Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/28eevhaykU-o89_K6dVSvMmZsTQ.roa
File: 28eevhaykU-o89_K6dVSvMmZsTQ.roa (raw, json)
Hash identifier: XAJAPdHZRvd3w1WQnLK4MGtk2VklRLRrhgMHfZ/PC20=
Subject key identifier: DB:C7:9E:BE:16:B2:91:4F:A8:F3:DF:CA:E9:D5:52:BC:C9:99:B1:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896FC7690B8F4484A7B5E187217859E70E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/28eevhaykU-o89_K6dVSvMmZsTQ.roa
Signing time: Wed 19 Jul 2023 20:11:26 +0000
ROA not before: Wed 19 Jul 2023 20:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6f:c7:69:0b:8f:44:84:a7:b5:e1:87:21:78:59:e7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 20:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbc79ebe16b2914fa8f3dfcae9d552bcc999b134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:66:ee:dc:2e:38:6f:a7:b7:b3:20:7f:12:
a8:b7:94:fb:8d:ad:8f:95:64:64:5f:c1:88:e9:cb:
73:39:fc:d7:38:72:1e:84:47:1a:14:01:75:79:ac:
80:24:2e:88:45:10:fb:00:9e:ea:12:23:e5:80:6d:
7c:c8:43:06:57:86:01:3f:db:58:ff:c7:4d:c2:3b:
e5:5a:f3:35:81:10:2c:d3:22:8f:60:ad:4a:df:32:
b4:67:2c:6f:b1:64:b4:da:b4:af:65:b7:8b:a6:e3:
ef:59:39:89:84:58:11:25:70:9a:b5:b8:a7:98:e0:
82:42:ea:e6:ce:9d:5b:e1:0e:a2:93:06:41:9b:02:
ef:43:64:54:7f:a1:3d:c6:4a:7b:41:4f:d1:b3:12:
2f:44:5e:1f:60:d5:9e:a1:52:9c:df:3c:cd:ef:67:
09:ce:30:ff:2d:0e:1d:e2:32:7d:cb:51:58:f8:b6:
a7:31:40:d6:6b:4b:b5:05:ac:89:94:8b:9c:43:26:
48:8c:15:3f:1a:0d:8c:f2:eb:a7:75:9b:ed:a3:b3:
81:d5:33:b9:3f:df:13:6b:b8:99:97:8e:0f:72:fd:
f8:52:49:1c:ff:b9:93:01:2a:7c:ae:a1:4d:b9:f0:
0c:9f:3b:d0:c5:38:a7:d6:83:c8:53:17:51:a8:d1:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C7:9E:BE:16:B2:91:4F:A8:F3:DF:CA:E9:D5:52:BC:C9:99:B1:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/28eevhaykU-o89_K6dVSvMmZsTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:ae:cf:d7:25:8d:64:96:d8:d2:fc:6d:2d:8b:a8:9b:dc:7d:
2b:ef:02:15:55:14:c8:7a:c4:c2:df:b1:2b:1c:cd:2e:86:30:
7f:dc:27:7a:ff:d2:3f:37:75:86:11:00:ab:d5:2d:be:2c:ed:
12:9c:49:a9:99:06:bd:e1:9a:a2:79:50:fe:2e:cf:4d:ef:2c:
ed:da:ca:69:ba:b3:05:3b:e0:6c:a0:51:d7:7d:d1:bf:f2:42:
f9:08:bc:ff:60:19:2c:e4:8f:88:43:7e:aa:e9:cc:0a:26:fb:
24:66:63:68:a1:25:f8:cf:dc:df:7c:d1:4a:d2:70:8a:8c:39:
0a:a5:f0:03:9a:4c:0b:2b:2b:7b:87:23:61:05:9f:2c:55:fb:
0a:5b:e9:35:f0:9f:00:93:26:73:dc:65:eb:78:cb:1e:e3:ab:
46:a7:1c:25:b1:6e:cd:2f:b2:92:bc:ec:e6:7e:f4:35:bd:e2:
72:bd:ac:fd:76:99:b0:23:4e:c6:4b:f5:fe:52:3f:89:60:fd:
25:ba:ff:28:7a:05:d4:ea:97:1d:0d:6d:6e:a3:53:fc:24:cf:
f9:83:51:09:e9:33:b7:e8:64:b1:9e:46:f4:72:fb:a7:3c:b0:
63:70:ee:01:c8:bf:63:90:7c:73:bb:c7:73:f1:83:8b:3b:c0:
d0:4a:30:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:25:50 2025 by rpki-client