Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1dH31PCL3rFAGuRwytRm91HthzU.roa
File: 1dH31PCL3rFAGuRwytRm91HthzU.roa (raw, json)
Hash identifier: xOsCPg765d2hVDd4ArOLx+sYiNOGvn/b/BwSn+6WnLc=
Subject key identifier: D5:D1:F7:D4:F0:8B:DE:B1:40:1A:E4:70:CA:D4:66:F7:51:ED:87:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018785E4DF58BA09AC159DD4E4B7875ADA95
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1dH31PCL3rFAGuRwytRm91HthzU.roa
Signing time: Sat 15 Apr 2023 17:09:41 +0000
ROA not before: Sat 15 Apr 2023 17:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:85:e4:df:58:ba:09:ac:15:9d:d4:e4:b7:87:5a:da:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 15 17:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5d1f7d4f08bdeb1401ae470cad466f751ed8735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:fb:a7:16:d9:be:cb:56:0c:51:31:cd:50:
12:c9:1e:3d:1a:20:f5:bf:62:2c:c0:c1:43:a8:64:
26:89:f0:aa:f2:41:b6:11:80:69:dd:c8:41:74:08:
62:7a:13:00:54:56:89:71:71:a0:d6:0f:44:3e:c1:
9f:c9:b4:69:56:b3:96:75:76:23:44:dd:25:c0:04:
e8:7e:22:7d:d4:2c:ed:56:4b:eb:09:4a:1e:ce:3f:
69:2b:12:9a:06:16:07:1c:d2:30:1d:3f:57:8c:43:
ca:0d:23:ff:be:8e:4b:e1:3c:0e:3d:80:93:e9:3b:
ce:d5:2c:77:03:89:b1:7e:b4:c6:1c:b5:26:25:61:
74:29:82:b5:a7:59:da:90:5b:d5:58:78:35:6d:5e:
79:5a:9d:1d:1d:5d:70:ac:e3:56:55:84:f1:f9:3b:
35:7d:96:ad:a3:44:af:78:2d:2a:75:29:15:cf:bd:
78:33:fe:52:a3:96:20:d9:2f:4d:9a:db:0a:56:54:
02:23:21:44:49:bb:d0:df:54:52:d7:ce:57:0a:7f:
18:f7:a7:39:8e:2f:f6:21:a4:dd:1c:ed:33:83:6d:
d7:19:a5:6b:d0:96:2a:62:d3:36:5d:45:b9:93:9a:
e2:7e:da:ff:3d:ae:41:c4:25:09:16:53:b1:8e:ff:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D1:F7:D4:F0:8B:DE:B1:40:1A:E4:70:CA:D4:66:F7:51:ED:87:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1dH31PCL3rFAGuRwytRm91HthzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:7d:38:4f:46:45:54:f7:48:04:d2:bc:2c:cf:9b:d6:7f:ca:
68:60:db:c3:f2:aa:4b:26:28:c0:2b:a3:fd:92:49:27:ce:26:
39:e8:1f:ff:db:6d:d0:6f:ad:76:3a:ef:77:84:2c:9b:98:d4:
fc:36:23:0e:f6:e8:2e:70:79:ea:bc:68:94:bb:ab:4c:2b:cb:
16:a8:f1:81:1d:cf:71:45:73:c2:c5:83:59:5b:5a:44:c7:29:
51:14:6b:44:fa:4f:61:76:b9:89:41:58:00:54:ad:ec:ad:5a:
47:8d:47:94:0b:a4:4a:aa:2b:e2:a0:7c:29:25:bf:67:ad:d2:
62:24:76:c2:2d:b4:7f:c6:d4:7f:a5:01:c4:05:23:49:14:a3:
b1:91:19:8d:e6:5f:f5:56:3f:47:5a:a7:96:80:2d:96:e4:04:
04:0e:75:94:e6:7d:c3:4a:a8:10:a1:4a:b7:07:f2:fc:de:28:
79:e5:fa:74:77:33:f1:d3:52:09:2a:c8:91:2d:08:62:90:5e:
7c:9b:52:a0:53:42:af:7d:b2:1d:38:0a:7d:74:b7:14:75:8a:
c7:00:76:ed:90:e6:98:5b:66:b6:09:61:c0:2a:1f:b7:b5:d2:
81:6a:67:fd:11:b1:d6:f5:d5:0b:5c:c7:35:78:ec:02:12:3a:
9c:dc:1e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:50:11 2025 by rpki-client