Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Mt0-EVsxR5IqitlxHNeO6L3DQ4.roa
File: 2Mt0-EVsxR5IqitlxHNeO6L3DQ4.roa (raw, json)
Hash identifier: PD+P9hJLdMDC7KvbOrbewLbG3wyFtaSFIMNS+bb/XJ0=
Subject key identifier: D8:CB:74:F8:45:6C:C5:1E:48:AA:2B:65:C4:73:5E:3B:A2:F7:0D:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881347C06043DC613CC581AE605854FBA0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Mt0-EVsxR5IqitlxHNeO6L3DQ4.roa
Signing time: Sat 13 May 2023 04:04:09 +0000
ROA not before: Sat 13 May 2023 04:04:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:1347:b207/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:13:47:c0:60:43:dc:61:3c:c5:81:ae:60:58:54:fb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 13 04:04:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8cb74f8456cc51e48aa2b65c4735e3ba2f70d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7f:69:f6:aa:97:4c:6d:32:62:b5:73:ee:5c:
d1:9c:f6:5b:e6:9d:87:4b:6a:23:1a:7d:8c:3e:fc:
e0:0f:97:6b:6f:f8:bf:56:69:39:97:61:6a:a0:3f:
93:c1:eb:14:78:ed:dc:8a:fa:1c:d0:51:38:fa:c1:
08:4f:47:94:c3:d3:8e:8d:9a:63:7d:7b:c5:ab:02:
59:24:63:1d:bb:09:71:dd:7e:17:51:1f:43:c2:92:
5d:43:29:31:51:c8:69:10:b8:5c:70:65:40:07:a9:
b5:06:61:8e:e7:67:43:52:11:8b:7f:6a:b2:6a:d9:
3b:11:cd:88:05:1f:1a:01:11:7b:19:8d:4f:b4:35:
fb:59:16:76:7e:1a:80:21:de:e1:42:a7:a1:60:a2:
29:98:64:4f:ce:ae:8a:e1:00:8c:ee:53:67:e9:3e:
89:54:0a:d4:74:1b:96:2a:82:ac:37:ab:04:a1:67:
95:f3:de:0c:ff:77:ba:c9:64:08:7d:49:c2:66:d9:
aa:c2:13:ba:45:8f:1b:b0:36:d4:41:d1:d6:a5:85:
7d:9e:21:a5:6b:aa:c5:3f:2c:a1:5e:e0:e7:ee:7c:
0c:71:7f:15:51:fb:27:7b:e4:cb:a2:7d:a8:98:c4:
5f:54:bf:83:c4:fa:1c:d5:da:46:b6:cb:19:ea:ad:
fb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CB:74:F8:45:6C:C5:1E:48:AA:2B:65:C4:73:5E:3B:A2:F7:0D:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Mt0-EVsxR5IqitlxHNeO6L3DQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:8b:2a:a6:3b:6f:c5:e3:87:99:01:3a:99:ac:3f:fb:21:1a:
62:51:1d:9e:c0:b0:0a:d0:35:ba:94:83:2e:b0:70:ce:dd:ba:
cd:90:f3:ff:c2:94:8e:77:6a:4a:19:88:e9:f2:8b:08:aa:b9:
2c:9e:66:f4:08:84:9c:e6:b0:d0:4c:b1:f1:57:e0:26:9c:ad:
f3:38:e1:58:f1:6d:bd:5a:84:27:87:f6:f3:64:8d:79:9e:b7:
7e:fc:e6:7c:1a:a1:46:27:ea:be:ef:3a:3a:1a:a0:7e:9d:95:
e8:70:73:ec:5d:52:e6:e4:eb:17:25:e5:98:ef:93:0c:c4:64:
da:48:92:a9:a0:89:80:14:1a:21:ce:c5:ad:1e:6f:f9:49:d7:
28:9a:77:97:01:73:a4:fb:c5:d4:13:82:ad:07:3f:05:ea:f4:
0f:73:2e:09:3b:17:fa:0c:0f:fc:b5:aa:9d:6e:88:07:e0:68:
59:bc:a9:ad:b5:27:62:1b:c6:4b:b0:df:23:9b:18:40:fb:56:
4c:a0:e9:cf:0f:63:db:c1:1b:69:f8:16:6e:29:52:5f:f9:16:
36:8a:61:de:04:91:e5:39:93:b8:21:d2:65:97:56:b4:ae:6b:
00:cb:76:ef:29:2c:d2:3a:b2:03:43:f7:bd:3c:c3:6a:af:70:
7b:d2:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:08:07 2025 by rpki-client