Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4p9vYZItgHuLnfxZYPckPBa2XKc.roa
File: 4p9vYZItgHuLnfxZYPckPBa2XKc.roa (raw, json)
Hash identifier: LufmSyI+smsW0K2Ujrx6RVUeQBVnskwYPuTJIkwpa6M=
Subject key identifier: E2:9F:6F:61:92:2D:80:7B:8B:9D:FC:59:60:F7:24:3C:16:B6:5C:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DAA3DA65382B616089EDA86D3CA1E61C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4p9vYZItgHuLnfxZYPckPBa2XKc.roa
Signing time: Wed 09 Aug 2023 14:11:58 +0000
ROA not before: Wed 09 Aug 2023 14:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:da:a3:da:65:38:2b:61:60:89:ed:a8:6d:3c:a1:e6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 14:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e29f6f61922d807b8b9dfc5960f7243c16b65ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:70:65:dd:07:29:8f:4f:7e:a1:fb:55:d5:
9a:a7:99:a6:dd:c4:3e:b2:98:ec:06:7b:10:e2:9b:
b1:b1:b3:07:b6:21:0e:06:8e:4b:db:a0:0e:02:5f:
81:00:7b:3d:d4:8e:1f:10:54:5c:8a:52:b5:34:ad:
3b:5b:03:83:23:ab:f9:ce:ae:5b:13:b2:93:57:31:
bb:48:b3:ad:71:a2:5d:04:0a:41:43:78:25:b3:8a:
aa:0b:25:6c:9d:8f:9c:ae:1b:9c:d6:36:80:56:d0:
41:b5:ef:2d:ff:52:7c:e3:3f:86:59:26:ca:51:ec:
67:ae:2f:c3:da:ba:0a:4c:90:2c:05:5e:6a:ef:36:
18:c7:93:59:90:53:35:4a:1c:47:09:4c:89:c8:86:
22:1b:f0:2f:65:63:55:65:ba:6b:3f:eb:db:4b:01:
e8:6e:b9:e7:cf:97:d6:e1:49:f2:cd:af:f1:cd:10:
4e:b9:9e:64:0a:d0:dd:a7:f1:37:b4:20:2f:ae:41:
30:22:8c:77:d4:9f:95:a2:a5:d7:77:dc:88:e9:04:
23:61:b3:59:db:03:cb:63:62:52:36:8c:18:21:d7:
48:4b:17:4b:93:e8:95:80:3c:50:ab:ab:73:1f:bc:
b1:2c:64:91:14:e9:25:89:8a:ab:e8:a6:ed:e1:d6:
0b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9F:6F:61:92:2D:80:7B:8B:9D:FC:59:60:F7:24:3C:16:B6:5C:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4p9vYZItgHuLnfxZYPckPBa2XKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:66:90:8c:f1:83:7d:54:43:91:b7:a0:75:ba:57:d0:0f:43:
fa:7a:bd:0f:77:7e:0d:56:4f:9c:d5:55:38:23:11:15:da:6c:
ca:32:59:34:22:f1:16:29:af:af:68:26:5e:fa:8d:8f:c9:34:
78:37:bb:60:05:c4:28:00:ab:f3:a4:65:4f:bf:af:13:33:69:
fd:a4:8d:d9:c4:d3:b5:e3:a8:9b:ba:51:5f:72:c8:38:06:05:
27:d9:18:af:40:5f:ef:d3:90:8e:d7:fb:fa:98:7f:7b:27:8b:
ff:a8:03:77:db:3b:a6:7b:3a:5a:71:f3:4a:50:03:02:f9:ec:
bf:51:4e:55:6a:8f:21:e6:1d:29:9d:1d:c3:5e:97:0f:a6:3a:
e4:34:ba:d6:2b:f3:c0:da:9e:1f:5b:fa:4d:6d:b8:38:71:a9:
45:41:a7:32:96:f5:2e:45:0d:7a:55:92:ec:91:af:13:f9:6b:
29:e7:ad:09:88:03:01:2c:0a:20:bc:71:ec:89:e9:1e:4c:f4:
5c:df:d5:cd:31:82:78:b6:22:42:dd:3a:4a:f3:ce:e8:6b:83:
e9:06:e8:3c:b6:f4:ea:ad:da:70:7d:d8:62:93:a5:d3:ce:62:
7f:28:83:88:26:16:06:37:02:6a:72:02:a5:e9:a9:f7:0b:09:
8f:72:34:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:44:13 2025 by rpki-client