Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1_nHt3B5jphwkUvbHG7RoqODWRw.roa
File: 1_nHt3B5jphwkUvbHG7RoqODWRw.roa (raw, json)
Hash identifier: YMKQ8MPsctUmnMcx14toNoQuxpCid2HN70V4liiO39E=
Subject key identifier: D7:F9:C7:B7:70:79:8E:98:70:91:4B:DB:1C:6E:D1:A2:A3:83:59:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018809703959A8275CE17E2BD54D83AAB77B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1_nHt3B5jphwkUvbHG7RoqODWRw.roa
Signing time: Thu 11 May 2023 06:12:09 +0000
ROA not before: Thu 11 May 2023 06:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:09:70:39:59:a8:27:5c:e1:7e:2b:d5:4d:83:aa:b7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 06:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7f9c7b770798e9870914bdb1c6ed1a2a383591c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3d:06:e2:0f:f1:00:29:6d:76:b2:bf:c1:cb:
f7:79:4e:91:06:dc:88:b2:58:48:96:15:d5:e0:ed:
21:4c:d3:51:90:7a:d5:c6:6d:f3:1c:1d:ba:ce:af:
a8:f7:97:7e:af:7f:4d:08:49:3e:71:58:d9:1f:e1:
a7:c9:f7:f4:0e:66:55:1f:d8:b8:f0:f6:a9:b2:3f:
df:e7:7a:5d:c9:d5:22:3f:2f:b5:0f:e0:6b:ef:10:
29:51:dd:16:30:2b:58:36:07:6d:b7:4a:f3:02:27:
68:32:86:cc:fa:83:0a:98:72:5a:c7:15:bc:c0:69:
56:7c:a6:6d:2c:31:5e:cb:c9:de:e8:e4:bd:2f:9b:
5b:03:1d:c8:27:7c:c2:34:e0:ec:23:96:b0:07:ce:
c3:dc:fe:05:fb:58:6b:42:76:04:64:33:bd:86:14:
fc:bb:00:41:e6:92:50:50:27:67:3c:42:1c:1b:55:
0d:95:e6:6c:76:52:8f:cc:c0:38:ba:80:d7:b9:7c:
89:9a:f1:fa:b3:c0:41:84:e4:69:c0:17:fa:ee:86:
80:00:6c:b8:08:6d:2f:1e:41:a1:c8:12:07:42:2e:
52:b5:0d:2e:64:ac:34:f9:66:08:86:22:31:c9:24:
35:ff:a6:20:f4:bd:97:02:d2:76:48:22:a0:3d:5b:
2d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F9:C7:B7:70:79:8E:98:70:91:4B:DB:1C:6E:D1:A2:A3:83:59:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1_nHt3B5jphwkUvbHG7RoqODWRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:c1:dd:fc:3c:eb:a9:6a:b0:83:9b:4e:75:e1:82:60:e3:cd:
ab:39:a1:07:2d:a4:18:04:d0:e4:a3:b1:1f:87:94:82:7a:38:
d0:46:3d:1f:ea:e8:75:4a:14:37:cc:93:e5:b9:5d:fa:f8:1d:
05:85:ac:a5:df:54:8d:c6:a3:56:1c:de:42:c0:81:f3:2e:f8:
5b:5f:2c:5c:b9:58:15:18:a9:35:95:db:3c:14:29:2e:98:27:
e9:f1:8b:cb:5b:e6:b1:75:15:d6:b3:68:8e:f1:a1:92:2e:f1:
36:64:93:3d:59:0b:16:59:99:b6:39:ca:bd:ca:f1:8e:eb:41:
15:93:7e:e7:f5:09:bd:44:e9:54:da:cb:4a:46:8d:59:0d:7f:
2b:cd:b7:1e:9c:8b:c8:9d:62:cf:07:5f:0e:e5:1a:3e:94:c2:
94:07:ae:ab:5c:03:e0:dc:bb:13:b6:34:d8:11:11:2b:0d:38:
d9:9d:7f:34:38:bf:62:a7:26:d3:74:05:0a:a6:8c:aa:ca:04:
3b:df:03:05:a5:26:a3:21:10:f9:eb:0d:be:2f:47:8d:ad:c4:
cb:ef:78:fd:28:63:68:21:b2:1b:e5:22:5a:68:fc:4f:b9:e1:
f1:03:c9:f5:f5:66:76:a2:e9:d7:94:0e:d5:c8:7b:cb:8f:fa:
71:f2:5c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:08 2025 by rpki-client