Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1SHOqsvr7wl4GGtSqtlGM-dDTVs.roa
File: 1SHOqsvr7wl4GGtSqtlGM-dDTVs.roa (raw, json)
Hash identifier: 2B1Pflimrb29bBpm8TnlS2wSMzZFUPcu6HqJMNFtjtE=
Subject key identifier: D5:21:CE:AA:CB:EB:EF:09:78:18:6B:52:AA:D9:46:33:E7:43:4D:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188066D5861F002F3FF6B294E0932A51DCC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1SHOqsvr7wl4GGtSqtlGM-dDTVs.roa
Signing time: Wed 10 May 2023 16:10:09 +0000
ROA not before: Wed 10 May 2023 16:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:06:6d:58:61:f0:02:f3:ff:6b:29:4e:09:32:a5:1d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 10 16:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d521ceaacbebef0978186b52aad94633e7434d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8b:26:69:fd:c9:32:a5:17:ee:72:e7:4d:13:
59:3e:d3:62:b5:5c:05:f5:e4:4a:5c:4e:ff:55:79:
2e:de:8c:32:bd:bb:fb:19:20:0d:84:6e:b8:fe:b5:
fa:58:1d:76:ec:fe:6d:23:de:e7:e7:5a:c3:4f:cf:
a0:a8:52:e2:24:aa:31:a9:7a:d8:e5:f5:b6:6b:dc:
7a:a7:45:53:86:15:a1:a3:6c:62:57:f9:40:f9:be:
9d:87:a1:17:96:92:a5:66:78:6f:15:6a:f8:c2:49:
b8:12:3b:0c:8a:1c:d3:97:3d:c4:1f:cd:8a:30:46:
8f:19:b2:5f:19:93:37:3f:95:10:25:d8:97:c3:82:
f7:f2:8e:0e:f8:29:cf:7b:39:f9:74:86:ce:90:a6:
b6:a2:b0:0d:23:f0:2f:79:61:d1:fd:88:2b:96:00:
9d:93:2a:b0:55:bb:e8:e8:3c:8a:35:aa:63:0a:2e:
20:4e:1b:22:12:20:58:a9:ea:28:2d:f7:d2:83:66:
8c:07:3a:14:dd:a3:e2:5a:c4:1e:57:31:c9:9c:ab:
a7:a5:fc:c1:a6:5d:12:3a:94:71:43:60:df:49:14:
c6:8e:7a:06:e9:4d:d7:bc:d4:57:4a:0a:21:8d:55:
12:2f:77:04:4d:fa:e9:67:1b:c4:3d:4c:59:47:d7:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:21:CE:AA:CB:EB:EF:09:78:18:6B:52:AA:D9:46:33:E7:43:4D:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1SHOqsvr7wl4GGtSqtlGM-dDTVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:45:63:49:0c:47:e9:3a:ff:ee:ed:7c:6f:5e:22:cb:09:11:
3d:52:c7:27:c7:1e:b1:9c:02:9c:32:79:6b:c9:ef:0e:56:be:
85:c8:f2:c4:b0:73:48:8e:20:89:10:5d:e6:ab:cf:2f:9a:a8:
6b:e7:73:52:85:8f:f1:9d:0f:0f:f6:39:b6:f8:1e:9a:45:3d:
6b:d1:ec:7d:a7:13:2a:41:da:ba:0a:e0:8c:65:23:dc:af:92:
7a:87:16:f3:0b:69:36:3e:c4:72:b4:cd:67:c2:aa:33:ee:86:
be:ed:21:d0:7f:00:c8:72:f6:ba:3c:d8:79:53:09:cb:c7:8e:
9b:48:1e:cb:18:b4:00:84:ef:15:cb:65:db:14:fb:30:60:6f:
f5:7f:cb:be:d3:9c:7a:67:47:67:4d:4b:2e:a6:25:d5:a5:ec:
a1:78:1a:d0:47:08:2f:7e:8e:35:2f:5b:65:53:b9:fe:55:0b:
1d:75:c2:e0:5c:9a:9b:ad:f6:94:dd:7f:cc:71:c7:4e:95:63:
73:84:6f:2e:b7:68:70:06:dd:2a:30:f2:f1:92:40:b2:57:4b:
89:0e:df:d9:36:c2:a2:d9:fb:85:de:22:61:de:0e:43:72:6c:
ef:8b:41:40:2a:5e:11:dd:57:e5:a2:4c:b8:79:c9:17:d1:9f:
c4:ff:30:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:19:34 2025 by rpki-client