Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/28ezzP03Xv2xyUPRAl_pBBMdWlg.roa
File: 28ezzP03Xv2xyUPRAl_pBBMdWlg.roa (raw, json)
Hash identifier: mBorqscUC62ii9yFP1LYsFwfzucioDFdqCGFQ58mBSw=
Subject key identifier: DB:C7:B3:CC:FD:37:5E:FD:B1:C9:43:D1:02:5F:E9:04:13:1D:5A:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AFBACE70EF5868510946F3ADBA8E2216
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/28ezzP03Xv2xyUPRAl_pBBMdWlg.roa
Signing time: Sun 05 Mar 2023 03:05:00 +0000
ROA not before: Sun 05 Mar 2023 03:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:afba:8483/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:af:ba:ce:70:ef:58:68:51:09:46:f3:ad:ba:8e:22:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 03:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbc7b3ccfd375efdb1c943d1025fe904131d5a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:24:37:aa:67:e3:f0:e5:31:f2:76:46:c5:
9a:6b:6e:cc:bf:46:64:25:0a:93:8f:ef:e1:7b:76:
3a:55:1d:4f:64:5a:20:07:1e:b6:a2:b8:ae:08:07:
c3:37:c1:a7:34:cb:c8:dd:3e:c3:00:0e:b2:4f:22:
ed:b3:8c:1f:3a:d0:f3:62:f9:23:11:f3:4c:b1:46:
80:a7:d5:a2:6c:53:5a:02:e5:bb:2d:d5:22:41:fe:
ed:41:4a:a3:dd:e3:bb:e1:c5:d2:d5:0f:a0:1f:97:
78:38:ea:9e:f4:be:85:cb:00:cf:a9:b8:2f:b9:64:
83:23:a0:49:0d:86:31:17:03:6e:6f:43:48:1e:2d:
59:5e:5b:5c:f2:d0:a3:dc:25:15:8c:b3:26:7b:ca:
fd:ed:71:37:e7:e4:b2:d2:a6:b0:7c:30:48:b7:6a:
d1:80:9c:05:69:68:f5:8b:6d:a7:9f:e2:ab:fb:3d:
1a:ac:ba:a5:83:d4:54:14:df:fd:8f:b5:53:e0:9f:
0f:9d:4a:0c:b0:c0:80:ca:39:f3:f2:d1:e0:02:e6:
11:0b:28:f0:35:44:7e:ca:23:3b:a4:de:b0:91:e3:
30:a0:f3:94:8f:4e:06:53:bc:3d:d9:46:ba:d5:1c:
3d:6a:a3:98:af:de:b2:28:e8:10:d8:f5:83:20:4e:
7c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C7:B3:CC:FD:37:5E:FD:B1:C9:43:D1:02:5F:E9:04:13:1D:5A:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/28ezzP03Xv2xyUPRAl_pBBMdWlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:09:49:1d:83:67:68:77:02:69:f3:b3:e4:7c:12:b9:4c:d1:
3a:71:01:05:d3:f2:ed:21:09:a8:7b:9d:0f:b3:ec:91:8b:f6:
3c:01:99:e8:7a:4d:85:40:26:ed:d3:dd:22:37:84:2a:f7:b1:
36:6d:d4:97:54:7f:6b:f0:54:2f:19:23:0a:79:1c:01:c8:db:
74:52:c2:e3:87:e7:c4:07:b6:29:61:c9:88:b1:f7:f5:79:85:
65:73:14:d3:75:ef:45:e1:73:1f:b3:e0:67:38:ae:89:09:be:
31:ab:71:c2:34:6f:89:95:32:c6:22:62:49:b9:e6:8f:64:c8:
54:dc:21:40:70:9c:17:81:1f:a0:52:89:4d:a4:59:4c:16:5b:
84:da:22:f0:3e:4c:a0:22:e5:9f:d3:da:dd:a5:01:10:95:31:
11:9e:47:89:48:4d:e4:07:91:82:ce:58:a7:48:f6:ef:83:ab:
b4:a4:64:96:14:57:cf:8e:34:d9:ac:8c:f0:b5:d5:58:89:79:
de:4b:10:48:61:3e:e3:4a:66:2b:8e:9f:a8:e2:8d:9d:99:d9:
37:df:2f:2f:5f:f7:94:a3:21:53:fb:f2:30:7e:72:9c:cc:36:
20:0d:51:64:c5:7c:75:28:f4:bf:0e:fd:64:e4:d9:4d:27:75:
31:f2:39:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:56:09 2025 by rpki-client