Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1VUwh6tM4ovmpIvPLrKGX8kBwOU.roa
File: 1VUwh6tM4ovmpIvPLrKGX8kBwOU.roa (raw, json)
Hash identifier: nX4o/eL5llezUjGDrtLZDLyDhd4KpijvPnnnHnDkigg=
Subject key identifier: D5:55:30:87:AB:4C:E2:8B:E6:A4:8B:CF:2E:B2:86:5F:C9:01:C0:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B8F5688B1222025C963E9EBE94E569C9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1VUwh6tM4ovmpIvPLrKGX8kBwOU.roa
Signing time: Thu 03 Aug 2023 01:13:58 +0000
ROA not before: Thu 03 Aug 2023 01:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b8:f5:68:8b:12:22:02:5c:96:3e:9e:be:94:e5:69:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 01:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5553087ab4ce28be6a48bcf2eb2865fc901c0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3e:5b:3c:04:5a:d5:00:2a:c6:b0:1b:bf:b9:
c1:e9:36:29:6a:a9:3b:2f:c0:a0:d1:f0:0c:f8:3e:
9f:61:15:4c:63:59:f7:1e:ef:c6:e8:1f:f0:63:50:
2c:b2:0c:81:c2:22:ea:75:e7:73:c4:b1:f2:4e:36:
72:7a:7f:5e:c2:54:68:94:b8:8b:d4:13:33:cf:71:
07:db:e7:2b:0c:c4:82:ac:0b:92:c2:f6:3d:41:84:
4d:78:71:73:b5:bf:4f:4a:ec:40:c8:d7:00:5c:70:
37:6f:bb:60:c7:18:d2:81:5f:98:33:8c:46:4e:73:
09:6f:00:69:42:b6:ea:44:70:c3:fc:68:5f:52:2a:
c8:d9:d2:5b:03:e7:19:89:a7:95:1d:14:e4:11:c0:
de:7e:41:5b:71:18:f1:70:9f:05:79:1c:84:79:6c:
95:30:1c:94:76:9c:b7:d4:c4:dd:16:89:17:c9:6f:
bb:9a:bd:eb:05:f8:3c:df:14:5a:f6:fd:ed:1b:22:
79:99:2a:e5:a4:e9:92:a5:e2:19:b2:57:17:ab:aa:
01:ac:b9:12:05:73:1e:86:a4:cb:56:e1:4f:6a:58:
91:b7:fe:1e:bc:65:bc:c1:82:91:8b:90:5a:6a:95:
a7:e2:a1:d8:dd:87:35:c0:96:36:f8:0e:7a:21:0f:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:55:30:87:AB:4C:E2:8B:E6:A4:8B:CF:2E:B2:86:5F:C9:01:C0:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1VUwh6tM4ovmpIvPLrKGX8kBwOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:ab:5b:35:a6:d9:10:21:d0:73:52:67:d0:65:57:5f:3b:09:
33:94:4a:1a:7e:3e:d1:45:66:0c:2d:47:a8:26:0e:51:b6:c5:
d1:c3:20:8b:6e:85:0a:f8:dd:ec:cb:55:bb:9e:1c:28:0c:87:
69:71:c4:b3:2e:89:e4:71:9e:3b:dd:64:a4:eb:2b:2f:61:d9:
1e:cc:8f:09:24:e1:6d:fd:37:9e:13:d7:47:eb:28:56:b3:d6:
cd:3f:df:ea:0a:0e:c8:35:52:08:89:16:cc:58:60:8a:f0:a4:
77:9a:b0:0f:fc:60:cd:47:51:45:3a:d5:02:e0:a6:ea:58:80:
d0:bc:e5:6f:d4:ff:7e:6b:76:09:66:7a:18:f0:ac:f4:9f:4f:
3e:d1:5d:4c:2b:a0:32:fa:bb:ab:f2:d5:bf:76:c8:8c:cd:cd:
6e:68:23:5f:65:10:1c:20:10:17:91:12:45:4e:3d:2f:b6:27:
37:73:06:2c:f3:98:a7:f2:60:25:1f:ca:f1:78:37:05:06:c1:
fa:23:7a:b1:71:2a:13:fa:1e:75:fe:8a:0b:c5:82:9c:37:10:
f3:70:de:4a:64:56:02:95:20:1a:c0:ca:58:a8:e4:bf:2c:b6:
a8:63:1d:f1:d3:2a:7f:13:85:cd:59:1b:df:10:19:5f:7c:fb:
3f:fb:65:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:12 2025 by rpki-client