Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4pScO6lgVt-OZY6XFoJ_UymBv3A.roa
File: 4pScO6lgVt-OZY6XFoJ_UymBv3A.roa (raw, json)
Hash identifier: 7/VbHY14WPNvuWFH6JqVCx71oDLuezFJ2zr/lLuOIvc=
Subject key identifier: E2:94:9C:3B:A9:60:56:DF:8E:65:8E:97:16:82:7F:53:29:81:BF:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187559F4DA32508BA3822220534E6574770
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4pScO6lgVt-OZY6XFoJ_UymBv3A.roa
Signing time: Thu 06 Apr 2023 08:11:56 +0000
ROA not before: Thu 06 Apr 2023 08:11:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:9f:4d:a3:25:08:ba:38:22:22:05:34:e6:57:47:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 6 08:11:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2949c3ba96056df8e658e9716827f532981bf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:11:b5:bb:3e:27:21:cc:5f:ac:d1:3f:17:
da:b5:f5:35:8b:73:60:a0:07:24:7b:df:14:97:e8:
70:d0:ba:c0:02:99:cb:ce:38:89:28:c8:14:00:18:
fd:cb:3e:d0:d7:8e:75:51:8e:73:70:22:30:52:04:
69:a2:0f:da:12:2d:46:e1:48:8e:01:13:bb:0a:03:
9e:a3:bb:a4:1e:bc:bd:f7:6a:32:49:49:4e:d8:1a:
37:92:ff:7c:6b:7d:c0:f7:a3:57:5a:4a:a2:3e:51:
71:ea:1d:66:9d:fd:2d:b3:52:1a:4d:a2:c7:0e:1c:
44:b0:b7:07:b6:5a:52:f7:81:d2:b3:43:20:67:a0:
3a:bc:6a:d4:d2:12:25:c9:63:25:a8:7a:a5:30:50:
da:a8:6f:ab:46:43:fa:6f:fc:01:fe:e2:28:12:2a:
b2:0b:ca:e3:7c:bf:26:cc:7b:76:dd:32:03:76:1c:
2e:9a:e0:82:4c:63:c0:8a:c1:83:57:2a:f6:36:3d:
18:0d:dd:cc:a1:d5:9b:25:7e:83:3c:ac:09:d4:85:
76:80:44:ee:bd:44:78:29:a5:19:cf:cb:cc:38:87:
28:d8:4b:1d:ce:8f:95:86:dc:a7:e6:f3:ce:a0:3b:
ce:4f:cc:0a:9a:af:80:f4:f2:8c:82:59:3f:c9:d2:
67:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:94:9C:3B:A9:60:56:DF:8E:65:8E:97:16:82:7F:53:29:81:BF:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4pScO6lgVt-OZY6XFoJ_UymBv3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:96:8d:b8:7a:91:1f:01:8c:71:66:25:32:cc:ea:67:ec:8e:
32:43:44:d9:e9:c8:fa:6b:db:7e:ff:d5:7b:3d:76:6d:d2:93:
50:7d:58:41:44:aa:5c:53:8f:a4:6b:58:df:6b:a4:84:f7:3f:
aa:37:73:0e:7e:c2:e7:75:1f:ee:b6:fe:d2:20:75:c4:a8:7c:
5a:ef:f5:2d:75:76:67:07:89:7a:7c:15:b3:cb:3f:e4:30:2f:
cc:72:7c:3c:4c:40:3e:e8:5b:ec:b4:1b:df:c7:0e:f5:02:a7:
21:6e:71:73:28:41:26:1b:e9:30:af:cd:d6:c5:ef:f3:2b:c6:
87:99:79:69:e4:1d:d1:c2:52:bc:44:fb:21:12:d1:08:1f:8c:
20:d4:64:36:da:d9:85:7a:0a:58:99:e6:9a:3e:94:3a:d7:f2:
d3:ff:53:4a:ab:8f:7d:f5:60:62:b9:74:51:13:34:0f:4a:62:
60:af:5b:a6:03:54:a5:f3:ed:65:6f:f9:f1:0c:30:a5:e4:02:
15:7a:b3:db:6b:88:d0:c3:a2:63:7d:74:3e:b7:74:db:5b:54:
01:b8:55:7a:e1:07:93:1a:27:0c:40:49:07:70:98:69:fa:5f:
27:3c:6e:0c:83:e5:f6:b7:53:7f:9d:f0:b8:63:4a:13:23:d3:
96:ee:4d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:11:40 2025 by rpki-client