Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1cRMDXiTa6UJcTw_80aWGxXH_sA.roa
File: 1cRMDXiTa6UJcTw_80aWGxXH_sA.roa (raw, json)
Hash identifier: ul1twCi5s/+DuH5VG+IHBHFOB3JAsHO5lMh+VfvZCGk=
Subject key identifier: D5:C4:4C:0D:78:93:6B:A5:09:71:3C:3F:F3:46:96:1B:15:C7:FE:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873A29DE172075955F963173E5E5EEA4DA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1cRMDXiTa6UJcTw_80aWGxXH_sA.roa
Signing time: Sat 01 Apr 2023 00:13:54 +0000
ROA not before: Sat 01 Apr 2023 00:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3a:29:de:17:20:75:95:5f:96:31:73:e5:e5:ee:a4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 00:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5c44c0d78936ba509713c3ff346961b15c7fec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:4a:89:e3:4a:cd:c0:ad:53:60:ca:66:43:
5c:dd:1f:9e:b3:73:98:af:51:38:cf:23:2f:f8:13:
b5:73:a5:12:ae:3c:d4:cf:42:39:f7:10:2a:32:ee:
b5:51:a3:f4:d7:0c:04:c8:28:44:19:f1:29:ab:95:
02:4e:19:00:44:77:ac:7d:52:88:ee:1f:0c:ff:41:
29:a8:77:7b:83:82:ff:97:e4:2f:24:d8:43:81:02:
2b:aa:02:1d:25:1a:22:bd:53:aa:fc:0f:b8:2c:40:
f3:23:9a:95:17:64:e0:ba:e5:c8:56:1a:b5:4c:60:
90:8a:cb:64:51:00:0c:3c:2c:88:41:28:fc:74:33:
6e:cc:02:8a:14:b5:71:03:50:11:de:36:fb:de:a1:
80:8a:a8:b7:56:a7:88:10:4e:de:09:60:a5:60:5d:
40:3c:86:1c:5a:1d:df:b0:b0:10:0d:e5:68:48:cc:
5d:98:da:eb:4a:82:8e:25:7b:f5:86:93:79:a5:23:
ad:da:56:54:2a:29:b9:3c:25:e0:70:99:70:5a:d5:
62:0f:29:7e:41:63:c4:b2:84:4c:48:cb:ee:5e:56:
d3:03:dc:f8:9e:c6:71:2b:06:2c:39:ac:a6:3e:44:
10:c5:a6:a2:c7:ec:41:f7:d3:87:28:2e:5e:43:6b:
c1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C4:4C:0D:78:93:6B:A5:09:71:3C:3F:F3:46:96:1B:15:C7:FE:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1cRMDXiTa6UJcTw_80aWGxXH_sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:11:61:42:17:6f:9c:2a:01:7d:2a:b8:0c:8b:60:02:fd:0e:
5e:90:d0:23:2d:2c:8c:4d:a6:4f:ec:5e:f5:bd:51:7c:53:b9:
7e:64:93:8f:91:83:8f:1a:b6:d9:b4:5c:52:d1:f4:ba:98:ce:
d6:94:9f:7f:df:1a:00:89:2e:2b:7c:a3:e7:af:ec:17:87:17:
76:85:f5:ea:aa:6c:01:51:02:ea:00:1f:b9:7e:af:bb:26:e9:
24:18:b1:b9:e8:10:b8:b8:2b:88:3c:b5:e2:70:35:9b:e5:7b:
6e:6f:5d:a6:b4:d3:42:71:cf:6b:5f:96:59:a6:58:b2:da:db:
4a:db:32:5b:18:75:95:19:5e:e1:1b:59:f8:65:ac:08:cd:98:
cc:7b:4a:33:b6:6b:da:51:f6:de:73:b2:10:79:6b:2d:f4:86:
7f:52:60:a4:d5:59:58:d3:e9:b7:73:53:46:d1:ff:fa:be:fb:
60:01:bd:7b:67:8d:d5:f6:56:81:11:cf:b9:d0:92:dd:44:89:
d1:7f:b4:f1:a2:f9:09:57:20:e3:e0:39:60:a5:f0:64:cc:82:
a2:ce:61:7b:95:d7:6e:00:97:db:70:0f:00:f4:8c:d3:f1:7a:
54:a0:fa:28:5e:a5:7a:ca:8e:b5:32:39:72:95:40:7b:59:8d:
25:d8:4d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:15:08 2025 by rpki-client