Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2k8EYJr7_YUq2XuBimUGcKFLlpo.roa
File: 2k8EYJr7_YUq2XuBimUGcKFLlpo.roa (raw, json)
Hash identifier: uSBlua6WKcapy0LuqYWBb4meOVcz7zk0A5kbD6MCjcw=
Subject key identifier: DA:4F:04:60:9A:FB:FD:85:2A:D9:7B:81:8A:65:06:70:A1:4B:96:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01837E7213A80F22B7D91BEF14D5F54ED8CB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2k8EYJr7_YUq2XuBimUGcKFLlpo.roa
Signing time: Tue 27 Sep 2022 10:15:48 +0000
ROA not before: Tue 27 Sep 2022 10:15:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7e:72:13:a8:0f:22:b7:d9:1b:ef:14:d5:f5:4e:d8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 27 10:15:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da4f04609afbfd852ad97b818a650670a14b969a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c0:75:2c:66:91:2b:ab:84:8d:62:78:15:77:
60:2e:52:9b:fe:9c:ae:8f:bd:9f:7f:1c:d2:83:1e:
16:c1:6d:2c:e3:8e:d6:0a:12:e3:2d:1a:c4:c3:28:
9c:9f:e9:ea:61:f6:21:f8:98:1e:11:00:5b:97:e1:
2b:4a:10:26:b3:87:4b:1d:5c:14:c1:23:53:89:7a:
94:6d:fb:e0:13:15:15:08:3d:75:46:30:5a:0b:ad:
e4:70:0e:07:2a:6e:0d:75:a2:9d:20:ce:01:5a:14:
72:14:8d:f9:b4:9a:c9:c1:f6:20:a1:a0:05:67:82:
1e:e7:35:84:9d:ed:3c:95:5d:35:9e:fc:8e:69:69:
ce:d4:56:bf:9e:95:fd:46:fb:70:f6:bc:83:fd:c8:
e0:fd:38:f3:4d:3b:3b:76:cd:4b:ec:50:12:b2:c7:
6c:d0:73:3d:7b:87:e5:9b:5e:19:ba:a7:09:3b:24:
59:68:af:ec:88:ec:19:59:f7:f8:c2:6a:0e:e3:81:
28:8e:f5:72:69:8d:60:99:7a:86:18:51:39:4d:8c:
25:56:a2:e8:9a:f7:97:54:0f:44:b6:18:c2:8c:bb:
d6:31:00:d2:aa:54:a4:7e:51:e1:0b:11:87:89:67:
62:fc:46:15:f9:33:a4:c2:48:d6:ec:d7:31:0a:53:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4F:04:60:9A:FB:FD:85:2A:D9:7B:81:8A:65:06:70:A1:4B:96:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2k8EYJr7_YUq2XuBimUGcKFLlpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:18:e8:59:87:b3:84:f5:ec:8b:bb:fe:7b:45:2a:6a:f6:91:
75:cc:ce:7c:6f:44:4f:e3:ac:11:1e:d7:43:27:06:03:4a:c2:
50:e8:6f:5b:5a:01:57:25:3b:8e:07:63:fe:89:76:a7:df:b6:
30:d3:36:2b:d3:23:fd:e7:1a:9e:31:da:d0:5a:28:1a:6b:5a:
a6:52:d9:b6:19:96:24:b5:12:05:8c:f2:18:a6:59:dc:07:4d:
cc:6f:56:5d:ac:00:e3:3b:dd:6f:8b:43:61:7e:d3:b8:3b:4b:
19:34:d1:40:b2:46:de:cc:ce:96:bd:e2:05:5e:23:af:fb:6a:
06:83:18:d9:d1:92:28:73:42:98:fa:ab:c7:12:eb:26:40:0d:
26:99:d8:0f:8c:a5:91:19:a1:42:19:aa:62:96:a3:b2:f6:98:
9b:00:2c:53:3d:cb:1c:2f:4a:1b:17:95:af:bf:65:26:45:be:
71:6a:d8:19:bd:36:0e:e5:d4:69:3a:db:ae:f5:76:ef:16:5b:
ce:51:b7:58:46:31:0c:9d:9b:b2:b3:8f:bf:3a:bd:a5:59:ff:
06:d4:a9:f2:89:f3:83:84:aa:05:e6:53:01:10:cd:98:8c:94:
50:6e:a9:25:eb:3a:50:e2:f4:a3:c5:a8:7f:38:14:04:09:c3:
b5:14:b0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:34 2025 by rpki-client