Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/24atqTb165DGYqOBG0NFx8t18OQ.roa
File: 24atqTb165DGYqOBG0NFx8t18OQ.roa (raw, json)
Hash identifier: jTQ3fHCbX6Homp32lBAG2cw/hWBaiCDQMz1e3oaub3A=
Subject key identifier: DB:86:AD:A9:36:F5:EB:90:C6:62:A3:81:1B:43:45:C7:CB:75:F0:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893608BEB6F3EDC229389BF16CE6CBB49E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/24atqTb165DGYqOBG0NFx8t18OQ.roa
Signing time: Sat 08 Jul 2023 15:04:49 +0000
ROA not before: Sat 08 Jul 2023 15:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:189:3608:445f/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:36:08:be:b6:f3:ed:c2:29:38:9b:f1:6c:e6:cb:b4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 15:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db86ada936f5eb90c662a3811b4345c7cb75f0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a9:f7:6b:c0:d1:0a:5d:df:a8:27:f0:13:10:
a7:4e:c7:26:28:4b:ec:41:ac:7e:a1:60:40:6e:87:
f2:d6:b0:ce:d1:0b:0f:09:12:47:a7:f0:ab:fc:1f:
d1:fc:4c:30:c5:cf:42:40:f3:9b:a0:99:cd:54:da:
ef:4d:3c:84:7d:66:e3:5b:7c:8b:7f:f7:de:72:8f:
89:f4:f8:c9:3d:33:7b:97:fb:d6:00:89:06:f7:60:
a2:53:02:70:3a:02:d8:a4:ba:59:04:0a:1c:05:09:
ce:1c:5d:aa:17:48:da:0f:71:a0:63:d0:25:87:f1:
da:23:4c:71:9b:fe:6b:3a:39:97:b0:b8:93:c1:5f:
c4:7a:53:a9:20:38:e7:2c:df:c6:b2:ef:8d:10:35:
c9:3c:6c:63:bf:83:26:c8:22:00:35:38:9c:17:a7:
23:e6:d1:15:78:53:e1:01:fa:32:f9:45:fd:4b:03:
40:49:6a:17:a6:ce:94:47:41:84:68:62:a2:ac:47:
c2:ad:3e:80:5b:dd:86:15:8d:9f:f9:85:9f:e9:e7:
e6:6f:74:9c:0b:c4:5c:cc:7c:6c:1b:60:5c:3b:05:
a6:f9:dd:2f:de:c2:d3:c6:9f:ca:7e:33:dc:f0:7f:
3a:97:71:6b:86:c7:f8:ad:bc:66:2c:02:f7:92:d7:
30:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:86:AD:A9:36:F5:EB:90:C6:62:A3:81:1B:43:45:C7:CB:75:F0:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/24atqTb165DGYqOBG0NFx8t18OQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:47:57:2d:40:e3:b5:67:5f:8d:1e:35:4b:96:27:95:e0:15:
e9:49:b2:47:23:81:66:cd:e4:6a:fd:c4:68:a4:f3:fb:fa:83:
e4:dd:75:6a:ed:0a:a0:28:1b:0c:53:1c:55:82:97:d3:f3:73:
f9:cc:a3:d4:b2:0d:d6:6b:9a:e5:7b:4b:1f:c7:22:d5:20:66:
99:f6:cf:e0:7f:92:72:b4:f9:01:8b:55:a4:41:5e:35:af:fc:
0e:5b:3f:e4:5c:61:ae:54:c7:d2:ac:9d:64:e2:96:f5:0b:4b:
a6:95:5f:fb:c5:d7:13:cf:d2:66:2a:b4:09:c6:d3:20:dc:f2:
2d:f9:19:99:af:72:2b:71:f4:9d:a6:e5:6c:fb:4b:17:f3:a8:
5c:2a:2b:b1:4f:bb:58:40:05:e6:68:87:58:b5:79:84:8a:9d:
33:ce:16:6c:3a:c7:2b:4d:b5:21:d6:47:93:5a:34:f3:b1:5b:
86:81:53:44:d3:b3:a6:53:ac:98:e7:97:b9:09:bb:e7:fe:5e:
b1:12:f6:71:6b:15:d9:b0:33:54:c7:85:90:11:d6:a1:ec:61:
ae:f3:16:96:c9:12:d3:4d:2a:53:ea:9e:eb:e2:1d:df:c5:d2:
42:81:f3:54:09:61:e2:db:69:35:ff:97:4b:d5:9b:71:df:15:
45:b6:2b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:30:06 2025 by rpki-client