Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/18PdjTNIBD-ZwKZj3UZ31fIUdkk.roa
File: 18PdjTNIBD-ZwKZj3UZ31fIUdkk.roa (raw, json)
Hash identifier: Gnw2OKkjJtLlrIMYW5l1e8tqkAZl7Qwa4UJqSTuFxqg=
Subject key identifier: D7:C3:DD:8D:33:48:04:3F:99:C0:A6:63:DD:46:77:D5:F2:14:76:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018745EEDCAC3D7029EFB6D251E856A40B23
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/18PdjTNIBD-ZwKZj3UZ31fIUdkk.roa
Signing time: Mon 03 Apr 2023 07:04:54 +0000
ROA not before: Mon 03 Apr 2023 07:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:45ee:96b2/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:45:ee:dc:ac:3d:70:29:ef:b6:d2:51:e8:56:a4:0b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 07:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7c3dd8d3348043f99c0a663dd4677d5f2147649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ac:b1:66:3b:17:60:db:fe:d4:3b:d7:46:26:
3d:70:3c:87:f8:05:cc:58:47:a6:0b:ac:c5:fd:af:
15:58:2f:2e:92:74:f0:0d:36:29:5e:85:94:f7:8a:
b9:be:5b:16:cb:aa:2f:be:b3:1c:2e:50:08:a0:ff:
5d:47:e3:b6:2a:eb:19:7f:b6:5c:be:6c:34:16:3b:
32:35:fd:3f:c8:2a:0d:d8:0f:79:da:48:e1:9d:ea:
09:e2:37:d9:5f:d0:6a:7f:57:12:19:38:f7:f1:76:
42:5b:20:dd:ff:21:1c:bc:62:19:48:21:ce:5f:20:
45:37:52:6e:a7:df:a3:35:43:9c:9d:b8:28:d6:9c:
dd:21:a2:a0:65:30:d1:c1:9c:49:e6:f4:92:46:e3:
f7:83:3b:19:34:74:54:be:34:85:6a:7b:58:d8:c9:
79:46:d0:5c:27:74:be:e3:e5:4a:3f:c2:77:59:7d:
85:aa:60:57:c0:98:49:5a:6c:6c:08:73:9c:ec:ca:
58:fe:99:91:ea:79:3b:7a:99:10:89:28:ec:65:70:
8b:73:f0:a5:28:ea:0b:4d:28:6f:ad:bd:ee:2b:82:
ae:25:59:c9:dd:2d:7c:41:28:db:66:bb:a8:b2:cf:
3e:c1:da:13:f3:bc:f6:a3:2a:73:7c:a8:6e:c2:eb:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C3:DD:8D:33:48:04:3F:99:C0:A6:63:DD:46:77:D5:F2:14:76:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/18PdjTNIBD-ZwKZj3UZ31fIUdkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:79:c4:85:af:af:ac:de:c8:42:43:2e:77:48:78:3d:3b:2a:
93:f7:26:b2:4f:90:73:36:c2:4e:07:b8:38:54:b6:e7:13:ea:
fc:52:34:30:c7:0e:a3:fb:2a:89:18:cb:60:c7:4a:92:76:95:
79:66:b2:78:e7:7b:c8:c8:0d:ba:7c:f8:5a:a7:89:43:9a:1f:
83:6e:89:81:b9:82:78:6e:38:bf:8a:e0:ce:42:1c:04:81:44:
7b:4b:10:58:f2:1c:14:90:59:30:3a:1b:40:59:59:cc:b3:1e:
26:23:d2:21:e2:bd:9e:4a:bf:1e:b5:4e:b1:63:08:cb:55:ca:
d0:bf:5e:8c:ef:5f:9c:41:e7:a6:b0:a3:22:d4:f0:89:bb:f0:
15:04:1c:d0:b1:e4:ec:96:2a:2a:25:a2:0c:15:f5:09:34:61:
6c:34:d0:67:88:ce:cd:6f:d6:19:96:68:42:bf:c1:33:68:4e:
78:f0:d0:f4:1a:2c:e7:09:1d:5e:b5:7a:ae:ee:fb:11:0b:fd:
4e:69:7d:fe:ad:10:c2:a7:42:b8:3d:2b:c5:45:9d:d8:8b:5a:
a2:1a:99:0b:a7:62:a3:84:45:de:12:a7:78:c2:de:ec:30:f4:
6a:a1:1f:d3:0a:11:b7:9b:b5:49:2f:53:f3:3d:28:3f:dc:a8:
42:5d:f9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 18:18:04 2025 by rpki-client