Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/170NrO8m_m4Ii4hRPtgwjKFaZ50.roa
File: 170NrO8m_m4Ii4hRPtgwjKFaZ50.roa (raw, json)
Hash identifier: ad2QZT2Me/ixrKJfqZ5JQhdkjEVPCPL2UqI70JN+uUc=
Subject key identifier: D7:BD:0D:AC:EF:26:FE:6E:08:8B:88:51:3E:D8:30:8C:A1:5A:67:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DA2F95F2133AF13EF00B01C2AC326F97
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/170NrO8m_m4Ii4hRPtgwjKFaZ50.roa
Signing time: Wed 09 Aug 2023 12:04:58 +0000
ROA not before: Wed 09 Aug 2023 12:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:da2e:de8e/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:da:2f:95:f2:13:3a:f1:3e:f0:0b:01:c2:ac:32:6f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 12:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7bd0dacef26fe6e088b88513ed8308ca15a679d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:8d:a6:92:6c:b7:1e:13:17:55:b4:42:b5:
69:7f:b4:e1:75:42:b7:69:20:82:e6:59:b3:bc:be:
60:87:13:69:4c:4b:ef:08:50:eb:c6:4c:33:2c:61:
cb:72:4a:6e:ab:f0:b8:27:94:59:99:e3:9a:b7:7c:
dc:9e:9d:7b:ed:f0:b1:e8:e5:a1:80:a1:0a:65:44:
f9:a3:91:15:bc:ff:24:ab:d7:92:36:d1:d6:ce:70:
f1:53:12:e9:50:45:59:2e:49:43:88:e1:b8:0d:bb:
e7:55:b0:39:ff:5f:c4:18:61:a8:08:97:14:4f:ba:
f6:35:fb:8c:46:73:c5:71:48:fd:4d:99:4a:1f:8f:
35:53:e4:5e:97:b8:a4:15:29:41:e5:f4:ae:ee:1c:
4e:63:01:aa:69:ee:7c:6c:65:4f:56:0c:70:1a:2a:
d5:51:d3:e8:fa:ae:6a:8d:b0:94:cf:f1:64:23:e5:
ad:3f:e8:91:f3:94:99:dd:0c:90:d6:ad:b2:74:10:
31:e1:bb:f6:af:46:e1:7e:3b:6a:c9:32:8c:25:5d:
84:58:03:23:36:aa:40:9f:59:27:8a:f7:5f:e5:50:
5a:86:41:90:a1:4a:e3:70:ee:04:90:8f:ec:7e:d0:
f0:ce:29:cf:08:56:e2:ec:07:a0:d7:e4:0d:92:11:
9e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BD:0D:AC:EF:26:FE:6E:08:8B:88:51:3E:D8:30:8C:A1:5A:67:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/170NrO8m_m4Ii4hRPtgwjKFaZ50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:3c:9c:68:dc:d6:0f:18:1f:25:32:5e:7a:50:b5:90:bc:1b:
f7:e3:d7:d6:c5:40:cc:e3:77:4d:45:b3:3a:29:2a:fd:86:c4:
fc:99:e6:be:2a:99:01:33:bd:7e:9e:fe:01:47:25:9e:92:28:
3f:ff:5b:3f:48:37:6f:9b:f2:c0:32:46:68:d8:53:c6:ec:28:
1b:ff:d4:49:dd:60:65:48:7b:64:24:67:a8:70:e9:a5:82:c7:
4c:30:09:da:18:2a:4c:4c:9c:4b:2e:0a:d9:82:d2:b7:36:a1:
c6:a8:48:a4:d1:19:6f:6f:2d:53:de:39:04:dc:8a:e3:86:47:
ca:cf:3c:3e:ad:2e:a5:27:4c:77:4c:6b:32:e0:e8:e5:87:ef:
e5:ee:55:03:12:c8:dc:40:98:40:3a:8f:5d:7a:e6:21:e7:1c:
ec:3a:1d:10:38:8e:6f:03:0b:08:8a:60:09:b5:78:1a:d6:ec:
6a:0a:db:bb:cc:de:a7:c2:81:bf:84:ae:3b:31:2d:b5:7d:82:
77:68:02:57:8f:c7:79:f7:69:49:37:ee:d4:2e:47:9a:13:3c:
7b:03:96:61:92:45:d1:a7:6d:83:1b:bd:91:dc:9b:dd:08:c3:
05:6b:15:c2:ba:8a:b0:23:05:fc:26:b8:b2:0d:7d:2d:07:7c:
19:2b:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:50:38 2025 by rpki-client