Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-NYcyWg4zRjnqD0OWCgidKcujtA.roa
File: 1-NYcyWg4zRjnqD0OWCgidKcujtA.roa (raw, json)
Hash identifier: mvmjVghTUIQtaIfN/RW7BwgFi3OdABydA0JQAqhGH1g=
Subject key identifier: F8:D6:1C:C9:68:38:CD:18:E7:A8:3D:0E:58:28:22:74:A7:2E:8E:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A077DE0E533A9B9643650B4EF08E0B2DF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-NYcyWg4zRjnqD0OWCgidKcujtA.roa
Signing time: Fri 18 Aug 2023 07:13:24 +0000
ROA not before: Fri 18 Aug 2023 07:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:7d:e0:e5:33:a9:b9:64:36:50:b4:ef:08:e0:b2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 07:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8d61cc96838cd18e7a83d0e58282274a72e8ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:1a:72:ad:bd:76:be:db:68:97:d2:99:47:
3b:69:da:78:11:bf:bd:ee:7b:a6:3e:b2:e9:26:2a:
8f:76:ae:56:37:f5:9d:7e:df:00:22:7d:53:91:af:
67:49:80:00:d1:ad:61:bc:21:b1:35:2d:43:5e:cf:
a2:11:f2:cb:11:90:4d:99:5a:8c:d0:55:fa:6c:2b:
b2:6f:36:51:23:84:8f:fb:cc:ee:89:ce:7a:6d:c6:
11:ba:97:ca:d7:d4:3b:db:4b:3e:e8:35:0d:79:db:
09:a2:22:a0:68:ab:9c:98:38:a1:52:1c:ff:af:a5:
b1:86:42:03:d2:b9:b6:c6:e6:8d:ea:eb:4e:a5:c2:
00:0b:27:e5:f9:c7:27:33:40:04:9c:6f:74:f9:cf:
7d:f8:8d:f4:5e:b6:56:94:bd:fb:fe:a5:2b:80:15:
91:b7:a7:36:ce:37:ae:6f:aa:53:4f:b7:05:f0:30:
90:0c:b0:2b:1d:8b:3b:7f:48:2b:73:36:a4:42:46:
eb:f1:f8:97:65:9c:9a:47:3f:48:0b:7e:4b:6d:c6:
ed:fa:1c:8e:22:31:62:db:ff:4b:eb:79:b5:28:3b:
47:62:8e:8a:75:14:b7:52:cd:9e:d2:c3:3c:1a:64:
0a:2a:f7:77:48:90:31:ed:0a:a1:aa:f0:82:71:6f:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D6:1C:C9:68:38:CD:18:E7:A8:3D:0E:58:28:22:74:A7:2E:8E:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-NYcyWg4zRjnqD0OWCgidKcujtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:0d:3e:cf:06:e6:61:a5:c7:01:56:a0:13:af:7c:25:6d:b5:
fd:19:28:1d:d0:9a:cb:b7:e7:4f:a7:fb:58:80:61:4d:ec:7e:
b4:fb:7e:08:6f:12:36:fb:e9:ed:aa:ea:04:04:ae:3e:e2:00:
c6:3a:ff:91:f6:02:e6:7c:e6:8f:5f:f2:00:9e:c1:01:09:0d:
68:9f:7c:69:86:28:01:5d:92:fa:c6:34:20:cb:05:e2:b1:72:
f4:d9:92:1c:d0:34:84:b1:88:31:9b:5d:a7:ea:c9:9e:3a:52:
b0:a3:8b:12:f6:ad:5b:93:71:b6:28:5c:34:ef:aa:d1:98:5d:
17:40:34:a9:c5:6e:d0:09:28:58:63:4a:28:40:e1:c6:bf:31:
fb:74:82:df:7a:33:93:9b:bb:27:a0:3b:d0:3a:87:46:73:04:
9d:2a:d2:a1:4e:9c:de:51:05:88:2c:82:e6:4d:e7:65:c7:2e:
4c:c3:53:de:db:4b:3c:5d:f3:6e:a0:84:12:c8:d5:aa:e1:1c:
51:e3:57:b9:f8:cb:07:3a:50:a5:32:41:8f:9f:5f:23:92:b0:
53:1f:0b:32:78:f7:00:6b:e8:c7:13:5c:8f:5f:c8:bb:be:98:
98:63:85:58:a0:e8:29:19:12:e5:98:e2:77:26:b3:95:f7:3d:
1d:ea:21:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:03 2025 by rpki-client