Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4smftTW3XwncQTJB_uHiOHLkI2k.roa
File: 4smftTW3XwncQTJB_uHiOHLkI2k.roa (raw, json)
Hash identifier: h0STfaS6ZM9b3+yAoNT0HD+meFgi1nVCJwR5sKvJnkU=
Subject key identifier: E2:C9:9F:B5:35:B7:5F:09:DC:41:32:41:FE:E1:E2:38:72:E4:23:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A15C1E4ECD9465815C8011B3E43FAD14
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4smftTW3XwncQTJB_uHiOHLkI2k.roa
Signing time: Fri 21 Apr 2023 01:09:41 +0000
ROA not before: Fri 21 Apr 2023 01:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a1:5c:1e:4e:cd:94:65:81:5c:80:11:b3:e4:3f:ad:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 21 01:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2c99fb535b75f09dc413241fee1e23872e42369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:e8:45:25:35:ec:41:d3:aa:61:7c:6a:d1:
f0:e3:e7:dd:9f:fa:8c:90:ff:37:1b:40:79:51:e1:
61:74:d8:0c:25:08:82:86:03:91:13:d9:9c:a0:d7:
2e:05:80:90:b9:82:8b:0d:ef:7c:56:18:e1:02:14:
46:d3:af:d2:a0:6e:7c:55:3d:69:55:f6:06:53:d1:
0b:58:2b:c2:22:58:4d:37:ab:f2:23:0d:10:55:a1:
4c:c3:d6:9b:3f:7c:d1:8a:64:ae:c8:13:36:67:e6:
6a:b5:b0:b2:32:ef:21:69:a0:81:40:2f:78:8c:81:
3b:70:97:fa:a2:dd:0f:5f:8b:7c:7e:08:3f:29:67:
5d:b8:68:18:e7:dc:c0:34:fe:73:18:fe:92:c8:c4:
4e:e7:74:bc:30:fa:ac:7e:0f:3e:df:29:c4:91:d9:
3f:fb:37:79:27:d2:0f:ab:2c:90:05:67:16:1c:5c:
40:9e:37:a4:23:85:fd:e5:44:c6:45:fb:7e:94:6f:
5b:d4:4a:8f:2c:f1:bd:78:a5:4f:dd:8c:7c:e6:df:
15:88:02:7e:c2:a5:6d:ad:e7:0c:fe:d0:01:eb:84:
8e:1f:11:16:ea:81:e4:c9:7d:c5:63:b9:1d:cd:13:
9d:d6:f6:b9:60:69:c2:00:68:e2:7a:5b:06:c1:55:
e2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C9:9F:B5:35:B7:5F:09:DC:41:32:41:FE:E1:E2:38:72:E4:23:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4smftTW3XwncQTJB_uHiOHLkI2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:c3:89:d5:33:d4:59:72:18:57:09:ad:11:82:23:95:e8:f1:
70:f4:e7:ec:f1:77:0d:9a:19:2e:51:ef:5d:4f:5a:f5:3f:9e:
66:bd:45:c7:62:26:f1:76:8f:16:01:f9:9f:6f:d6:b5:f2:06:
7d:9b:a2:93:6e:6e:ea:a1:af:17:eb:a4:ee:ca:86:15:fb:d9:
fa:5c:28:d5:25:1a:bb:fd:b3:c2:0a:4b:4d:33:60:b8:75:1e:
8d:68:af:02:92:24:54:02:12:03:ab:ac:15:ee:33:10:3d:08:
a7:07:c5:58:f0:ca:e2:84:e5:9f:0d:01:72:fb:d6:9d:91:7e:
95:bd:09:b8:eb:c4:4e:20:e0:ef:f7:38:f4:99:4a:72:c2:60:
af:4e:96:fc:3a:9a:40:bb:2f:37:b4:4a:8e:81:be:d2:af:1f:
c4:5e:c7:13:91:22:a5:09:9f:f3:4f:b5:57:71:c0:54:21:a2:
7a:99:70:fe:7e:78:98:be:a5:ad:d5:9f:ec:fe:57:d9:30:1d:
c3:29:b5:90:18:94:a7:7f:80:f3:f9:bb:23:1b:a8:f9:0f:24:
1b:93:b1:22:a1:02:cb:52:c1:ef:dd:bd:68:bf:c7:3a:b5:8b:
64:1e:fb:5d:4e:f8:46:c7:20:84:3d:95:1f:4d:05:0b:c3:fe:
dc:98:b0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:50:17 2025 by rpki-client