Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-t12o-LXPKs7bUEc4sRNTgejnPw.roa
File: 1-t12o-LXPKs7bUEc4sRNTgejnPw.roa (raw, json)
Hash identifier: IfVCMjG9My67QvqCAEG6anVlys63TqOrx/goAA0XVCo=
Subject key identifier: FA:DD:76:A3:E2:D7:3C:AB:3B:6D:41:1C:E2:C4:4D:4E:07:A3:9C:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CBD84EB7D309140482EE58F45C469828
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-t12o-LXPKs7bUEc4sRNTgejnPw.roa
Signing time: Sun 06 Aug 2023 17:14:58 +0000
ROA not before: Sun 06 Aug 2023 17:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cb:d8:4e:b7:d3:09:14:04:82:ee:58:f4:5c:46:98:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 17:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fadd76a3e2d73cab3b6d411ce2c44d4e07a39cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:86:95:e8:06:46:4a:b7:2c:41:0f:6e:a2:f6:
4d:70:cc:49:85:63:79:0d:5f:8b:0a:81:5b:ec:85:
a9:98:b0:27:e0:a8:1f:50:78:f5:07:2b:f2:30:01:
d8:99:4b:d4:93:fb:65:bd:b2:a8:30:6d:75:b6:41:
0f:5f:64:ea:f9:9b:e4:e1:16:b0:04:66:c8:32:96:
9c:5e:fe:4f:b1:81:bb:01:48:29:ef:d9:7a:5f:8f:
07:4e:71:24:85:9e:3d:6c:9f:ca:7a:2a:e9:38:de:
0b:51:18:9d:41:8b:2d:4c:bb:e2:43:e7:f2:e8:70:
6b:2e:15:b1:53:92:e7:7e:24:1c:75:b7:26:18:f5:
21:be:ba:01:09:96:19:d4:c7:3f:81:eb:40:45:ff:
88:c5:86:98:5b:25:f1:65:e6:d0:e1:7a:1e:49:3e:
6e:dd:2a:3d:91:35:2c:17:2a:18:37:60:57:18:4d:
4c:3a:69:b8:65:1d:d7:9a:ce:87:91:c0:0b:8d:6b:
32:5d:72:3f:1b:09:e2:c0:40:18:42:84:e3:45:07:
60:01:7a:18:f3:45:bf:78:59:22:34:9c:b9:39:6b:
67:07:b9:cb:b5:b4:d3:aa:78:1f:27:38:98:b8:62:
4a:4d:91:c0:fd:d5:31:be:bb:3f:1b:b2:89:b9:cd:
be:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DD:76:A3:E2:D7:3C:AB:3B:6D:41:1C:E2:C4:4D:4E:07:A3:9C:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-t12o-LXPKs7bUEc4sRNTgejnPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:3e:ec:27:e9:47:1e:76:b6:c9:ac:fc:a7:71:f9:9e:02:df:
ea:20:a1:62:a6:a7:f5:c4:2d:d2:ab:36:40:e1:d6:75:fc:82:
6a:23:76:84:9f:7b:54:72:71:49:39:34:cf:9c:4b:9b:80:c5:
2d:82:cf:e9:23:02:13:18:18:6a:05:0a:36:a8:73:6c:e8:bf:
12:68:a6:8e:60:c6:4b:b0:03:d8:6a:21:42:c6:4f:ff:41:b0:
ed:29:d5:74:df:69:bc:18:68:24:a8:e9:d1:41:fe:3b:ad:e8:
9f:4c:44:5b:4b:f0:90:27:14:79:33:38:38:a2:47:1d:ef:c9:
53:0d:ad:66:e9:e9:ff:c9:1e:ff:2b:b4:8f:1a:a1:84:56:a5:
a5:4e:31:bf:02:09:da:cd:6d:9b:a5:b3:69:48:b8:1e:aa:34:
5c:7a:35:36:41:12:44:86:48:a7:f6:1c:1d:02:e9:96:5e:65:
4b:fb:e4:4f:4f:53:df:1c:1f:4a:ee:c5:50:d7:39:9c:86:10:
3c:6f:e7:29:dd:3d:68:09:7f:83:a5:c7:97:69:d4:73:34:7b:
10:af:3d:c4:72:70:b7:74:f5:dd:f8:f0:af:fb:b7:3d:d2:0d:
b8:d2:9d:49:84:e7:bc:0b:2c:6f:2f:01:a5:4b:a3:92:d6:77:
6a:0a:2a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:09:22 2025 by rpki-client