Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/27xcXm_ChqAUjuxK0YtnqWf-ZyA.roa
File: 27xcXm_ChqAUjuxK0YtnqWf-ZyA.roa (raw, json)
Hash identifier: Wlfd/S70sU+t73xiFYC7N5MJjbzczWvAQEd3u3EcyUY=
Subject key identifier: DB:BC:5C:5E:6F:C2:86:A0:14:8E:EC:4A:D1:8B:67:A9:67:FE:67:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C60B3368BABCF23DAB0A0F49BFAE5E82
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/27xcXm_ChqAUjuxK0YtnqWf-ZyA.roa
Signing time: Thu 09 Mar 2023 11:04:28 +0000
ROA not before: Thu 09 Mar 2023 11:04:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:c60b:22ee/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:0b:33:68:ba:bc:f2:3d:ab:0a:0f:49:bf:ae:5e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 9 11:04:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbbc5c5e6fc286a0148eec4ad18b67a967fe6720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:17:25:4d:66:34:87:bc:8c:eb:e7:d8:94:ea:
63:4f:c8:fd:cf:80:30:24:22:a7:2c:25:fe:53:34:
22:46:f5:2b:2d:8c:f0:40:94:5a:ff:ba:f2:ce:5f:
1e:7b:c4:f7:9e:fe:8c:db:3a:c0:3c:31:8f:9d:24:
53:ba:78:1b:e2:e6:35:9c:b9:26:90:bd:ed:da:7e:
a3:18:a2:7c:1b:65:05:1a:38:36:ca:e8:27:66:c9:
0a:1f:b9:71:4a:81:de:6c:99:60:dd:36:50:9f:b7:
4a:7c:17:2b:ce:1d:ca:ad:4e:92:a0:44:e3:c2:0f:
a8:b3:00:bc:9b:70:54:99:3a:97:21:b4:b3:b9:10:
6f:91:43:1c:18:e1:a3:db:59:22:d1:27:8d:63:24:
a2:70:d9:a0:cf:01:4b:b7:22:92:15:2f:96:87:13:
c1:60:a9:3c:f0:ea:2c:85:95:d4:cc:32:02:c4:93:
50:37:17:fe:f8:ac:c9:31:4f:81:e5:76:8a:9d:8e:
22:eb:16:7b:49:f6:af:db:79:c8:ca:fc:81:b4:11:
1e:90:69:9d:f6:64:b7:57:33:9b:f1:35:09:c3:f5:
56:50:9a:67:de:f0:d3:36:30:8a:2f:da:fd:1e:7d:
5e:7a:9f:11:63:96:2e:2d:85:91:b1:ad:63:89:91:
9a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:5C:5E:6F:C2:86:A0:14:8E:EC:4A:D1:8B:67:A9:67:FE:67:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/27xcXm_ChqAUjuxK0YtnqWf-ZyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:f7:17:62:5d:bd:2f:3b:fd:17:36:87:f4:b1:88:97:c3:b4:
08:ad:69:64:89:c7:46:8d:fc:04:d1:85:c2:a6:7e:1b:70:56:
f5:52:6a:11:87:10:b3:7c:d8:48:d7:f8:a2:e5:85:63:15:de:
7e:9c:99:1e:b4:da:b2:f9:03:ba:94:c4:5c:ce:27:69:04:d7:
42:48:aa:17:29:df:c8:fa:2f:8b:a2:2d:d7:3d:70:86:ab:7d:
4d:66:4f:be:81:bc:c5:5c:c4:84:da:45:c5:8b:d6:85:9d:39:
8a:9e:44:cc:ed:7e:2b:6d:70:6d:19:21:cf:b8:97:d5:db:8d:
c9:9e:ab:7c:c8:e4:bf:19:77:43:48:72:25:c7:b0:b3:c9:85:
7b:7d:64:1f:b1:da:93:8b:d7:12:10:fb:7a:55:b4:ac:9e:75:
e0:81:b9:63:3d:0c:c5:f3:d5:15:dd:a9:05:ef:57:36:b0:49:
50:74:0e:e6:e9:db:d6:c8:3b:e3:35:eb:be:56:6f:07:11:e0:
83:f6:3b:ea:00:61:b1:f9:ee:a3:dc:49:ab:c7:19:1f:79:74:
69:64:f0:97:6a:ce:d1:58:1f:22:e0:3e:66:3c:76:d7:ee:08:
9d:32:6c:de:91:02:36:55:6d:d7:bb:c5:88:ea:f4:37:ac:d8:
24:c4:35:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:40:11 2025 by rpki-client