d2:84:6d:
33:26:e3:69:98:25:70:74:49:5a:58:03:d6:b4:42:
4c:bb:52:a6:e0:f3:6a:a2:e7:a3:a4:fc:97:ae:40:
d9:ec:2e:23:25:ba:84:52:48:83:54:74:9f:ea:33:
3e:17:b9:5b:51:3e:c8:f9:26:b2:ec:14:9c:38:3e:
68:64:58:3a:43:b4:b7:4a:25:92:34:a8:8e:e9:eb:
3d:82:5f:71:64:35:1c:da:ad:81:17:b7:ca:1c:1d:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3F:E7:1B:6B:A0:EA:1A:7A:EC:1A:D2:1E:07:A9:5C:76:2B:15:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-D_nG2ug6hp67BrSHgepXHYrFU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:d5:4a:02:9d:36:09:2a:e6:08:2d:75:43:c0:9b:60:01:fe:
f0:83:05:a6:aa:4b:e4:43:83:56:95:f2:3c:21:f2:eb:6b:9a:
59:2d:3b:a3:4d:50:b6:d8:5c:d3:96:64:76:c0:f8:19:b5:07:
ef:3d:a6:6c:8f:82:1d:16:72:71:46:80:d5:8e:c2:31:68:17:
56:88:f8:a4:cc:de:58:a5:0e:a4:43:b5:e8:77:b0:60:cf:a8:
ec:97:1a:cf:e7:5d:20:ba:90:59:6a:59:3c:ae:14:21:fe:19:
67:49:18:fc:72:aa:7c:3e:5d:04:f9:68:81:43:24:8e:08:32:
6b:7c:6f:13:61:65:91:9e:dd:31:50:ff:3b:1e:3f:38:b3:ab:
b9:0e:62:9f:1e:df:4d:86:6f:49:7e:35:e9:18:09:ea:2b:e3:
30:cd:a3:2e:13:09:57:d7:c5:bd:ef:a5:64:e0:12:cd:26:09:
4a:2d:bd:39:9d:46:cf:d7:a9:4b:e2:14:60:61:cc:88:4d:f9:
e4:63:c0:c9:ed:a8:1c:29:80:2b:bf:ce:87:37:84:44:d6:2c:
27:32:fa:e2:f4:7a:33:30:78:b1:50:bd:79:fa:0a:a9:ab:e6:
02:4b:79:4a:ae:4b:38:21:3e:e3:32:aa:45:63:5a:60:b6:62:
81:de:b5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:48:16 2025 by rpki-client