Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4DDMdyV-WDC6oj3aQBYeEYHZIC4.roa
File: 4DDMdyV-WDC6oj3aQBYeEYHZIC4.roa (raw, json)
Hash identifier: 5P1RJNi6aBdQBmbaghKReTC6lH2zA79iuk3kCsr0ZU4=
Subject key identifier: E0:30:CC:77:25:7E:58:30:BA:A2:3D:DA:40:16:1E:11:81:D9:20:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A18A8687635165AEC902A737B98059E8A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4DDMdyV-WDC6oj3aQBYeEYHZIC4.roa
Signing time: Mon 21 Aug 2023 15:13:24 +0000
ROA not before: Mon 21 Aug 2023 15:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:a8:68:76:35:16:5a:ec:90:2a:73:7b:98:05:9e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 15:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e030cc77257e5830baa23dda40161e1181d9202e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:30:ba:c4:05:11:5f:3c:37:35:0d:c4:ea:
fd:22:1a:63:cc:71:3b:f7:19:3a:f9:59:35:ae:ff:
83:51:b1:d4:6e:fe:6f:79:59:12:97:e9:36:47:7e:
d2:80:19:dd:db:26:b7:b3:43:cf:84:70:cd:a7:ed:
6e:8c:84:41:31:15:19:30:39:59:2a:8a:ac:cc:e6:
51:12:4b:ab:be:34:61:57:54:0f:b6:04:c9:f1:e5:
94:d2:88:98:94:00:da:ff:d4:11:34:e8:fc:88:32:
f0:7e:1b:6f:d9:0f:81:4b:69:03:8e:6b:6d:47:9c:
9a:95:09:44:48:c1:29:d3:4f:c5:c3:5b:f3:59:29:
45:8e:f1:52:ed:bf:bb:26:81:a1:e3:38:f8:cc:be:
44:a5:d5:6c:8e:12:d4:e2:b6:42:15:bc:0b:12:66:
73:d1:60:24:04:ba:5d:75:28:06:0f:8d:7b:3c:83:
1b:bc:2b:8e:3a:bd:57:bd:2a:32:dd:b9:cc:95:73:
15:83:fd:cf:06:61:87:05:49:ff:05:31:ac:9a:ee:
9b:86:f6:06:d4:9b:4b:b5:94:4e:07:46:a3:15:f3:
4e:c5:ea:43:f3:0d:e2:b2:e3:12:d1:b0:18:c0:cb:
07:60:83:b1:8e:52:ae:ea:14:9e:ff:e8:b4:0d:69:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:30:CC:77:25:7E:58:30:BA:A2:3D:DA:40:16:1E:11:81:D9:20:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4DDMdyV-WDC6oj3aQBYeEYHZIC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:1c:0a:bb:40:94:60:37:ec:65:01:18:68:13:0a:3e:0b:14:
63:27:4d:4d:f3:68:e9:7a:1f:30:db:54:db:f6:c7:cc:7f:8f:
9d:f8:e3:1b:c4:fb:b7:12:fa:ba:ed:39:b6:f6:8c:c8:6f:54:
81:d6:4f:e0:25:ec:8f:4d:15:16:7f:dd:5a:ba:6a:6c:fd:94:
83:2e:a4:a4:b0:2c:5a:ce:06:26:ee:57:3d:76:9c:9e:f0:38:
8b:1c:91:0c:5a:e9:03:c8:5c:f2:63:5e:47:dc:32:c3:2a:9d:
b1:64:e9:b6:ec:15:25:d4:47:b8:9a:bb:42:a5:0e:0b:d7:37:
0a:b0:9a:c0:1e:8b:99:48:a5:e9:c7:2b:6d:e4:0e:f5:97:eb:
b7:31:fc:4c:e5:1a:d8:78:14:d6:ff:95:e4:a9:28:63:ac:51:
54:e1:74:4d:ae:15:8e:9d:1c:96:12:46:38:16:87:5c:b9:f5:
3d:9f:7f:e4:d3:18:86:f4:43:3f:c1:80:c4:89:94:fb:00:2d:
83:47:f4:9c:e4:75:df:38:48:47:06:75:83:46:65:ab:2f:2e:
d2:1f:53:27:e0:7f:e6:f1:13:4c:7f:64:ff:03:e7:ab:a8:d7:
6b:61:d7:e9:3d:89:c1:12:28:b8:bf:6a:4a:0d:fb:85:06:eb:
28:a4:73:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:48:52 2025 by rpki-client