Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/23nVdOjMhjbWDdOSTrXuCQDyIcE.roa
File: 23nVdOjMhjbWDdOSTrXuCQDyIcE.roa (raw, json)
Hash identifier: wwLikKj38e4XeDEr6d/aFYcmPIQNaI0YkrkvCa9XQ44=
Subject key identifier: DB:79:D5:74:E8:CC:86:36:D6:0D:D3:92:4E:B5:EE:09:00:F2:21:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A145BF39357241B2A816B77EF614ACBC0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/23nVdOjMhjbWDdOSTrXuCQDyIcE.roa
Signing time: Sun 20 Aug 2023 19:11:24 +0000
ROA not before: Sun 20 Aug 2023 19:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:14:5b:f3:93:57:24:1b:2a:81:6b:77:ef:61:4a:cb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 19:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db79d574e8cc8636d60dd3924eb5ee0900f221c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:f7:36:75:ec:82:01:d0:21:18:53:0e:a2:
06:69:04:b9:05:41:24:67:b5:9d:06:20:bf:7d:c9:
ed:08:6e:2a:ad:45:b6:09:5a:d3:c4:ee:71:b1:91:
df:20:a6:98:bb:08:fe:8f:91:5c:0a:9d:a0:f4:0c:
09:b8:aa:15:33:30:8d:2a:aa:52:da:9f:15:4e:8b:
d9:b2:ad:28:01:45:04:c6:a2:06:c9:c7:f9:41:45:
41:6d:2d:00:ba:79:a4:a5:9a:82:10:a7:cc:29:9f:
16:a1:86:27:c8:a8:20:30:d5:62:69:92:38:a2:1e:
7c:e9:52:2a:ed:90:69:c7:7c:3a:c5:8f:b6:86:8d:
44:e6:a9:2d:13:f9:21:c1:c5:1b:5d:01:69:01:8b:
33:80:e1:5a:2e:08:da:b6:c9:0b:cf:be:06:77:b9:
9f:3d:97:e2:b0:cc:a0:30:e3:66:c8:1a:2d:3f:9a:
30:ac:b3:b3:45:ae:ac:ea:1f:ec:c2:98:f8:25:91:
64:56:fa:bf:7d:98:3b:64:3e:81:8d:d6:d1:56:9d:
02:65:40:0d:95:15:45:c9:d3:d8:04:fa:c7:20:7a:
04:fe:09:9a:dc:c1:e2:98:7f:c3:3e:76:28:b9:82:
1c:e0:66:62:e6:ae:f0:da:0c:5d:7d:0b:f2:3a:45:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:79:D5:74:E8:CC:86:36:D6:0D:D3:92:4E:B5:EE:09:00:F2:21:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/23nVdOjMhjbWDdOSTrXuCQDyIcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:8e:13:7b:65:5e:79:cb:f1:db:92:6b:6c:32:45:ea:fd:c4:
34:a3:5a:4a:bb:fe:a2:b2:22:68:a0:c0:e9:a2:55:fc:53:a4:
03:24:50:79:b6:29:71:85:61:39:dd:8f:ad:8c:f0:7c:87:99:
87:c2:7b:61:38:8c:ee:20:35:72:d6:04:cc:43:9d:be:88:86:
92:02:ed:37:b6:be:56:74:e1:71:5e:00:c3:0e:b4:34:37:0a:
1d:8e:d9:3a:a6:ac:c3:4c:d3:ee:bd:58:8f:81:db:77:a4:21:
23:5e:91:8c:ed:cd:0d:02:db:86:03:90:17:c4:6a:26:9b:f8:
50:68:28:1e:31:23:f2:3e:68:c5:41:1e:d7:40:84:a6:12:55:
09:d2:31:9e:88:95:1c:8e:29:3d:0f:66:b7:39:c6:14:bb:f1:
e9:b7:8a:78:4a:c6:25:7f:bd:86:40:85:92:5a:08:71:65:2a:
b3:47:2a:3a:ab:ae:67:8a:72:ae:94:7c:11:57:bc:13:e0:12:
22:b5:3f:13:6b:60:b8:dd:26:f5:67:ba:77:f1:53:0c:4e:d4:
25:44:f6:18:66:c0:55:90:da:a9:6e:f1:c1:6e:28:c5:b0:e4:
b6:cf:60:08:86:d5:f3:34:47:43:12:9c:fc:cd:e9:33:6f:6e:
6f:95:40:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:20:13 2025 by rpki-client