Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/49KWoMVq_YNq9dIIXJKN9nwQvmM.roa
File: 49KWoMVq_YNq9dIIXJKN9nwQvmM.roa (raw, json)
Hash identifier: hIcrPYw3iXjW3y3lPM/K5QFhI1ugExmMlwDcI8DqwUY=
Subject key identifier: E3:D2:96:A0:C5:6A:FD:83:6A:F5:D2:08:5C:92:8D:F6:7C:10:BE:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899A7552929AF4564F78637635403C86C8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/49KWoMVq_YNq9dIIXJKN9nwQvmM.roa
Signing time: Fri 28 Jul 2023 03:05:27 +0000
ROA not before: Fri 28 Jul 2023 03:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:189:9a74:edd0/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9a:75:52:92:9a:f4:56:4f:78:63:76:35:40:3c:86:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 03:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3d296a0c56afd836af5d2085c928df67c10be63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:27:3e:f3:d5:ff:9b:08:e7:09:89:2d:60:
da:c5:ab:1e:d0:f7:9a:a0:b8:a0:80:e0:18:18:42:
83:8e:c1:f9:19:6d:78:8f:80:26:cd:c2:e1:ea:a3:
09:94:f0:e9:7d:f5:a7:2e:84:ba:fb:a8:50:29:ec:
8d:f0:c0:b1:95:ac:03:35:59:fc:74:a4:a5:43:28:
1e:ff:69:19:31:12:a2:4e:2d:13:d7:26:14:e3:34:
b0:bd:55:7e:36:f2:91:b2:87:b3:05:b4:75:4d:af:
60:8d:68:f9:4e:3a:33:43:44:7e:db:84:b4:9b:6e:
15:fa:54:2e:53:0c:74:17:f2:c4:0c:e6:81:26:91:
67:01:c3:ac:ec:ae:c6:2e:1a:52:f6:09:e1:94:49:
6a:03:27:2c:63:7f:69:35:79:56:42:da:45:98:d7:
98:32:f1:b4:23:a3:f9:0b:1e:da:4a:55:8a:ad:cd:
a1:5d:62:5e:db:1e:41:cc:94:e7:68:fa:c9:ff:78:
59:ee:7d:81:48:78:1f:b7:1a:ca:6b:d6:43:44:3b:
f7:68:d2:28:9e:79:d2:81:13:d5:be:03:14:e4:50:
12:14:90:74:ad:49:01:df:bc:fc:11:48:f4:25:eb:
84:79:b6:e2:9f:7a:3f:37:84:16:27:42:a7:5c:9f:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D2:96:A0:C5:6A:FD:83:6A:F5:D2:08:5C:92:8D:F6:7C:10:BE:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/49KWoMVq_YNq9dIIXJKN9nwQvmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:57:28:11:27:ee:b5:c1:e6:e8:70:4f:28:ab:3e:85:0c:40:
b5:df:58:5c:c0:e4:4c:e8:d3:63:7d:15:0a:c4:47:6b:5f:9a:
37:ea:ee:3f:14:94:a7:22:0b:9d:d6:7e:cc:fd:84:10:3b:12:
c4:58:f5:99:c9:52:cc:79:86:bc:06:c6:e6:b7:0f:50:3a:57:
82:62:cd:d1:71:91:e9:e4:58:b5:3d:ed:d7:fd:c4:ba:b8:be:
e5:cf:91:9f:6f:03:b7:67:52:14:d5:2b:a0:bc:5b:13:cb:b6:
b3:f7:21:70:40:3f:dc:40:ae:05:40:30:74:36:99:ec:6d:6b:
c4:41:25:dc:08:1c:c8:43:e1:13:7e:ff:2d:dc:60:72:74:e2:
81:f2:30:f5:67:60:61:65:9e:73:f9:a3:10:f8:c1:53:d6:e6:
3e:72:8c:ee:e4:d7:d2:0b:be:32:22:d4:98:7d:9c:19:03:f7:
11:60:4f:47:1a:bd:db:cd:1b:01:36:69:fe:8f:77:b2:8e:54:
c1:1f:ab:02:16:ab:b3:fa:9a:d9:15:d8:98:a2:a2:eb:27:d5:
a6:42:8d:8a:a6:55:27:03:47:97:e3:a0:a5:1c:5a:ab:53:09:
21:8b:4b:4c:a2:22:6e:c8:cf:8f:82:ee:65:1b:3c:4c:dc:ee:
0f:2c:45:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:59 2025 by rpki-client