Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1BJ0TWHm_Zqtth3TeGDYHmHzkjs.roa
File: 1BJ0TWHm_Zqtth3TeGDYHmHzkjs.roa (raw, json)
Hash identifier: gEsAtAwO0NdrpKik4ORhi9UPzKLpanVld6xFlQbYM5I=
Subject key identifier: D4:12:74:4D:61:E6:FD:9A:AD:B6:1D:D3:78:60:D8:1E:61:F3:92:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876B135811136A79A10AB135027D85CD53
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1BJ0TWHm_Zqtth3TeGDYHmHzkjs.roa
Signing time: Mon 10 Apr 2023 12:10:42 +0000
ROA not before: Mon 10 Apr 2023 12:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6b:13:58:11:13:6a:79:a1:0a:b1:35:02:7d:85:cd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 12:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d412744d61e6fd9aadb61dd37860d81e61f3923b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:d5:d8:00:19:49:a4:7c:b2:04:c3:9d:d1:
32:c4:e5:5b:dc:f0:e5:ee:f0:b4:19:cf:3b:ff:c0:
c9:f5:81:7b:46:6a:38:d5:0b:2e:96:a0:61:7b:a4:
e0:a6:fb:9b:ac:13:f6:f1:d1:96:c5:5c:fb:a1:10:
c1:30:9d:8a:85:34:bd:32:f6:97:d0:00:ec:b2:ae:
f1:7e:3f:cb:6b:20:0c:2e:45:df:ba:7e:be:a6:35:
f3:e1:71:f8:72:39:35:66:73:a1:11:3f:e7:74:fd:
53:1d:98:ce:9b:40:e7:4b:dd:cf:ef:b5:70:26:f0:
f7:e9:b7:84:ad:45:bb:c6:bc:dd:2e:37:04:a9:e1:
2f:71:e3:9b:0d:d6:5c:43:8c:17:c5:69:75:e5:be:
63:71:e8:ab:e7:0a:bd:85:3f:13:b4:55:2c:5e:15:
20:b3:f5:8f:b9:17:4a:6a:cf:90:26:d6:32:e3:a4:
16:d1:e5:45:e2:fd:2e:ca:66:bc:cf:d3:87:8e:f2:
c7:4f:b0:63:65:ea:80:2c:c4:ce:e9:0e:f3:cf:48:
8a:00:cd:c4:61:ff:b4:43:4e:cd:07:85:21:bc:fa:
88:4e:a9:71:0e:02:53:c9:5d:b0:ee:17:76:57:45:
98:88:3f:55:77:82:8c:78:b4:47:53:e3:dd:9a:a0:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:12:74:4D:61:E6:FD:9A:AD:B6:1D:D3:78:60:D8:1E:61:F3:92:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1BJ0TWHm_Zqtth3TeGDYHmHzkjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:cb:89:1e:d0:91:47:dd:bb:b2:92:c2:97:64:a3:96:3c:cf:
40:42:14:b3:8b:14:58:ba:94:55:1d:d8:c9:5c:5c:70:50:82:
ec:43:f9:c5:90:d1:27:43:bc:49:aa:f2:3b:17:c2:67:37:38:
da:70:7b:73:83:69:fc:28:3c:57:d6:0c:90:b3:8a:42:17:8e:
a9:40:77:c6:d0:73:0a:d0:ac:d4:7f:99:1c:0f:8f:6b:b1:c9:
14:ec:53:25:37:f9:76:a5:f3:d2:a6:c0:7d:8a:c7:ff:60:82:
b3:1e:9c:17:57:ca:29:db:11:0b:9f:d4:68:35:5d:ba:6c:45:
77:fc:2c:b5:e7:77:28:f6:08:2e:57:66:a2:17:eb:f3:7b:1f:
aa:37:29:ae:76:87:d2:f5:69:06:b0:a9:2e:4e:57:a5:86:c5:
4c:cd:14:5d:fd:22:60:9d:72:aa:36:0e:61:69:97:5a:5f:bf:
08:74:04:dd:e4:f3:0f:fe:1f:43:59:a0:16:68:ce:23:e9:35:
24:7e:1f:bc:e5:68:b8:cc:36:da:47:aa:f4:f1:89:7a:70:24:
a0:9b:ad:d6:b1:88:62:ec:f9:cc:42:df:eb:b8:28:95:4b:52:
d1:05:0f:19:98:17:3b:13:1c:f6:e7:ab:bb:ff:cf:21:e3:22:
b8:84:dc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:36:49 2025 by rpki-client