Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-oTQnLU78cBDM_Vs72Vp0tjAopE.roa
File: 1-oTQnLU78cBDM_Vs72Vp0tjAopE.roa (raw, json)
Hash identifier: DXHyt3SdFCkTQZCTrsONWgy4yWVCs6qhSHlm/9H7kpk=
Subject key identifier: FA:84:D0:9C:B5:3B:F1:C0:43:33:F5:6C:EF:65:69:D2:D8:C0:A2:91
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187985AD2797C0CDFECA274CEB9D9E31759
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-oTQnLU78cBDM_Vs72Vp0tjAopE.roa
Signing time: Wed 19 Apr 2023 07:11:41 +0000
ROA not before: Wed 19 Apr 2023 07:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:5a:d2:79:7c:0c:df:ec:a2:74:ce:b9:d9:e3:17:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 19 07:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa84d09cb53bf1c04333f56cef6569d2d8c0a291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e9:0c:4f:47:8e:b4:b7:d1:d6:87:1f:b5:ab:
20:fe:e2:ac:fb:05:8f:58:2f:4c:e0:e7:64:d6:19:
26:cc:48:75:a9:d6:1c:50:86:88:71:b9:62:3b:04:
83:aa:8d:80:ec:0a:d8:8b:23:c0:51:72:4e:94:7f:
34:f7:9b:3c:da:f1:fc:b3:8f:41:71:0a:b4:c0:bc:
44:75:b7:92:b1:04:fd:fb:45:cf:6c:25:b7:67:ac:
1d:36:92:70:12:70:96:5a:eb:d7:16:93:67:e9:0e:
f7:51:28:56:1d:89:be:4b:12:2c:97:e0:46:18:94:
6c:8d:82:b1:b6:01:72:67:13:3a:df:a3:5d:d9:4a:
f9:3e:56:44:08:4e:7a:58:eb:34:1d:e7:68:47:db:
95:16:97:2c:ce:ce:22:37:11:50:d0:d5:be:ae:93:
22:56:45:3c:28:db:05:9b:bd:80:81:a2:57:39:15:
4f:63:ed:a7:95:a9:90:8c:5e:0b:8d:88:d0:0e:6f:
77:cd:8e:2b:f4:46:6c:63:08:78:d0:d4:e5:02:26:
9c:77:83:42:6a:41:d5:44:1f:de:8e:ef:8f:dd:8b:
2a:37:27:93:8d:39:c3:d4:ba:d9:e0:29:1f:6c:e2:
ad:07:36:8d:2c:32:c2:c1:be:09:8c:49:0f:b2:7a:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:84:D0:9C:B5:3B:F1:C0:43:33:F5:6C:EF:65:69:D2:D8:C0:A2:91
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-oTQnLU78cBDM_Vs72Vp0tjAopE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:33:e5:5d:85:85:a1:31:de:dd:2e:ef:d7:e0:c6:89:c7:71:
37:d7:de:72:b7:8b:c6:fb:85:57:5a:2c:9e:9b:25:a8:8d:67:
f4:a8:91:f4:4a:7c:53:56:75:89:76:91:ef:e1:4f:f9:a1:b6:
2c:d5:0c:ba:0e:6a:dd:1d:0a:12:8c:3b:02:7b:dc:ee:72:d6:
44:56:1c:ef:b3:df:0b:87:fc:06:a9:b8:c4:87:28:e0:a2:95:
ba:77:ac:de:4a:87:db:a1:72:00:53:8b:ab:72:72:c6:29:b4:
60:8c:e0:72:58:25:d6:d2:1a:05:13:cb:cb:a2:51:cd:d9:4d:
6e:7d:35:ca:d5:27:1d:e1:64:43:97:2a:b8:e9:c3:68:1a:28:
9f:1a:37:55:7f:e6:bd:04:e7:a9:84:2b:55:0c:a7:a1:80:4d:
91:c0:51:85:65:a4:9d:54:bc:89:64:ca:1b:b7:76:96:84:87:
19:40:ed:a2:b9:17:bc:d9:31:6b:95:cc:55:52:b9:f3:e9:9f:
41:11:db:fa:71:38:d6:31:ac:20:2e:ef:df:61:ac:2f:80:5d:
85:94:ee:22:d9:f7:8b:ad:00:81:a5:ad:b0:78:b7:82:08:d6:
c5:01:11:98:1c:2e:b9:2a:ed:2d:19:dc:1c:5d:06:f3:16:53:
bf:22:fd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:49:46 2025 by rpki-client