Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-mXHJ4Xfrkh2DXqmhhjf5TlVnqo.roa
File: 1-mXHJ4Xfrkh2DXqmhhjf5TlVnqo.roa (raw, json)
Hash identifier: WCjscGQ8pMdmH4/iqu7dq95VZ6RtbewZQeYqkuWZ2/Y=
Subject key identifier: FA:65:C7:27:85:DF:AE:48:76:0D:7A:A6:86:18:DF:E5:39:55:9E:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189939D009B7716E04F443ADB1DBCEAAD5A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-mXHJ4Xfrkh2DXqmhhjf5TlVnqo.roa
Signing time: Wed 26 Jul 2023 19:11:27 +0000
ROA not before: Wed 26 Jul 2023 19:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:93:9d:00:9b:77:16:e0:4f:44:3a:db:1d:bc:ea:ad:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 19:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa65c72785dfae48760d7aa68618dfe539559eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f5:f7:1b:6c:db:70:42:94:c7:f5:f5:35:c2:
03:71:66:a4:3b:89:1c:12:c2:5d:ff:fc:cb:61:f8:
f8:d4:05:45:d3:18:13:68:a6:b4:5a:ad:f3:11:19:
90:66:4d:66:4f:a1:41:1a:36:03:22:6b:ba:81:fc:
c6:b6:8c:b0:65:cb:87:04:7d:bf:0e:3e:37:ab:7b:
be:cd:8b:91:92:e7:31:48:f8:69:9b:7e:92:e3:c2:
ee:dc:9f:12:e7:f0:6f:82:7e:0b:bb:21:db:9e:31:
83:3a:de:97:df:35:e9:bc:63:63:98:a6:e0:f6:f0:
4a:02:1f:3d:db:eb:dc:2d:98:d0:75:77:84:f4:cc:
f3:12:54:07:95:f0:85:fa:02:9b:cb:1d:72:4c:26:
ce:17:1d:7a:8d:22:65:00:c2:ee:55:b2:5b:45:32:
f3:5d:e5:71:e2:39:0b:00:85:11:2f:68:18:ac:68:
94:cc:0c:9f:ee:b1:4d:37:e1:fc:1c:03:43:08:88:
58:b4:d5:f8:14:ce:c7:4c:50:f8:8f:c2:e7:b8:8d:
d6:6c:a3:45:97:bf:69:17:50:71:c1:a8:5d:58:94:
60:9a:8e:fe:d1:f6:6c:35:51:eb:9e:6a:c6:ff:42:
87:49:3e:7b:c0:35:bf:9e:dd:b0:50:a9:50:9d:cb:
ab:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:65:C7:27:85:DF:AE:48:76:0D:7A:A6:86:18:DF:E5:39:55:9E:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-mXHJ4Xfrkh2DXqmhhjf5TlVnqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:47:f8:9f:1f:41:1d:4b:fe:11:96:59:3a:c9:06:63:82:24:
97:83:03:e9:5f:04:07:fc:91:d5:ba:70:a8:b1:3e:70:76:fb:
73:5f:62:2c:dd:ea:4f:f4:4a:2a:ba:dc:3d:1b:1c:0d:4a:3d:
6b:3e:c7:72:ff:ba:28:82:6f:28:88:1c:fa:cd:df:bb:12:9f:
86:04:16:70:30:22:ee:8b:7c:93:c7:bb:5f:2b:53:ee:52:9a:
8e:8f:17:6c:e2:1b:59:98:b4:97:a1:18:e9:1a:7f:e7:1c:e8:
40:50:dd:f4:26:18:10:06:63:a1:c5:b6:79:21:6c:eb:09:19:
57:20:39:f0:1b:1e:98:12:b0:aa:5e:88:42:78:5b:16:24:51:
fc:92:79:0a:31:da:d7:3d:20:d3:ca:f4:09:67:db:04:57:53:
30:d0:07:7e:80:45:b2:7d:12:96:cb:74:f4:46:6c:b2:bb:02:
b1:de:b1:16:3f:64:b8:a8:1c:c2:58:f8:f7:bf:19:8f:3d:4e:
13:ed:88:97:78:71:60:27:da:8b:aa:e9:3b:8a:35:08:d7:ff:
11:89:e4:12:73:5e:fb:84:8c:3d:f8:ba:97:ff:b2:f2:23:0c:
20:7c:94:46:0e:37:e6:a9:f9:79:e2:06:95:b6:16:1f:28:03:
65:62:7d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:27:41 2025 by rpki-client