Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4HxCeYVtAVN82nXP79zYKaK1Znw.roa
File: 4HxCeYVtAVN82nXP79zYKaK1Znw.roa (raw, json)
Hash identifier: wrUklIK2RwwDlSEzdxu5Bs98x0OmLbBmG+ak/P3WRi4=
Subject key identifier: E0:7C:42:79:85:6D:01:53:7C:DA:75:CF:EF:DC:D8:29:A2:B5:66:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885150B95299BA4407CD8AE532F4C03125
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4HxCeYVtAVN82nXP79zYKaK1Znw.roa
Signing time: Thu 25 May 2023 05:10:24 +0000
ROA not before: Thu 25 May 2023 05:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:50:b9:52:99:ba:44:07:cd:8a:e5:32:f4:c0:31:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 25 05:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e07c4279856d01537cda75cfefdcd829a2b5667c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:e2:2f:5c:38:da:ad:d7:68:4c:c8:a9:5a:
37:1a:71:cc:28:e6:0b:85:72:07:59:65:c6:02:e0:
6c:ce:98:09:87:d2:86:2f:46:4a:24:26:c2:2d:01:
70:ab:3d:ad:f4:cf:67:1a:e4:31:31:fc:99:ce:02:
9a:f2:5a:b2:35:9f:14:89:44:03:6d:78:0b:7e:76:
8c:b4:71:f0:ec:ad:f6:9e:cf:1f:4f:c3:5d:77:40:
eb:e9:c4:21:2b:7d:28:17:e3:4e:7e:82:ef:58:0b:
be:ec:f1:26:d5:c8:e7:fb:e1:8b:af:24:5b:46:5e:
78:03:30:92:8a:cd:1b:c6:78:02:94:df:85:bb:61:
74:22:fd:6f:03:36:d1:8e:09:91:27:e4:71:de:dd:
47:81:c0:54:e7:c1:5e:3f:23:f1:23:4a:41:6c:0c:
d6:07:9c:f9:6e:41:6b:ac:98:1d:db:8c:71:2d:c7:
53:90:1d:0a:98:08:fd:9d:a9:20:65:ad:f2:a6:55:
91:55:57:60:39:58:f2:0b:a5:0d:20:c9:bd:a8:94:
6e:da:86:69:6a:be:7a:53:df:a4:09:4f:b5:b2:56:
51:dc:5e:71:e4:8f:0b:13:39:87:28:81:9c:59:fe:
12:4f:ff:22:bc:56:63:0d:de:c0:93:4b:04:8e:03:
ba:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7C:42:79:85:6D:01:53:7C:DA:75:CF:EF:DC:D8:29:A2:B5:66:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4HxCeYVtAVN82nXP79zYKaK1Znw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:eb:6d:ed:6b:32:1b:f0:89:10:eb:ca:91:52:be:12:b2:22:
e7:3a:83:c1:98:7d:a2:18:84:72:a0:09:b5:60:6a:b7:a9:d1:
80:e2:6b:83:d2:9c:14:18:67:6e:20:c1:58:a3:94:dc:f0:68:
9a:48:ee:06:be:b2:92:b1:3e:1a:49:c1:ef:5d:5c:24:e7:e9:
f5:38:76:62:02:f7:4a:8d:9d:1a:51:43:8d:17:fb:ab:7d:94:
e2:e1:5f:2a:b2:fc:3a:92:f6:d6:41:49:88:28:00:6c:6c:9b:
fe:c8:dc:f9:5a:c9:25:32:d9:35:cd:d2:fb:65:b4:5a:40:0e:
59:7c:bc:2d:12:e5:f2:0e:34:87:8b:1e:14:4b:28:e4:f7:b7:
ba:40:f6:b9:ff:62:e8:54:c2:09:6a:7a:05:5c:07:7c:e2:4e:
b9:e7:61:22:ba:f6:d5:46:89:f2:f5:d9:21:a5:62:8b:ff:b1:
ea:3b:36:61:25:6f:83:ad:87:2f:af:1c:e6:39:74:e3:48:43:
28:f9:ce:76:b5:1d:90:f1:4f:4c:bb:b8:fc:b8:85:cc:9b:97:
bd:98:a6:d9:9f:7a:31:5d:03:19:86:f0:82:5c:d9:a8:97:89:
a1:56:f1:62:69:8d:e7:d0:2d:1d:fe:60:35:27:16:1f:b1:56:
5c:29:aa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:24:16 2025 by rpki-client