Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/44_v34gmKSqqHGsWfiLEEYhZTNg.roa
File: 44_v34gmKSqqHGsWfiLEEYhZTNg.roa (raw, json)
Hash identifier: wUAFOF9cpz/dtxVtQK7HJMbnz2FueTjbM9etTMTAjWc=
Subject key identifier: E3:8F:EF:DF:88:26:29:2A:AA:1C:6B:16:7E:22:C4:11:88:59:4C:D8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870E9C734C550A024F4D4E30674B8A22F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/44_v34gmKSqqHGsWfiLEEYhZTNg.roa
Signing time: Thu 23 Mar 2023 13:15:46 +0000
ROA not before: Thu 23 Mar 2023 13:15:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:9c:73:4c:55:0a:02:4f:4d:4e:30:67:4b:8a:22:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 13:15:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e38fefdf8826292aaa1c6b167e22c41188594cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:a1:fa:b6:8f:c6:a3:84:ce:54:e2:de:2b:
eb:38:ac:ac:56:db:d3:c4:5d:3d:1a:96:a3:db:37:
fa:fd:72:1d:f9:9d:91:54:9d:0c:16:82:1d:1e:cd:
fd:ca:b4:0d:dd:5d:59:cd:cd:e3:2d:89:fe:3f:6f:
43:e8:13:ee:8f:8e:83:e1:6b:69:8c:3e:7d:0c:8c:
8e:06:eb:ed:37:e6:5c:32:84:f2:96:22:04:49:41:
12:6f:3a:14:6b:af:52:b2:f5:8b:2f:56:d0:14:24:
30:bc:fa:43:72:4a:66:af:c4:d7:df:9e:37:2d:d2:
1d:48:b4:be:bd:3d:5b:30:1e:18:8b:ba:af:3d:b1:
c2:36:53:87:fe:89:81:90:ec:48:9b:40:20:d4:cc:
16:9d:89:04:06:8b:b4:cc:ec:68:36:08:59:01:1e:
73:11:d5:c7:2b:0c:c7:c8:9f:df:a4:b3:a1:44:09:
b5:57:af:e3:9d:ba:cf:c2:8f:31:eb:e0:32:26:ed:
11:03:bb:71:44:90:4a:4c:4b:bc:68:3b:c3:11:e2:
96:37:8a:67:60:0a:e1:00:8f:55:89:12:0f:8e:b4:
61:84:3d:4c:ca:c1:ee:a9:d4:e1:03:25:d8:6b:1c:
53:90:91:32:ca:7d:a6:61:e9:13:99:35:43:74:7f:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8F:EF:DF:88:26:29:2A:AA:1C:6B:16:7E:22:C4:11:88:59:4C:D8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/44_v34gmKSqqHGsWfiLEEYhZTNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:f5:06:d9:89:c1:4f:6e:1b:b6:89:67:a7:33:df:11:7d:7d:
c5:a8:cf:20:cc:74:52:f8:e3:d6:8b:eb:c7:4a:a8:27:9a:ab:
e4:ac:2f:ef:ef:d6:be:3b:1e:b4:10:a7:9f:59:ed:35:f5:4d:
3d:eb:12:3f:fd:da:cc:13:61:4b:1f:e5:0b:c7:a4:b8:d5:a9:
2e:28:b2:b7:66:1f:17:6c:de:c0:e0:71:39:2a:d8:ef:35:01:
98:e3:b4:ae:46:6e:2d:f8:bd:41:cd:d2:dc:e8:b7:9a:e3:1b:
c9:3a:b7:d1:85:44:ef:19:cf:35:e0:cf:39:9d:f9:66:97:4f:
d1:86:2a:b3:a6:a8:e1:48:3f:5f:30:62:2b:fb:51:76:d8:05:
85:48:a4:89:f3:e6:1a:48:17:cc:29:ba:87:62:bf:b3:2e:06:
d7:71:6d:0e:ad:1f:21:8e:73:a8:02:24:b3:df:03:a4:71:28:
6e:51:f9:de:fc:ca:aa:7d:9f:49:01:85:03:fa:bf:e3:ff:7e:
5c:a6:ad:80:97:2e:15:1d:c1:0a:9b:57:f9:11:75:f5:11:da:
43:cb:73:a3:e8:31:d9:fc:5b:1d:96:0e:4b:5c:79:2f:4c:0e:
da:07:85:85:f8:f0:9f:4a:bb:4f:71:b1:ab:ad:53:69:fe:b5:
26:f7:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:37:59 2025 by rpki-client