Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4WpoTX0INx46xvq2b2gTquDjmTY.roa
File: 4WpoTX0INx46xvq2b2gTquDjmTY.roa (raw, json)
Hash identifier: oaJRuJDC00AxSdd/nQYFrmigGlS/48wDara+C+s5kIs=
Subject key identifier: E1:6A:68:4D:7D:08:37:1E:3A:C6:FA:B6:6F:68:13:AA:E0:E3:99:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884F60822819347764EB917C80CAF7120A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4WpoTX0INx46xvq2b2gTquDjmTY.roa
Signing time: Wed 24 May 2023 20:08:24 +0000
ROA not before: Wed 24 May 2023 20:08:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4f:60:82:28:19:34:77:64:eb:91:7c:80:ca:f7:12:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 20:08:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e16a684d7d08371e3ac6fab66f6813aae0e39936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:e1:c0:cd:c6:af:44:fa:86:0f:f5:17:a0:
b8:4c:0e:fd:b0:64:a3:cc:e9:2b:d5:5b:a3:6d:76:
50:74:96:0b:bf:fc:cc:2e:74:8a:b4:bc:2a:8c:96:
47:c8:87:7e:12:29:e1:82:9c:4c:5c:62:15:87:bf:
ee:7d:ce:ad:d2:52:9f:95:3a:9a:72:5b:37:c4:5c:
1e:3d:5f:e9:6e:fd:04:9a:35:dc:d7:e0:98:7c:5f:
da:67:96:8e:19:8a:bd:30:00:e1:88:4c:75:c2:7b:
c5:b4:2f:dc:e9:16:11:a8:8d:a7:ad:30:77:59:ef:
09:bb:2b:aa:f3:72:77:89:13:85:ec:8c:65:aa:5f:
f9:49:09:ee:8e:58:00:cf:c5:e3:ab:7d:0f:ec:9d:
c6:4b:b7:d5:56:ed:40:a6:6c:8f:83:82:a5:59:40:
ae:a7:b6:4d:eb:4d:39:45:9f:6c:6e:00:cc:b6:ae:
76:5b:f8:16:fe:93:56:8e:0a:85:97:e8:8d:08:56:
b8:22:a2:b0:f1:1a:63:a5:75:c6:76:23:c4:35:ae:
80:a9:07:1c:eb:5c:14:1d:c3:84:5a:cd:23:cd:c8:
68:3e:4b:52:ca:56:e2:45:c3:aa:cd:0d:bb:19:47:
f6:c2:11:2f:8e:27:7f:51:be:15:3a:e8:24:28:66:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6A:68:4D:7D:08:37:1E:3A:C6:FA:B6:6F:68:13:AA:E0:E3:99:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4WpoTX0INx46xvq2b2gTquDjmTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:31:af:29:da:22:4b:a5:8e:28:b2:46:e2:d9:e9:19:c8:78:
f4:2a:72:43:88:20:bf:fe:4b:45:cd:19:d6:b4:4d:23:89:69:
9d:35:b8:e9:a3:65:4b:ce:9b:6b:cb:c8:13:a9:9b:64:50:1f:
0c:fe:c3:2e:d2:b0:53:7b:6a:c3:de:d3:50:1f:a4:df:3f:7d:
2b:ce:76:fd:70:be:0d:b1:f1:ec:7b:63:82:bc:16:f3:4a:9f:
3d:71:05:77:06:b7:af:a5:e5:b3:4a:ce:c4:f8:96:35:01:36:
8a:56:2d:b7:8c:1c:9f:c2:cf:d7:e0:17:f5:71:2f:d0:73:f3:
10:33:4c:ca:e2:a9:71:39:01:51:91:2d:89:44:77:21:c4:90:
46:f8:69:92:55:5e:7c:a8:11:2d:31:2a:12:60:da:dc:34:d1:
12:c4:b3:aa:c1:95:2c:c7:43:71:90:a7:8b:31:ff:76:24:fa:
bf:24:4f:48:6c:31:de:c5:e0:87:52:5e:49:42:27:9f:f7:84:
fa:30:f9:5e:76:83:13:ca:ff:c4:9a:e6:a5:14:cc:12:6a:86:
c9:e4:20:0b:59:38:1e:c3:ad:ad:0c:76:a8:9a:b7:03:78:5e:
74:cb:43:be:1e:f8:9d:fe:d2:d6:ce:5e:17:4c:93:6d:1a:c8:
b1:18:ee:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:02:06 2025 by rpki-client