Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1og54JamDwuU2NA2iBEOFPRd4_A.roa
File: 1og54JamDwuU2NA2iBEOFPRd4_A.roa (raw, json)
Hash identifier: 06qIA4GTOz84xqsVjgTOkLpOg//q0uXB9t2GgUd0wBU=
Subject key identifier: D6:88:39:E0:96:A6:0F:0B:94:D8:D0:36:88:11:0E:14:F4:5D:E3:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867827C467100F98B3A77C7AC9AEFF9BF6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1og54JamDwuU2NA2iBEOFPRd4_A.roa
Signing time: Wed 22 Feb 2023 08:05:17 +0000
ROA not before: Wed 22 Feb 2023 08:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:7827:233/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:27:c4:67:10:0f:98:b3:a7:7c:7a:c9:ae:ff:9b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 08:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d68839e096a60f0b94d8d03688110e14f45de3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:c1:c5:5e:b1:2d:bb:30:43:15:df:ca:42:
09:11:43:6c:e2:e1:33:fd:9e:6b:ba:bc:2c:b3:4f:
f5:09:86:bf:9d:e9:73:ab:a2:97:60:b6:0c:97:ed:
c3:ee:8e:8f:74:38:1e:35:52:f9:04:88:fa:57:68:
3a:49:23:59:94:7a:6e:52:57:eb:f9:9b:16:9e:65:
88:5a:a6:e8:05:81:cf:56:5c:f2:85:61:90:a4:a2:
d7:05:b7:fd:c1:b0:c2:a3:99:83:32:86:02:8e:3a:
b3:7e:65:78:7c:7e:ae:92:22:3d:11:a6:b0:3b:5f:
f7:ff:ff:82:d2:30:e1:79:f6:4a:bf:94:e1:31:ea:
f3:7f:5a:f1:e9:8a:34:b9:c0:51:ea:0c:88:28:ad:
85:85:e6:91:78:1d:57:54:05:cb:bd:42:9f:1f:b2:
bd:1d:e2:29:0e:bc:f0:de:5a:39:f7:02:7e:32:dd:
df:5b:ab:be:a0:78:5e:b9:79:3b:cb:d9:6e:c3:d9:
2f:d2:eb:6e:de:e7:63:c9:a0:f2:8f:9d:52:ba:99:
3f:e0:9d:d8:f5:79:65:4c:db:dd:9a:ae:e1:33:ff:
1c:47:09:42:8c:73:a5:b4:d0:0a:23:fc:bd:1c:51:
34:b1:d0:98:a2:f0:9d:bc:61:aa:28:60:14:01:c0:
3b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:88:39:E0:96:A6:0F:0B:94:D8:D0:36:88:11:0E:14:F4:5D:E3:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1og54JamDwuU2NA2iBEOFPRd4_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:c5:bc:36:7a:9d:3a:a6:d4:e6:53:9a:61:64:5d:61:3e:21:
b3:d6:e1:cc:44:74:c1:98:b3:ac:c8:aa:d9:64:a0:c2:99:75:
90:d2:46:33:79:1d:bf:94:7c:5d:5c:a1:ab:4f:32:9b:c0:1b:
51:70:ba:04:ef:5f:be:a1:32:f4:d1:27:f6:d7:66:70:64:8e:
34:6d:2c:91:67:23:dd:19:7d:94:d1:d1:2e:aa:5c:ee:30:0d:
4b:72:36:18:27:b1:b3:91:93:1d:99:7a:ee:55:b3:19:06:5f:
f7:01:0d:26:e6:14:81:f8:fd:8f:b3:b5:0c:4d:74:53:e2:0c:
61:02:8e:65:cb:29:27:14:71:5b:89:c5:49:6d:60:f9:7a:f7:
2c:81:a0:75:f2:6e:ca:f0:38:57:49:0c:9f:79:92:73:de:04:
c3:9d:67:90:60:6f:c4:73:a4:65:20:4d:92:d0:65:39:35:4d:
a2:10:34:5c:9a:ec:20:6c:6f:3b:cd:d6:c3:ea:4f:ec:5c:61:
18:fc:74:bf:2c:e7:94:3f:ae:82:a7:d9:e1:30:f2:4a:df:87:
2d:72:47:e4:87:dd:18:c7:4a:0c:24:a0:0f:7e:7b:8f:b1:07:
27:37:5f:79:15:6e:d7:74:92:5f:20:30:31:d2:45:41:3b:e7:
e0:d9:64:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:06 2025 by rpki-client