Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-w-ywsUzRKi8ld93dcFoFcIUyvU.roa
File: 1-w-ywsUzRKi8ld93dcFoFcIUyvU.roa (raw, json)
Hash identifier: PGUC5YfIz8HLPRPLB9v+6i1uSXUDLY1b+lzCMqmD7rI=
Subject key identifier: FB:0F:B2:C2:C5:33:44:A8:BC:95:DF:77:75:C1:68:15:C2:14:CA:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A11B4B0C795F39F494C618D2FA473E1B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-w-ywsUzRKi8ld93dcFoFcIUyvU.roa
Signing time: Sat 29 Jul 2023 10:04:27 +0000
ROA not before: Sat 29 Jul 2023 10:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:a11b:27c2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a1:1b:4b:0c:79:5f:39:f4:94:c6:18:d2:fa:47:3e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 10:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb0fb2c2c53344a8bc95df7775c16815c214caf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:61:92:26:fe:23:e8:0c:39:c8:a2:a8:01:
fb:96:a8:d5:ba:c0:0b:a9:ad:d0:51:16:15:38:e0:
20:61:e3:0c:11:e1:22:70:e6:76:ea:8b:24:d7:1f:
fd:b2:7a:88:48:5e:2e:27:62:b5:9e:ab:63:81:43:
07:76:a3:df:4f:86:95:37:35:d0:f1:ba:c6:90:8a:
c9:d9:16:01:af:cc:0e:4c:aa:dc:dd:66:27:fd:f4:
7c:ed:16:45:65:fc:26:46:73:09:ee:a3:1f:e7:6c:
5a:99:ab:9c:24:86:96:39:5f:e0:c2:c4:c8:50:27:
03:e7:73:37:cf:f9:12:34:68:ca:32:f1:33:fc:6c:
e1:cf:79:6e:4f:da:3b:5b:73:15:53:50:a1:73:df:
2b:ba:84:39:d3:5f:67:5d:68:55:ab:91:a2:8f:c3:
63:2c:b9:43:fa:3d:c2:18:51:24:f0:53:31:f9:7e:
dd:82:29:ee:33:76:65:a3:ee:66:94:11:3a:d5:e2:
6a:60:89:62:d0:2d:b5:07:7f:67:40:e8:f9:7a:12:
a6:8f:19:21:5a:5d:8b:90:e2:fa:ea:08:ca:73:60:
4f:60:d3:57:30:f9:f4:53:87:43:80:f6:f4:e0:e3:
75:c4:a2:04:3b:97:07:fa:3a:bd:7c:49:4e:0f:ed:
ac:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0F:B2:C2:C5:33:44:A8:BC:95:DF:77:75:C1:68:15:C2:14:CA:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-w-ywsUzRKi8ld93dcFoFcIUyvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:31:52:f7:62:63:df:8e:ef:6f:0b:03:d5:fe:50:ae:8d:80:
d9:2d:22:d2:23:84:fe:dc:1f:9d:41:d6:c4:4e:4e:2e:0a:04:
2b:ae:86:1d:c8:e8:a9:14:4e:b8:85:69:e3:94:68:14:40:73:
1f:10:2e:11:4c:76:14:51:e6:48:4c:98:bc:6e:94:04:b1:15:
e9:37:e6:b8:cb:65:9e:eb:79:3d:ce:5f:91:af:95:64:e7:70:
10:2b:c8:3b:79:c0:45:96:bb:be:60:9f:c5:46:2d:57:6d:3b:
4c:32:c9:10:8b:35:61:07:f1:2c:e0:36:48:19:07:61:49:ad:
8a:68:c6:b0:ce:24:b7:00:31:4a:8c:58:44:fc:c5:67:95:8d:
a0:08:29:d4:f5:15:b1:9d:34:2a:2d:73:68:f6:b6:82:34:80:
e7:f9:d2:fe:88:11:47:81:0c:08:1c:e2:f9:33:59:6a:dd:da:
d7:a1:8f:96:fa:7e:07:0d:87:39:1e:c3:3a:e8:4b:3b:61:b6:
af:4e:a9:a8:ec:86:ba:f5:b7:9d:1e:a6:ae:15:da:2b:a6:fb:
90:23:6b:dd:81:d6:90:e3:28:65:15:cc:16:d9:ef:30:d6:2b:
20:c5:8d:85:f2:71:d4:49:cb:b7:9c:54:17:a0:3e:11:cf:0d:
5e:e3:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:40:57 2025 by rpki-client