Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2nNIEgOdO7YKBeO76-leWMBvVVU.roa
File: 2nNIEgOdO7YKBeO76-leWMBvVVU.roa (raw, json)
Hash identifier: en9A2cXFk/6bzyyxcvVnKOUangHs8VXlFFt2dH/9FfM=
Subject key identifier: DA:73:48:12:03:9D:3B:B6:0A:05:E3:BB:EB:E9:5E:58:C0:6F:55:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E52A3BE39350C943A5EFBEEB21CD3EFD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2nNIEgOdO7YKBeO76-leWMBvVVU.roa
Signing time: Thu 04 May 2023 05:09:22 +0000
ROA not before: Thu 04 May 2023 05:09:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:2a:3b:e3:93:50:c9:43:a5:ef:be:eb:21:cd:3e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 05:09:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da734812039d3bb60a05e3bbebe95e58c06f5555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:77:c2:6c:5a:7f:b4:4e:47:7a:8f:17:42:
b6:3c:1b:3a:e8:26:8b:4a:84:b3:7f:6b:29:2e:f4:
01:e7:12:1e:e0:3d:ad:e7:a6:98:3e:23:de:19:f7:
80:17:98:c5:ee:fe:10:51:8f:c3:90:ca:93:44:9e:
29:93:2f:83:6b:65:78:ef:24:90:60:ba:c6:f1:d5:
16:ff:9a:cc:64:6a:14:26:69:81:f7:f4:d4:00:51:
c9:13:36:0e:f9:37:59:6b:60:7a:a4:25:35:16:f4:
c8:32:cc:78:6d:4f:5c:6b:e2:42:2b:53:bb:2f:14:
ca:2a:1c:03:5c:41:52:9c:b1:6a:88:6b:58:54:24:
52:8b:cd:2b:9b:00:bc:99:7a:31:24:29:ca:41:c4:
fd:95:f0:42:25:a4:22:97:ed:36:72:05:98:aa:b4:
d1:35:0f:45:26:ee:e3:16:98:80:a7:82:1e:f1:46:
08:e5:16:1d:a0:7d:7b:48:d6:b7:70:9d:07:76:1b:
5d:85:9a:5a:df:0d:33:24:4f:88:45:2d:b0:2e:dc:
1d:10:8a:50:1c:84:7d:ac:8c:cd:47:89:05:66:53:
26:84:55:0f:88:e2:e5:e8:cc:ce:1f:3b:43:de:ba:
f7:23:b0:0a:e2:cb:d4:c1:77:05:d1:57:6a:e7:54:
f5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:73:48:12:03:9D:3B:B6:0A:05:E3:BB:EB:E9:5E:58:C0:6F:55:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2nNIEgOdO7YKBeO76-leWMBvVVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:56:2f:05:01:5c:72:66:43:6c:fb:1e:9b:4e:da:50:c9:72:
06:e0:2c:ff:4d:8c:90:cf:f2:df:ca:aa:bd:04:14:50:7d:95:
bf:3c:5d:a5:33:a8:80:fd:f1:a9:43:e6:ca:52:6b:bc:f2:9d:
5a:c0:45:89:b4:d2:49:c1:c3:32:28:80:bc:5f:43:d9:aa:e4:
b4:e5:15:79:6a:67:f0:93:14:1f:db:06:63:4c:6d:46:33:d8:
9e:42:78:b2:f9:1c:d0:a1:fc:52:8c:b4:b4:dd:20:dc:a9:c0:
75:d5:f8:58:30:da:ca:41:61:91:57:cf:65:67:4c:f3:95:5b:
4c:f4:cd:5f:e1:61:56:7a:42:93:10:cc:69:f0:fc:f3:8b:70:
41:d1:59:7f:cb:fa:1a:fc:29:48:be:db:a5:6a:9f:41:48:11:
22:aa:e6:4d:bc:f2:24:16:1a:d2:09:0b:e9:70:2f:f5:8c:70:
76:5d:b0:61:dd:fd:05:3f:6c:94:bb:85:3d:30:26:fe:50:4c:
98:3f:66:10:1d:ee:59:68:a2:b6:70:39:c9:e2:8f:e2:df:7f:
91:3f:99:ff:62:e3:d1:47:e3:ce:ac:9d:39:16:15:55:f2:7d:
ea:d1:b7:3f:7a:eb:70:bb:c8:bf:60:31:3c:69:9c:5d:a7:27:
91:96:85:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:15 2025 by rpki-client