Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4Hm6cujKXx90KeAy5pYN4E3gKiY.roa
File: 4Hm6cujKXx90KeAy5pYN4E3gKiY.roa (raw, json)
Hash identifier: W2hqCMhNpHFBWNlw4mYRgd6XyoYyTb2kmI5twQ5AUbU=
Subject key identifier: E0:79:BA:72:E8:CA:5F:1F:74:29:E0:32:E6:96:0D:E0:4D:E0:2A:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B9CF4E26B97D8A5349EEB7C9B7917D05
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4Hm6cujKXx90KeAy5pYN4E3gKiY.roa
Signing time: Thu 03 Aug 2023 05:11:58 +0000
ROA not before: Thu 03 Aug 2023 05:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b9:cf:4e:26:b9:7d:8a:53:49:ee:b7:c9:b7:91:7d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 05:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e079ba72e8ca5f1f7429e032e6960de04de02a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a8:c4:78:ff:98:3e:f5:29:32:a3:c2:8b:8c:
09:59:8b:6e:e2:0b:89:d1:ac:b8:f0:8a:04:86:ed:
a0:07:de:9d:16:84:6e:33:cd:96:f7:e1:e6:39:ff:
43:58:9d:ef:4a:18:24:52:f9:32:fc:69:e9:af:f1:
be:ce:2a:82:38:19:8c:9a:4c:ed:14:3e:08:68:1c:
4c:31:f2:0f:39:68:df:ce:d2:10:f7:d3:d8:8e:d1:
58:33:4f:1d:fc:b6:4b:f5:8b:92:4e:29:62:02:04:
07:c7:47:b1:fd:e6:9a:d4:47:2d:cb:23:09:9a:0f:
e9:b3:7a:11:b1:a4:d0:de:12:ce:47:ae:99:a0:bb:
8e:5f:bf:1f:33:cf:a4:3d:2c:2f:8b:8e:90:98:4d:
1e:28:18:33:0f:32:9f:69:68:ed:91:c9:0e:9f:c8:
f6:f9:8b:0c:7a:ac:71:8d:61:9d:db:01:f2:33:75:
6b:dd:24:81:91:1b:ec:c8:ea:c2:e0:ef:69:26:cd:
b5:83:11:1e:0b:93:10:aa:6f:86:1c:aa:9a:21:63:
3e:bb:27:e4:73:2a:b0:64:78:fd:ac:f3:77:37:d6:
9f:ad:f2:7a:98:4c:e9:58:32:d7:13:d6:a1:86:da:
94:8b:bd:69:48:bc:7c:a2:88:4d:29:f6:a8:dd:e4:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:79:BA:72:E8:CA:5F:1F:74:29:E0:32:E6:96:0D:E0:4D:E0:2A:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4Hm6cujKXx90KeAy5pYN4E3gKiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:8e:4a:3f:41:a1:72:d6:94:e6:25:54:32:1f:b1:5f:47:db:
a6:fa:ef:34:b8:fe:c9:75:c0:e9:92:e0:77:03:e7:83:db:ca:
84:ac:3d:2f:b2:c9:be:30:08:f7:be:b6:8b:4b:cd:90:b8:e7:
38:5a:7f:2f:63:13:c8:57:95:0c:71:b1:1a:75:7d:8c:16:10:
a0:a0:55:ac:45:31:29:60:36:93:88:c1:89:9f:7e:59:fa:48:
2f:19:60:ba:53:aa:10:91:5b:01:cc:47:c9:a4:34:cf:92:be:
bb:84:1d:da:47:97:75:15:8d:b3:a2:47:37:f1:2c:d9:05:5e:
7a:0d:41:02:ef:0d:41:1d:3f:6d:c4:5b:ce:4a:aa:07:20:be:
bc:c7:b3:58:9c:5b:ff:56:34:54:1a:c8:ab:12:ce:4d:cb:cc:
ab:e8:9e:3d:66:ba:5c:88:03:93:5d:1f:bd:c0:94:a1:89:a4:
bd:1e:4e:ac:61:06:07:2a:69:f5:b3:ce:43:3f:1b:07:40:4a:
97:58:4d:1a:77:10:79:77:dd:79:68:2e:99:e9:ee:7d:ee:1a:
16:c0:f9:3b:ae:12:e7:aa:91:54:6c:d4:8e:03:e4:87:8a:2e:
7a:9d:92:95:53:34:9b:69:cd:1a:67:4e:58:01:e9:14:a7:c7:
20:73:81:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:46:49 2025 by rpki-client