Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4V8IiuY5UURSSHYlnTEy_ZEK81g.roa
File: 4V8IiuY5UURSSHYlnTEy_ZEK81g.roa (raw, json)
Hash identifier: 9TjX0qvktPDMkU9hVG1+VkuCDwopfX+0luLGu5qv0mk=
Subject key identifier: E1:5F:08:8A:E6:39:51:44:52:48:76:25:9D:31:32:FD:91:0A:F3:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894C2BE10F9470F24BBAF97311B662CF57
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4V8IiuY5UURSSHYlnTEy_ZEK81g.roa
Signing time: Wed 12 Jul 2023 22:14:51 +0000
ROA not before: Wed 12 Jul 2023 22:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4c:2b:e1:0f:94:70:f2:4b:ba:f9:73:11:b6:62:cf:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 22:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e15f088ae6395144524876259d3132fd910af358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:d8:fc:c0:13:ac:15:74:5d:3a:a4:17:e6:
b3:c9:76:c3:cb:45:2d:13:a8:ee:1a:95:ed:3e:21:
78:c2:43:cc:0d:2f:69:d0:d4:05:e5:9c:a0:01:0a:
44:f8:3e:ff:32:e7:05:5f:b7:34:8b:41:86:8e:d9:
95:27:98:2f:66:b8:b3:db:dc:bc:f9:ab:eb:38:86:
69:31:92:8a:d7:d2:83:a9:30:09:99:b2:fa:f0:68:
26:09:25:34:3d:91:0a:96:23:a7:9b:cd:6e:d2:11:
5d:45:2b:3e:4c:e5:c7:a0:4f:43:a4:e0:42:47:7b:
1c:a8:7a:d7:60:e4:17:07:25:b4:fe:2f:ac:22:4e:
e3:b7:e5:6e:e0:c3:d6:44:0e:51:9f:18:9a:c8:23:
00:ed:01:6b:c4:c1:cd:d7:21:ad:0c:88:3d:8d:1a:
a1:93:8b:ef:a4:d7:3a:89:53:25:de:f6:69:cf:e0:
ce:11:86:74:2f:ef:8f:97:99:06:1b:cd:67:33:52:
00:42:fd:6f:93:f3:e2:07:72:26:96:09:cb:67:dd:
66:e3:fa:8b:e9:86:97:a2:3d:84:3a:26:ac:7b:57:
ee:45:03:23:2e:85:87:48:e9:b3:e3:cb:45:07:76:
da:6d:10:71:df:2f:57:dd:53:2c:25:ec:e9:95:91:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5F:08:8A:E6:39:51:44:52:48:76:25:9D:31:32:FD:91:0A:F3:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4V8IiuY5UURSSHYlnTEy_ZEK81g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:dc:1d:bf:ac:69:fb:77:96:72:ee:5c:64:07:ae:99:aa:86:
6e:47:05:ff:06:40:c8:97:79:28:b0:4c:1a:3f:b6:8b:83:d1:
c8:5a:5a:5c:26:d1:79:a7:72:93:17:41:50:18:b0:3c:ce:8f:
7d:5d:61:74:74:03:84:8b:2c:b1:98:0a:d6:6e:15:4c:3e:a5:
a2:32:a7:fe:52:95:a3:de:8d:8f:23:1a:5b:70:97:1d:ed:72:
dd:ec:bf:91:d6:11:15:dc:7c:06:7d:fb:ee:ca:7c:da:90:45:
ea:7d:52:a4:df:98:f3:e5:12:84:9e:80:b8:bb:fa:21:16:de:
f7:fb:88:0b:43:46:67:d5:28:05:a6:90:3f:4c:ef:f6:89:53:
87:72:83:d0:43:94:9d:8f:02:a7:74:ac:58:7f:62:b4:48:e9:
22:50:ed:e7:b7:c2:2a:6c:77:8b:b2:c9:22:0c:dc:1e:d6:67:
ca:de:1c:75:7b:8d:7f:c9:d0:d8:dc:89:3a:d2:98:bd:50:02:
d1:70:68:b8:38:9a:23:ff:d0:7e:77:b2:b9:f1:ad:10:50:f2:
c5:d6:7b:66:0c:23:e5:5a:2e:3f:ee:e7:ab:0d:d4:8c:e4:97:
2b:d3:bb:c5:40:0f:ce:20:bb:fe:1b:ce:8f:f7:87:df:eb:30:
5c:44:c8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:40:44 2025 by rpki-client