Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4XsEOK8rginaM1eagVXV_wrRSfA.roa
File: 4XsEOK8rginaM1eagVXV_wrRSfA.roa (raw, json)
Hash identifier: RTvM9nNYojznO9Is4QGM8JktCz3YVN0QP8HuzziBuJ4=
Subject key identifier: E1:7B:04:38:AF:2B:82:29:DA:33:57:9A:81:55:D5:FF:0A:D1:49:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FE0B0FC2BE3E205EEE63104B872B817B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4XsEOK8rginaM1eagVXV_wrRSfA.roa
Signing time: Wed 16 Aug 2023 11:11:24 +0000
ROA not before: Wed 16 Aug 2023 11:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:0b:0f:c2:be:3e:20:5e:ee:63:10:4b:87:2b:81:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 11:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e17b0438af2b8229da33579a8155d5ff0ad149f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:fa:e4:68:ae:e8:4c:8d:9e:d1:b6:35:48:
cc:5a:c4:13:d2:48:d8:d4:08:6a:41:45:33:52:76:
16:a4:93:02:8f:5c:10:9d:27:50:0d:4b:db:13:dc:
67:dc:05:c6:ea:03:26:57:72:d1:fb:a3:2d:94:5d:
62:35:d9:5f:80:5f:2f:ca:5e:83:7a:71:d9:99:bd:
eb:81:d2:9e:73:96:6d:bc:db:76:82:de:19:9b:48:
2a:54:ce:a5:ed:90:ae:64:99:55:77:3f:64:58:4c:
88:04:27:64:25:48:9e:a9:e2:e2:7f:25:2a:91:24:
a7:1b:13:90:ee:f2:35:3f:e1:05:3d:fd:86:a5:8a:
4b:5b:e6:b9:33:50:9f:d3:e9:6b:55:ca:90:33:58:
1f:4b:96:d7:2d:fd:73:23:16:6d:e8:76:02:b3:67:
2a:04:31:ca:4e:57:24:95:38:f0:29:56:35:5c:8e:
46:18:1a:a5:51:f2:92:01:bb:55:e4:c8:53:ff:65:
07:fe:fc:48:ff:fe:f9:a1:2c:2f:0c:69:4b:37:40:
25:fe:9c:bf:72:32:a7:ee:9d:ac:4d:44:69:22:16:
bb:06:19:11:d1:20:9b:c4:30:63:c8:1c:1c:ca:84:
7d:39:13:53:43:48:d4:7e:e7:53:6b:12:cd:86:65:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7B:04:38:AF:2B:82:29:DA:33:57:9A:81:55:D5:FF:0A:D1:49:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4XsEOK8rginaM1eagVXV_wrRSfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:a0:74:4a:df:e9:62:83:d9:d8:77:40:15:4e:18:21:4e:4c:
0b:cf:d1:a3:d1:27:82:e7:f0:53:da:36:aa:f3:d9:b0:e4:d1:
03:00:6e:02:43:4d:68:18:dc:6f:fa:91:73:10:6a:35:52:89:
f5:66:63:30:c4:7a:80:ea:17:a3:da:70:1d:5f:99:dd:2a:c0:
af:68:2d:db:32:dc:49:a7:8f:d6:10:3f:a3:79:d5:b2:a7:19:
fb:a9:89:3f:0a:c4:28:73:9d:73:50:00:e8:d4:78:74:4d:cb:
b4:73:d9:06:a9:a0:d7:b7:7d:cb:8e:75:3e:6f:61:ee:a3:42:
87:b8:53:a2:e8:f3:1d:66:2d:7b:9d:94:92:9c:bc:cc:52:17:
c9:78:3b:66:f0:45:2c:85:57:c0:a9:7a:8a:07:4d:13:7d:01:
7b:08:44:2f:23:d7:2f:68:aa:b3:80:9d:a9:cf:ec:76:dd:8e:
8f:a4:33:8f:f2:9e:9e:38:58:4b:b2:0c:09:ee:73:be:a7:d0:
65:f0:0e:91:e6:ce:03:78:7c:66:70:a0:2e:a2:78:a3:9b:7d:
cb:85:5a:60:8c:9d:a4:63:10:d1:32:bc:11:e2:2e:2a:4f:69:
3f:3f:a7:29:19:f7:50:14:ca:f3:41:fd:06:68:34:a2:80:c3:
cd:b7:80:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:54 2025 by rpki-client