Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2896Pw6al1ijRK-TEEMBIzUBMaM.roa
File: 2896Pw6al1ijRK-TEEMBIzUBMaM.roa (raw, json)
Hash identifier: QftdJKlYAAopA1yEpuoNE/Jzk8pjbkEcLBSyEvWVegc=
Subject key identifier: DB:CF:7A:3F:0E:9A:97:58:A3:44:AF:93:10:43:01:23:35:01:31:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3E2E0B88DA3A7C66F67141D3B1A99AE4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2896Pw6al1ijRK-TEEMBIzUBMaM.roa
Signing time: Mon 28 Aug 2023 22:05:19 +0000
ROA not before: Mon 28 Aug 2023 22:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:3e2d:629c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3e:2e:0b:88:da:3a:7c:66:f6:71:41:d3:b1:a9:9a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 22:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbcf7a3f0e9a9758a344af9310430123350131a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:24:b3:f9:c5:b6:84:7f:b7:25:f1:62:d9:
20:3b:94:f6:2e:3f:f4:f3:98:9d:58:ee:65:8d:71:
76:30:77:e9:42:f9:ce:ea:95:18:3e:47:55:b7:06:
cc:fe:07:b9:b4:72:a9:b5:31:42:ef:90:3c:8f:f3:
29:fb:0a:18:94:97:8e:c7:1b:44:4a:99:e2:a8:a5:
d4:96:a7:c5:ba:92:d6:bc:7f:06:96:6f:5e:cc:54:
99:5d:ab:fb:27:39:ff:ec:75:4e:e6:ee:bb:d8:bc:
8c:cf:c8:31:6b:25:5b:99:11:9f:c9:55:fb:08:14:
15:1f:52:01:df:f4:44:56:23:e8:1f:ee:3a:cc:98:
69:5d:3e:58:d4:75:8f:74:a1:6f:b1:ab:96:ea:d3:
8e:a3:00:88:32:26:24:2e:cd:74:2f:8b:84:22:cd:
c5:89:93:cb:a0:67:65:a3:3f:d2:9e:aa:fe:92:21:
a5:ec:c7:39:cc:b0:ef:9e:e8:ab:c7:e6:3f:f5:4f:
eb:7e:6d:b9:b8:d2:e8:30:be:f1:ac:15:e2:b0:54:
3a:e3:c8:b4:03:d3:18:6b:22:ec:dd:c5:24:57:08:
df:87:88:d9:fe:d8:83:ea:57:6b:f8:22:b0:4b:8c:
70:ee:d7:23:10:8d:11:d9:bd:3d:21:03:7c:55:a5:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CF:7A:3F:0E:9A:97:58:A3:44:AF:93:10:43:01:23:35:01:31:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2896Pw6al1ijRK-TEEMBIzUBMaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:d5:b5:33:c4:d2:80:71:2d:0e:68:5a:e2:42:26:77:48:99:
aa:61:99:52:70:bb:e9:31:99:0f:96:6e:3f:4c:0a:d8:cb:50:
e6:00:3e:63:79:9d:e5:4c:2e:37:b1:b0:2a:02:3c:1d:1e:c9:
47:99:4b:57:07:f7:61:b1:c5:f3:8b:bd:a0:f6:81:49:07:1b:
87:d3:e0:db:bf:2d:68:3a:2f:f0:1f:6f:36:2d:e0:39:28:f1:
e2:ee:04:b1:3a:a0:55:f2:d3:73:cb:d7:e9:79:75:16:a1:32:
fd:ed:9e:72:5d:e5:39:3c:a7:0e:ba:c1:c4:64:9c:7e:a2:1a:
7c:f4:f7:ab:ef:9a:76:86:a1:6c:31:4c:bc:8e:cb:80:76:64:
46:c8:93:f9:34:ae:94:82:7c:d4:cf:ef:4f:e8:d9:1a:1f:7b:
f0:c8:15:16:c2:42:6e:a7:9b:e8:8a:fe:51:1c:59:36:49:21:
e5:bf:64:80:c4:a3:51:26:67:5f:de:05:a0:1f:19:cd:a1:4c:
81:b9:0d:7d:49:d1:44:24:10:21:64:2a:e5:13:44:63:6c:01:
9f:7f:16:21:8a:9a:5a:10:f8:7e:2b:03:f1:0b:8a:18:48:1a:
58:35:9c:57:7f:11:64:0a:f8:86:81:51:ea:82:c3:a2:e8:dc:
96:58:23:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:37:50 2025 by rpki-client