Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4oHkZgTy7m5magr3vr28rWHAnlA.roa
File: 4oHkZgTy7m5magr3vr28rWHAnlA.roa (raw, json)
Hash identifier: SVhQ+A+ZCaWcvpTBVOWUIusvO2dQ+YPsnUaCtwdTwn4=
Subject key identifier: E2:81:E4:66:04:F2:EE:6E:66:6A:0A:F7:BE:BD:BC:AD:61:C0:9E:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CCB2C517FF8E544C086E0CA95E0193D4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4oHkZgTy7m5magr3vr28rWHAnlA.roa
Signing time: Fri 10 Mar 2023 18:05:13 +0000
ROA not before: Fri 10 Mar 2023 18:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:ccb1:e2d2/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:b2:c5:17:ff:8e:54:4c:08:6e:0c:a9:5e:01:93:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 18:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e281e46604f2ee6e666a0af7bebdbcad61c09e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c9:7f:be:b3:62:a0:cc:7b:6e:4a:27:b3:7e:
83:7a:97:bd:66:ad:b5:66:c7:88:e7:24:c6:e7:27:
3d:91:8c:cf:76:32:53:6e:a8:d2:b7:8e:61:08:1e:
7b:61:52:97:1a:ae:e4:88:87:f8:3f:d5:51:2a:2d:
fc:8f:e5:5b:fe:82:5d:81:a5:85:51:de:b2:38:b7:
c9:0f:fc:d7:56:14:63:2c:3e:7f:77:a0:ed:60:c5:
61:00:aa:43:8b:8d:3f:98:cc:3a:9d:8d:35:b2:fb:
fc:ec:a6:47:03:23:7e:13:76:9e:e5:ee:17:b1:0f:
1b:08:3e:ad:ca:41:7a:5a:ad:1f:82:f6:ca:ce:a3:
93:b5:c7:52:50:3a:44:2b:4b:c1:d6:72:92:f0:12:
45:e6:ee:95:fe:21:be:8a:dc:97:40:a4:b2:65:3d:
e2:ed:38:d1:09:31:e4:0e:3f:c2:3f:c4:1e:e4:67:
87:6b:7a:38:4a:fb:d6:29:63:21:14:61:89:2a:cd:
59:8e:37:a4:87:11:90:d9:ba:3d:5e:25:d2:f6:39:
48:cc:9e:e3:58:75:6f:f1:fa:5a:3f:a2:79:6f:f0:
0b:da:c3:84:d0:1a:46:d2:f8:52:d5:f7:70:66:c1:
6d:97:90:ba:5c:c6:61:0b:db:f9:c5:3b:8e:6d:6c:
a7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:81:E4:66:04:F2:EE:6E:66:6A:0A:F7:BE:BD:BC:AD:61:C0:9E:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4oHkZgTy7m5magr3vr28rWHAnlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:95:e2:85:66:ca:cf:71:4f:3c:79:e8:3d:4b:51:a5:42:a6:
75:b5:09:d2:0e:c4:5f:ef:e3:c3:ca:33:b1:88:1a:9b:15:11:
5a:4b:41:11:cb:f2:7b:d8:09:db:75:25:8a:62:09:70:28:3a:
af:42:bc:f8:b5:88:11:7e:7f:49:b7:a5:43:68:82:eb:42:ae:
d3:b8:c1:e3:be:73:3c:5b:6d:81:0e:97:ea:1b:fc:89:60:46:
4e:7d:0a:1e:75:f6:d4:f2:34:61:37:2c:2a:72:ce:23:37:84:
47:72:f1:fe:17:2d:90:e6:46:cd:8b:91:d1:6d:2f:38:24:8e:
88:8d:d5:a4:24:ed:72:ec:53:46:02:52:bb:3e:30:eb:48:9f:
43:29:ec:2b:9a:e1:ee:91:ec:6d:2b:b2:87:9a:fe:e2:a4:cc:
20:71:3d:73:24:a8:4d:81:07:3d:77:c2:a9:4a:b5:60:5f:84:
ed:bd:9a:5b:f3:0d:4c:a1:75:bc:5f:07:3a:90:b8:2f:69:6b:
ff:59:fc:8c:2f:83:6b:9a:b0:0e:26:32:4e:01:43:1f:6b:e1:
4e:22:b9:7b:7b:08:1f:88:5d:09:3d:cb:c4:f7:ca:ec:eb:79:
f8:34:a5:07:8f:cb:92:78:06:cc:36:06:5b:17:90:0d:f9:97:
64:8a:f9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:53:36 2025 by rpki-client