Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ijDBOuZM9CQ5geH4mo43EXFXrU.roa
File: 1-ijDBOuZM9CQ5geH4mo43EXFXrU.roa (raw, json)
Hash identifier: l7JwNelN+xevyujLMBGeOH8whDuQLS6NIy/O/2olsus=
Subject key identifier: FA:28:C3:04:EB:99:33:D0:90:E6:07:87:E2:6A:38:DC:45:C5:5E:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872E932A7D43075BD724F993709FB41E07
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ijDBOuZM9CQ5geH4mo43EXFXrU.roa
Signing time: Wed 29 Mar 2023 18:13:29 +0000
ROA not before: Wed 29 Mar 2023 18:13:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2e:93:2a:7d:43:07:5b:d7:24:f9:93:70:9f:b4:1e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 18:13:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa28c304eb9933d090e60787e26a38dc45c55eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1f:7b:87:fd:4e:5a:fc:60:32:50:66:f2:32:
1f:12:9d:ec:9f:14:ef:d5:88:6d:28:a2:3b:1e:ca:
73:6b:eb:4d:32:1d:b1:fc:26:2f:5e:83:84:1b:5d:
d6:fc:b0:d3:8d:71:d4:e6:a1:9d:16:34:fc:2b:34:
0f:58:9e:92:00:b4:be:4c:6c:33:72:a6:dc:d0:f3:
47:65:96:89:1e:15:9c:00:7c:1f:3b:35:a6:ed:be:
d1:99:ad:d5:dc:c5:45:55:5b:04:5e:fa:92:90:c8:
da:41:be:5a:39:c6:1d:33:bb:61:89:a4:4b:8e:bf:
23:68:9f:57:8b:10:f4:19:1b:9c:e7:9e:21:66:bb:
92:aa:f0:dd:32:3b:11:f0:aa:f4:17:89:c9:60:60:
7f:19:21:f9:ed:70:09:e4:77:26:99:9f:a0:93:da:
82:ca:83:04:3c:eb:48:67:2b:d1:2a:78:c4:de:03:
b4:4c:75:c7:59:a8:95:d7:ae:b0:51:02:bc:88:d3:
4b:42:5d:23:aa:0e:d7:27:ed:95:5f:c6:87:68:ff:
4a:03:00:9b:96:4f:82:fd:82:66:be:96:99:63:bc:
fc:7a:c9:4d:26:33:88:a9:1f:d1:7b:11:51:83:6f:
de:20:78:20:bf:d1:15:25:ed:69:1a:f1:68:99:1d:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:28:C3:04:EB:99:33:D0:90:E6:07:87:E2:6A:38:DC:45:C5:5E:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ijDBOuZM9CQ5geH4mo43EXFXrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:28:e6:18:7e:64:4a:2f:31:85:dc:e4:f1:34:37:ee:87:98:
61:17:81:8f:9f:bb:73:af:ef:26:ff:db:e1:c7:c4:e2:92:d2:
da:78:25:bf:a7:c7:cf:9d:07:e7:a8:c2:30:89:cc:cc:97:6c:
eb:d5:dc:97:1a:55:43:12:c3:3a:94:fe:1f:d3:1b:b9:ad:d4:
b6:5c:94:1c:9e:85:a4:18:0a:ba:f8:c0:a9:e9:14:ff:c6:21:
ef:62:04:40:b6:f8:aa:e1:1e:a3:c2:84:91:ac:6a:0c:54:11:
5a:06:11:68:64:2c:bb:c4:14:08:7b:5f:fa:09:44:24:f3:fa:
4c:d3:7d:c2:33:52:56:25:07:8d:88:6f:3a:c5:e5:f7:67:a3:
85:1c:d6:a2:06:17:b1:fc:f2:17:23:f0:6f:c6:8a:9d:71:3a:
3c:c4:b4:f6:d5:6b:a5:b1:60:81:54:46:be:67:7a:8f:86:4c:
08:c9:ca:0c:36:fb:38:14:f1:5d:63:dd:b9:4a:40:dd:b9:4a:
a1:84:5b:1a:62:0a:9d:29:ee:ee:d8:0c:57:54:b2:01:fa:fa:
8c:f2:b1:00:03:f6:44:8c:8e:c1:c9:90:95:e3:dd:b3:ff:b6:
b9:fc:6a:d4:bf:bd:e8:76:c2:b9:01:ad:ff:5a:49:bc:d9:5a:
2a:01:76:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:33:15 2025 by rpki-client