Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1Q2VLGmOPzMvIt2XHrBxFmANLbI.roa
File: 1Q2VLGmOPzMvIt2XHrBxFmANLbI.roa (raw, json)
Hash identifier: 890vTS4NMV85X3u/LqH0jxl7gbaZX8roSVEaDT4tdrE=
Subject key identifier: D5:0D:95:2C:69:8E:3F:33:2F:22:DD:97:1E:B0:71:16:60:0D:2D:B2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869295A624D11A9E70DCEB490CC24DB2C0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1Q2VLGmOPzMvIt2XHrBxFmANLbI.roa
Signing time: Mon 27 Feb 2023 11:15:26 +0000
ROA not before: Mon 27 Feb 2023 11:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:95:a6:24:d1:1a:9e:70:dc:eb:49:0c:c2:4d:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 11:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d50d952c698e3f332f22dd971eb07116600d2db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:04:f8:41:7a:cc:eb:6b:f0:9a:a8:e9:e2:d0:
f8:94:3c:c4:f7:06:b8:87:d7:6f:f8:33:df:60:76:
96:e0:f5:2d:8a:45:37:2d:0b:f9:d6:e4:6c:aa:06:
09:ef:c2:4d:a7:b1:4f:27:b9:23:1a:08:7a:83:d4:
b3:01:5d:71:89:0c:fe:fa:1a:14:2e:2d:ab:71:ff:
35:4f:4d:45:70:f0:6e:00:9e:a0:9e:e3:e7:7f:02:
5a:32:32:93:f6:c6:5b:c5:df:41:c4:44:9c:b7:ce:
f5:4e:63:e5:5f:7d:a5:ab:9c:b8:1a:64:7f:85:86:
4e:56:3d:bf:fb:57:9d:2f:e4:90:5c:4d:3c:6c:db:
5c:58:79:05:d9:6d:59:b6:21:8b:cf:5e:2f:ea:39:
bf:82:cb:c1:be:32:5b:5e:19:d3:7a:c8:52:f0:ad:
b3:9d:ed:e9:51:2b:2a:fd:2c:7b:9e:a8:8c:1c:87:
a3:a1:2a:de:0a:de:1d:55:9f:8f:c8:b4:d3:4b:b3:
5c:ea:5c:c4:6b:5a:2a:23:17:d5:84:b9:4c:47:c6:
c5:a6:d6:4a:e5:75:06:03:00:ea:d1:1d:a0:62:c4:
e2:7d:9f:26:9c:88:d2:7c:d0:90:18:d6:30:e5:e1:
c7:75:7c:a6:58:f1:e3:fa:1f:6a:e4:9b:a0:86:e0:
c0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0D:95:2C:69:8E:3F:33:2F:22:DD:97:1E:B0:71:16:60:0D:2D:B2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1Q2VLGmOPzMvIt2XHrBxFmANLbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:1b:9e:99:a2:d4:5b:80:98:37:f5:22:68:0a:f1:a5:fe:16:
d6:1d:b1:5d:11:a1:a2:39:fb:c1:e5:43:de:8f:9c:75:63:16:
57:3f:fd:e1:3f:f6:c8:d0:33:1c:e2:50:c3:d7:d7:29:d4:e3:
fb:69:9d:cb:0f:00:2d:39:f7:62:90:16:58:53:b9:1b:36:c7:
b4:31:59:2a:a0:88:5b:d3:ef:df:54:d7:72:76:97:1f:7c:21:
93:8b:dc:3d:5c:60:ff:68:c1:f9:43:85:69:e5:4b:42:0a:d0:
d0:8f:2f:23:f1:30:a1:7a:dc:b4:78:e8:83:49:45:e9:05:59:
89:c9:4e:cc:1d:70:c9:aa:38:93:76:99:71:e3:d0:80:d4:77:
a7:48:fe:e5:18:41:ca:0e:52:9f:fb:2e:2a:06:3b:ba:44:df:
62:7b:83:39:c0:30:1b:3b:e4:22:1b:ee:b7:73:de:cf:23:bb:
7d:9a:44:b0:3c:b2:9e:b2:bb:95:46:27:18:93:72:7b:ff:98:
17:3a:d9:28:f6:ae:0e:11:04:31:55:d9:c5:41:d8:b9:6e:bc:
78:82:a6:36:b2:c2:f3:81:cd:75:9d:3d:9d:92:8c:db:d1:9b:
9b:76:54:04:16:12:28:17:34:d9:a7:27:88:8d:6d:15:96:c5:
26:2e:a6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:08:59 2025 by rpki-client