Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4DRWKXTa2xkbhZ2jY7htABZVibI.roa
File: 4DRWKXTa2xkbhZ2jY7htABZVibI.roa (raw, json)
Hash identifier: obI+B1NICXplVBtKEadBDT+I4T93U0EfWMpVO6QqiAA=
Subject key identifier: E0:34:56:29:74:DA:DB:19:1B:85:9D:A3:63:B8:6D:00:16:55:89:B2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C9460DC2B780B626CB5122B4977013F9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4DRWKXTa2xkbhZ2jY7htABZVibI.roa
Signing time: Sun 06 Aug 2023 05:15:58 +0000
ROA not before: Sun 06 Aug 2023 05:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c9:46:0d:c2:b7:80:b6:26:cb:51:22:b4:97:70:13:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 05:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e034562974dadb191b859da363b86d00165589b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a4:19:68:1a:ff:4a:bf:08:19:66:e8:d5:ce:
b0:72:9d:ad:1b:cb:16:16:81:34:00:e2:b5:74:12:
82:e7:ef:82:39:6b:17:60:78:ce:c2:21:07:ae:9f:
79:49:c5:96:f6:3b:e8:b6:34:de:63:62:60:3c:c3:
cd:65:b9:da:6a:57:69:bf:86:37:c1:94:02:34:56:
c0:40:71:52:4a:6d:44:50:8c:fb:dc:e2:7b:fe:3e:
b6:48:ff:c2:bd:55:b4:10:26:db:99:66:3d:63:39:
61:f0:ac:42:4d:9c:49:f1:90:c9:e9:93:40:8f:ec:
42:a0:ce:65:a4:55:30:f9:3f:9d:7b:49:5a:be:b5:
68:dc:45:05:05:8e:15:85:7d:48:26:11:db:4d:9a:
c5:a2:32:a0:37:7b:51:58:45:f4:3d:fa:3b:1d:c8:
97:f5:50:b5:ae:64:7e:ce:e5:1e:cd:be:01:f2:b4:
84:fc:12:90:fe:29:c4:21:8b:8d:2c:31:92:c4:88:
a5:dc:97:32:df:54:81:6b:aa:be:5b:06:d3:98:f7:
d2:9f:07:71:d4:de:74:e8:6a:b4:a2:d8:b1:e1:c4:
64:07:61:59:33:1e:a1:78:41:1c:7b:8f:78:3c:31:
dd:28:3f:df:8d:a0:47:35:71:6d:59:b9:08:81:90:
07:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:34:56:29:74:DA:DB:19:1B:85:9D:A3:63:B8:6D:00:16:55:89:B2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4DRWKXTa2xkbhZ2jY7htABZVibI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:b2:76:c1:61:eb:ff:e6:70:e4:2d:2e:ee:14:8a:ef:10:4c:
d6:78:6e:44:0f:f5:b5:b5:1c:28:98:77:02:8d:11:05:e5:b1:
a0:ca:4a:f4:45:b6:fd:49:94:8c:b6:9d:07:32:8c:c5:ff:90:
6e:28:82:d7:4f:51:18:c0:55:6e:15:e1:9a:7f:82:58:ab:06:
57:23:cb:aa:5b:e6:af:41:ae:8d:e4:59:1e:40:87:f6:6e:86:
f2:25:7d:fc:c1:f3:02:d1:79:71:99:f3:a6:fa:2d:fe:d4:0f:
bd:ad:31:5a:fa:0f:20:26:e6:da:6a:45:f0:1e:59:14:db:0b:
79:94:d8:42:12:7d:38:ce:54:11:85:92:40:e3:c7:f3:c3:b5:
e6:c0:f7:23:f9:d1:bc:0a:96:36:91:cc:5a:56:a2:9a:2c:f5:
a1:0e:fb:b1:aa:b5:85:1c:8f:ed:3a:d2:90:62:9c:48:11:f9:
04:6b:1d:1a:5b:80:b5:88:a8:51:e4:cc:ae:9b:23:0b:b3:f5:
38:1a:c0:b1:97:ed:0b:5a:87:29:bf:f0:42:6e:c2:72:f0:30:
39:5f:a7:23:6e:55:01:46:99:e5:fb:23:57:e0:f0:d8:b1:d3:
15:7b:92:a6:be:52:89:a4:fe:5a:6d:90:af:10:f7:d8:9a:1e:
00:15:0a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:24:20 2025 by rpki-client