Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4u0XW1h0iFUW6x_rWXyxse9FMD0.roa
File: 4u0XW1h0iFUW6x_rWXyxse9FMD0.roa (raw, json)
Hash identifier: AQrOIBkaA8C6rbjs8b3MnGCBGUVv4S2Cv8hd83ophHw=
Subject key identifier: E2:ED:17:5B:58:74:88:55:16:EB:1F:EB:59:7C:B1:B1:EF:45:30:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0590692103F565159BC07DBB993B018E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4u0XW1h0iFUW6x_rWXyxse9FMD0.roa
Signing time: Thu 17 Aug 2023 22:14:24 +0000
ROA not before: Thu 17 Aug 2023 22:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:05:90:69:21:03:f5:65:15:9b:c0:7d:bb:99:3b:01:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 22:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2ed175b5874885516eb1feb597cb1b1ef45303d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:39:65:65:23:d3:bb:ea:97:ac:84:80:82:e7:
54:de:88:0c:bd:d3:4e:eb:a2:1f:54:32:96:1d:33:
48:cf:bf:b6:07:c1:81:2c:59:b9:3a:3a:89:4e:ad:
db:83:11:5c:e5:8b:9b:8e:52:83:ab:26:ee:a6:7d:
29:13:5f:b3:5a:9a:cb:0c:46:c6:9e:29:a6:ff:24:
d7:6c:e0:fa:0b:5a:98:df:52:22:0c:e3:89:fb:33:
cc:74:64:07:5c:b2:d5:e9:73:fd:36:90:c2:91:2f:
f6:2c:16:18:85:e6:ea:61:bf:1b:19:62:b4:c4:d6:
13:24:b1:12:47:c4:31:e5:b1:24:d1:a5:d9:27:4e:
cb:a0:a1:07:ef:2f:bc:e9:37:d8:cf:98:a6:dc:0b:
7d:f3:93:48:c9:99:bc:0a:8d:a4:ff:2a:45:04:03:
b6:c5:5d:d4:ba:ea:9d:8f:79:ad:e3:9d:4f:f2:b9:
72:92:90:b1:30:cc:31:16:1f:04:e3:41:a8:8b:03:
bc:64:05:b7:40:77:73:0e:94:17:de:ca:58:c3:cb:
42:af:bc:4b:ec:dc:ed:43:bb:6c:e3:86:57:e6:36:
3e:87:63:87:e0:5b:92:58:a3:99:66:4c:0c:37:eb:
01:a8:93:82:0d:a0:8e:2c:51:b6:c2:30:91:8a:46:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:ED:17:5B:58:74:88:55:16:EB:1F:EB:59:7C:B1:B1:EF:45:30:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4u0XW1h0iFUW6x_rWXyxse9FMD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:23:23:d7:ab:a8:d5:82:78:e0:7c:c6:f3:89:cf:25:dd:f2:
f0:20:52:9f:55:0b:79:ed:5d:59:32:66:56:d8:7c:1f:e8:ea:
32:b8:c0:4e:60:0d:9b:b1:50:ca:ef:5a:eb:f2:df:87:67:ea:
47:45:5e:13:e1:d9:2c:c2:c2:d0:c2:9f:49:af:e9:d2:d6:3e:
7c:69:15:92:9d:3a:e1:00:e4:76:a4:97:f9:15:50:ac:83:c8:
ea:6b:49:07:3a:e2:4c:0a:8e:bc:15:19:bf:3a:a5:0d:df:7d:
24:a6:5f:08:28:24:1b:32:4a:20:87:55:28:d2:91:7a:e5:20:
67:2a:26:41:f3:59:4f:19:6c:2b:6f:e9:03:33:f9:4d:61:4a:
8a:40:32:ad:19:d1:0a:c7:5f:1c:5d:ed:b3:c5:0a:14:89:4b:
b4:2a:cf:83:a8:f2:6f:36:cb:d7:21:77:16:e1:35:55:b1:10:
c3:e2:67:06:c6:32:c2:57:e9:0a:3f:d2:ce:23:5b:b6:ec:44:
9f:04:03:8e:a5:b2:d8:f8:53:61:29:48:a7:6b:a0:77:20:f8:
05:d2:5f:27:b6:97:82:b5:df:fd:76:76:63:53:09:f7:8f:cd:
53:29:aa:6d:05:70:b9:66:c4:10:d7:6c:2e:f3:c1:f5:89:a6:
85:03:ae:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:17 2025 by rpki-client