Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-M_hjqBCTuVAZXr69Jk1qyYDnh4.roa
File: 1-M_hjqBCTuVAZXr69Jk1qyYDnh4.roa (raw, json)
Hash identifier: rNh5z+ity6FQRgJ4TZAcYN/OT0zTbH9lslpa5c75xb0=
Subject key identifier: F8:CF:E1:8E:A0:42:4E:E5:40:65:7A:FA:F4:99:35:AB:26:03:9E:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CB3C9881B0CEE5DC94BEB40A0CBDFB24
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-M_hjqBCTuVAZXr69Jk1qyYDnh4.roa
Signing time: Fri 10 Mar 2023 11:16:31 +0000
ROA not before: Fri 10 Mar 2023 11:16:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:3c:98:81:b0:ce:e5:dc:94:be:b4:0a:0c:bd:fb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 11:16:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8cfe18ea0424ee540657afaf49935ab26039e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:89:21:7b:d9:6b:79:dd:3e:62:0b:20:0f:7a:
3c:ec:01:0a:6d:e7:6e:16:3f:88:76:51:f9:f9:40:
a1:1a:6d:82:58:85:ba:7f:6a:c9:8f:3f:6e:e0:95:
f1:11:14:cf:e0:f2:5f:66:c1:9f:ab:dd:c5:ed:a8:
02:2d:63:db:8e:8c:87:4b:95:9a:8d:59:9a:14:aa:
b5:48:ba:07:cc:a6:f2:e2:fe:1e:4d:1c:26:40:52:
96:30:46:c3:1c:96:41:8c:08:a8:b9:a0:40:0e:53:
f5:6f:95:91:13:9e:8b:09:b5:cd:b7:a0:c2:01:71:
c1:82:11:75:3e:aa:38:bd:4b:6c:93:d1:2a:ed:4f:
55:7a:4b:07:ca:89:01:71:8d:1f:46:0e:bc:93:4c:
f2:56:56:a3:31:68:a2:8e:00:56:be:c3:ca:74:4b:
41:e4:4b:59:2f:d4:fb:7b:b7:8f:70:5b:a9:e8:a5:
8c:c2:76:6e:3f:91:32:95:ec:a5:60:32:8f:e6:f4:
b5:c3:6d:5a:5a:fb:19:b4:40:fe:3a:49:6a:ea:06:
f6:70:d2:ed:37:27:0b:e5:59:d5:13:9c:a8:32:55:
17:5f:dd:ed:f2:7c:11:30:0a:a9:65:27:b0:71:b5:
d2:0f:a9:f8:45:56:65:d7:6c:92:ed:44:3f:e2:2c:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CF:E1:8E:A0:42:4E:E5:40:65:7A:FA:F4:99:35:AB:26:03:9E:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-M_hjqBCTuVAZXr69Jk1qyYDnh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:0f:2a:39:f7:96:19:ab:23:ca:17:59:9a:ef:b6:5e:59:1d:
8e:13:c4:9d:ab:3c:19:09:14:52:1a:4c:30:88:9a:a4:cc:20:
9d:8e:92:f6:67:43:48:43:df:27:63:09:bf:e6:45:89:53:b8:
b3:7c:b5:c7:0f:a7:e7:e7:6b:f9:7e:a7:c1:c4:68:a9:c1:7b:
64:6c:2e:5a:4d:af:73:d2:4e:cd:b3:22:88:a2:94:6e:58:30:
8d:85:1f:54:cf:60:ba:01:48:2c:b2:0c:ec:d9:a8:31:c2:f8:
cd:8e:f3:5f:2c:f9:fc:f4:ec:55:3f:8b:77:ef:45:66:22:a7:
3d:79:78:45:d2:b3:8e:9f:1d:bc:27:7d:1a:ac:eb:09:dd:9b:
5e:cd:1d:cc:50:cd:02:d6:85:9f:7e:fc:28:b3:3c:3b:a7:b7:
e2:07:cf:06:4f:b6:40:28:32:95:2c:92:84:2c:5e:b6:f2:97:
9a:32:91:bf:4a:e7:9a:e4:ff:87:a5:56:7b:65:75:3f:f4:27:
64:6a:5d:5c:eb:33:a5:71:5c:c3:13:77:52:17:eb:f1:d4:e5:
7e:70:bf:9e:b6:23:29:4f:d7:db:5e:01:9f:9c:43:7c:7a:e6:
4e:26:7f:3c:2a:2f:e6:0f:82:79:78:ad:ce:a6:e4:c7:13:ee:
f8:2f:42:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:16:19 2025 by rpki-client