Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/48bQRvASEdyx0Zf4HdprCC3K5pk.roa
File: 48bQRvASEdyx0Zf4HdprCC3K5pk.roa (raw, json)
Hash identifier: CmCyS7BZN5HQxldHPlZV87CHHZfx8079jdwMfIToGzI=
Subject key identifier: E3:C6:D0:46:F0:12:11:DC:B1:D1:97:F8:1D:DA:6B:08:2D:CA:E6:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854E8908CDE823936757F61F271DC8CC7F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/48bQRvASEdyx0Zf4HdprCC3K5pk.roa
Signing time: Mon 26 Dec 2022 13:04:41 +0000
ROA not before: Mon 26 Dec 2022 13:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:4e88:b0f6/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4e:89:08:cd:e8:23:93:67:57:f6:1f:27:1d:c8:cc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 13:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3c6d046f01211dcb1d197f81dda6b082dcae699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:39:26:4b:8a:0c:a4:58:8e:b4:26:25:10:d7:
d8:37:e9:6f:6d:9e:55:31:59:c6:8d:98:80:ce:bc:
f9:ed:50:5c:c0:3c:90:d1:49:ca:a9:ef:9d:83:9a:
13:90:2f:57:cc:3b:0a:11:ee:18:1c:cf:85:92:0e:
47:85:3e:cc:82:8d:80:0d:88:cd:70:4c:3b:37:2a:
3b:12:cc:f8:54:a9:87:95:6d:e8:28:d4:16:9f:18:
3a:32:0c:8e:d3:6a:0f:84:46:a0:2d:df:35:3f:62:
d1:18:de:87:67:24:ce:da:9a:44:32:f7:ac:17:49:
da:16:5e:79:9f:6d:e8:e3:1e:e6:d0:16:16:37:3e:
40:bb:c9:76:93:cb:f1:ee:14:70:f6:8d:97:dc:30:
12:22:79:11:1e:6b:29:20:88:ad:ab:f7:ae:c4:80:
cf:89:7f:d9:ce:1d:7b:3f:5a:39:a6:db:87:d1:0a:
56:be:50:13:33:ac:55:80:e6:42:2d:1d:f4:0f:86:
50:de:48:07:00:65:e1:5e:cf:e9:86:25:94:ea:60:
f8:99:59:65:1e:63:9f:24:9e:fc:66:a9:ef:12:fe:
69:86:4c:3e:e3:81:22:71:d8:37:81:d1:88:53:32:
3b:fb:fd:95:70:f6:23:56:82:54:71:7c:4c:0f:a2:
f4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C6:D0:46:F0:12:11:DC:B1:D1:97:F8:1D:DA:6B:08:2D:CA:E6:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/48bQRvASEdyx0Zf4HdprCC3K5pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:c3:f3:c3:cf:76:6d:e2:96:d8:43:d5:ab:ac:0c:f5:af:47:
71:71:ac:e7:9c:d9:6e:ea:0c:d9:a5:ab:b7:e3:6b:8b:18:1d:
cd:6b:f0:a0:26:38:f4:11:3b:b3:7b:ff:63:31:4f:bc:94:5c:
d3:55:30:2d:63:5d:dd:84:e1:d3:67:99:31:9a:75:75:d9:c7:
70:be:c4:c1:8e:52:a7:fe:03:a4:9d:70:00:6e:a1:47:1e:58:
95:ca:fd:19:f4:3b:be:2b:6d:fc:74:53:cc:c1:ba:98:fd:c0:
72:2b:f0:2e:91:39:20:d1:01:b7:38:84:b4:23:72:b8:8d:91:
91:3f:12:b3:55:ec:48:05:af:d1:3c:3c:07:a5:5f:d6:f1:19:
9b:b2:cb:37:0b:ff:c0:70:07:5d:71:73:42:e2:1d:59:d2:14:
8d:c9:55:2d:e6:03:0d:ab:31:a8:56:17:3d:6f:de:d2:ca:e2:
dc:46:e3:b3:64:5f:41:5a:cc:8d:b1:8d:d3:03:a1:d5:41:96:
24:d7:e2:b3:48:c7:60:89:9f:c2:f7:76:17:0c:4b:63:b4:ea:
1b:3d:ee:d9:e7:86:13:28:82:dd:58:6d:0e:55:19:f4:f8:ad:
1c:9f:40:4f:3e:93:83:d3:b0:e7:7b:1a:b7:95:65:30:5f:6f:
90:87:f0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:06:00 2025 by rpki-client