Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4qHEOyXmUUSL4VR-GIW9TEYl57c.roa
File: 4qHEOyXmUUSL4VR-GIW9TEYl57c.roa (raw, json)
Hash identifier: p/zWFca1YYPZrAuFiowokP+KGi4uocK2aToaW/kHlLY=
Subject key identifier: E2:A1:C4:3B:25:E6:51:44:8B:E1:54:7E:18:85:BD:4C:46:25:E7:B7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A75C898278EF980C79F736B37DCAD9AB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4qHEOyXmUUSL4VR-GIW9TEYl57c.roa
Signing time: Sun 30 Jul 2023 15:13:26 +0000
ROA not before: Sun 30 Jul 2023 15:13:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a7:5c:89:82:78:ef:98:0c:79:f7:36:b3:7d:ca:d9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 15:13:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2a1c43b25e651448be1547e1885bd4c4625e7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:fb:ea:d0:bc:65:9a:c7:2b:00:a9:54:fb:
99:18:d1:4a:63:35:da:4b:db:d7:42:1e:78:60:3d:
61:d4:c4:e6:47:55:a8:7f:90:9f:e3:25:be:33:10:
2c:14:38:9e:cf:84:ca:ad:ec:b5:4a:d1:75:bd:a7:
26:0c:cd:2e:f2:34:f8:da:2d:d9:a9:d3:d6:ee:30:
f6:47:d4:af:0f:db:2a:b2:b5:ad:6e:da:c4:96:b3:
1b:cf:87:20:af:33:6f:22:79:24:2c:a9:1b:f1:1c:
4b:82:57:12:75:1e:0f:99:88:bd:4b:41:fa:dc:ae:
89:fa:4e:24:4c:a6:68:1f:0a:74:cf:ad:06:4a:ef:
c8:1e:e7:bb:8f:c9:8d:f2:5c:da:a5:13:4b:e7:db:
9f:84:4c:1c:e7:19:74:ac:7c:fa:e8:22:39:a2:fa:
77:59:c5:26:bd:fe:4a:0f:6c:29:be:6b:16:26:1d:
d5:09:70:ba:f7:48:15:c1:dd:e7:0f:96:3c:69:bf:
50:90:3c:77:50:6a:a1:b8:45:9c:87:ef:7c:d8:e0:
1c:40:bc:0e:47:f8:4d:46:41:c7:73:f4:7a:f4:83:
55:ad:43:36:8c:40:62:6b:f6:d4:2b:3f:94:db:34:
1e:cf:fc:93:f9:b0:2c:c6:3a:ed:92:49:98:5b:9d:
9c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A1:C4:3B:25:E6:51:44:8B:E1:54:7E:18:85:BD:4C:46:25:E7:B7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4qHEOyXmUUSL4VR-GIW9TEYl57c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:ec:87:fd:0a:9b:2f:3f:7e:29:46:b8:98:9d:a7:71:b8:d0:
96:6c:b7:95:5f:5c:fc:02:35:f6:6a:d9:b5:e7:14:5b:f4:86:
99:b9:18:61:de:e2:ae:54:4b:41:95:25:59:dc:72:f1:ac:de:
73:bc:24:c8:eb:4d:ad:ef:cc:e4:cb:ec:ef:91:54:2b:38:71:
e2:e4:65:7f:12:e5:e7:6f:a5:a8:22:9a:04:e0:65:9b:a1:d6:
e3:91:96:51:ec:5d:e9:03:81:e5:27:16:ba:44:4e:8b:bb:f1:
da:ed:72:52:b4:ad:70:0d:6f:8a:3a:d7:3a:98:53:40:9d:f7:
4c:d1:a6:4d:c3:9c:73:93:b7:1c:0b:47:ad:fa:55:e3:24:2b:
10:1e:68:76:14:d7:a0:e2:9b:5b:e4:58:c7:a9:80:41:00:11:
25:ab:97:72:93:f0:8f:8a:07:bd:b1:ef:3d:31:3e:0e:6d:aa:
bb:22:30:eb:d8:c5:71:a6:ce:57:f3:7c:07:dc:e1:8c:c0:29:
c6:ef:5e:9f:30:15:e1:94:b8:76:ae:ca:da:6d:70:00:bd:b9:
4b:5c:4c:d5:fc:34:a2:76:e0:64:97:ef:2f:d5:62:f9:51:fa:
6e:fc:7b:42:85:1e:5d:03:96:8c:c9:f2:03:07:4c:14:dd:76:
92:5f:44:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:06:04 2025 by rpki-client