Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-hYk5eeq34Qre8teObY74yXJYFA.roa
File: 1-hYk5eeq34Qre8teObY74yXJYFA.roa (raw, json)
Hash identifier: uqae0RdcESga7ZT8cm7JcHA4wQQbaf5O1CyYXF2/qo4=
Subject key identifier: FA:16:24:E5:E7:AA:DF:84:2B:7B:CB:5E:39:B6:3B:E3:25:C9:60:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018936769D0FF2FF300551DE2DCB9C5ED15E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-hYk5eeq34Qre8teObY74yXJYFA.roa
Signing time: Sat 08 Jul 2023 17:04:50 +0000
ROA not before: Sat 08 Jul 2023 17:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:189:3676:108b/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:36:76:9d:0f:f2:ff:30:05:51:de:2d:cb:9c:5e:d1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 17:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa1624e5e7aadf842b7bcb5e39b63be325c96050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:bc:29:fb:d7:39:22:7f:94:f5:02:6b:c8:88:
36:43:ba:4f:76:fd:f6:27:5e:e0:a0:70:2e:28:60:
74:e8:68:59:d9:c2:e0:95:40:f8:e0:f0:9b:08:f4:
5f:d6:05:47:04:3d:df:24:fa:64:c8:99:20:7b:5d:
98:a0:0b:30:f5:62:49:d5:ad:6a:43:ab:1e:d6:c2:
c4:f8:3a:d8:43:20:35:93:fa:f7:1f:b6:fa:eb:49:
db:4a:22:5a:6b:9b:fd:e9:6e:f5:fb:37:2f:42:77:
11:54:91:d9:a2:34:9f:1e:56:e6:5c:7c:0f:7e:ec:
70:b0:36:12:90:83:87:d8:1d:9c:60:9f:db:e4:17:
59:31:44:0c:4e:9a:b3:84:3c:c5:4f:9e:3e:0f:bd:
07:22:fd:12:66:58:12:a4:8c:fe:af:0e:68:de:91:
3c:19:13:bb:76:c0:95:13:dd:b3:45:ce:ba:cc:ee:
b4:fb:41:0a:52:06:16:c8:98:2d:ed:34:6b:12:20:
6d:9c:66:70:77:a5:0e:57:5c:dc:d6:29:be:a5:0d:
5d:7a:83:37:b8:c8:46:38:a1:64:30:8b:36:76:e6:
5d:ab:d5:2a:86:49:27:37:3b:3c:e5:ce:44:b0:5b:
29:ae:20:78:6b:c0:01:93:69:b5:c5:39:02:95:66:
d4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:16:24:E5:E7:AA:DF:84:2B:7B:CB:5E:39:B6:3B:E3:25:C9:60:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-hYk5eeq34Qre8teObY74yXJYFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:75:51:8c:47:89:a6:1e:99:37:56:d8:09:60:d2:50:da:1f:
d5:0b:14:db:28:f4:f2:47:c4:1f:ba:45:6d:bb:63:35:80:b6:
fc:97:79:9a:5a:c2:b3:18:fd:20:49:f1:2d:2f:42:aa:55:1a:
82:34:41:77:a4:c3:6a:92:2a:8a:67:d7:59:d4:26:0e:8a:36:
5f:5b:be:15:93:f4:08:01:4f:50:14:dd:3e:cf:b8:2e:ac:a7:
31:79:b0:b4:23:05:2b:42:22:ce:05:1d:04:04:1a:e1:8b:5d:
9e:e5:95:dd:e4:27:3d:41:cb:17:ec:ff:7d:31:0e:b2:c5:cf:
0a:1c:22:0b:86:c4:9f:0f:1b:bd:76:dd:13:e5:b2:57:98:1e:
91:47:63:dc:cf:b5:b3:1e:4d:88:81:a6:2a:6e:2e:aa:8f:43:
7b:e6:d0:98:61:55:4b:2c:f2:fb:d3:e9:1b:2f:b1:80:bf:85:
98:52:ba:fc:7f:97:bf:25:87:df:ab:87:71:74:bb:83:e0:46:
37:01:af:b3:d7:08:cc:bd:46:f2:61:bc:8d:7e:39:74:05:f6:
3b:8c:97:48:bb:eb:7c:d1:bc:88:ef:d8:bc:4c:0b:15:fe:d7:
7d:2b:06:44:77:a6:cb:5e:fd:35:f4:ed:60:26:d4:9e:f7:ea:
fe:d1:d8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:23 2025 by rpki-client