Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4u25BJAwij26lSVYWPKMedbltMM.roa
File: 4u25BJAwij26lSVYWPKMedbltMM.roa (raw, json)
Hash identifier: PDLhw0yccJ4zQ5XB8MT3cZE3YIJhN8NUYfN4MqnsewQ=
Subject key identifier: E2:ED:B9:04:90:30:8A:3D:BA:95:25:58:58:F2:8C:79:D6:E5:B4:C3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EA4FB263229E728584EE64643143FC3B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4u25BJAwij26lSVYWPKMedbltMM.roa
Signing time: Sat 12 Aug 2023 15:13:58 +0000
ROA not before: Sat 12 Aug 2023 15:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ea:4f:b2:63:22:9e:72:85:84:ee:64:64:31:43:fc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 15:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2edb90490308a3dba95255858f28c79d6e5b4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:9a:87:32:7b:30:61:9a:aa:44:40:ad:91:
d5:48:dc:f7:e3:c9:0a:69:82:6b:3b:52:e4:9d:13:
4d:ce:f8:fd:00:62:85:25:0e:fb:61:d6:fb:94:de:
76:94:e1:57:02:9f:f6:34:81:f8:ed:a0:4f:54:d7:
8a:cd:c3:20:66:62:17:d8:c2:1d:84:64:07:93:4b:
db:2e:b7:30:df:a9:b6:6c:6b:49:fd:e4:cc:38:42:
83:5e:27:25:a2:58:83:06:cc:03:60:77:ba:e0:8d:
6f:51:3d:29:c3:c3:93:2b:ee:e8:c8:b8:88:c8:7a:
4e:71:a4:fb:e3:dc:2b:fd:3e:c9:20:c5:c6:4f:5f:
db:54:f2:71:01:9f:32:02:42:24:09:c1:3e:59:8f:
35:c4:b5:5e:c2:50:64:ec:0c:03:f2:5a:4b:31:65:
cf:88:f3:48:89:71:16:28:10:c2:df:00:f3:01:40:
02:85:8d:ca:be:eb:d7:ee:44:a8:12:dc:09:ec:d7:
b2:07:83:b1:b7:05:60:3b:3a:cf:dc:89:1c:71:53:
4a:91:f7:81:59:1b:d9:7e:0e:00:dc:6e:8e:b5:be:
4e:56:df:90:3c:e3:68:11:e3:d6:fb:99:9c:4f:b6:
3a:88:c1:6a:a0:04:14:d5:3b:49:8c:49:19:51:72:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:ED:B9:04:90:30:8A:3D:BA:95:25:58:58:F2:8C:79:D6:E5:B4:C3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4u25BJAwij26lSVYWPKMedbltMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:9c:f6:27:d8:7c:60:bc:43:ff:10:05:05:6d:82:71:ce:87:
54:9d:25:b3:94:f9:eb:fd:5e:9e:5a:ea:11:a1:02:42:ca:45:
76:cd:53:7a:15:9e:c2:52:28:55:41:c0:73:b2:34:95:6d:13:
f9:02:a8:96:30:ba:06:b4:dd:42:fe:75:7b:cd:e4:89:e6:a5:
54:b1:aa:4e:57:da:ce:90:a9:2b:af:56:7c:c6:aa:08:52:f9:
68:ca:4d:a3:0f:7b:fa:af:20:0b:5e:6a:79:ec:64:f4:3f:fe:
62:ee:c7:42:78:80:09:e9:69:c1:c6:05:02:05:1c:d0:42:19:
fc:f6:ac:7c:34:27:8b:27:25:d2:b6:07:97:87:a9:db:9b:ae:
be:55:9a:59:8a:89:4e:49:15:6d:fe:c0:d0:4c:cb:bd:e0:4d:
73:d2:0e:b0:80:0d:9a:ec:50:1b:bf:e1:4b:6a:1d:dd:47:eb:
29:c6:b0:e6:fb:84:a3:5b:ab:03:21:8e:f6:bb:52:ed:f2:0f:
5f:4d:fa:23:73:73:18:ce:46:08:1e:6b:8a:5e:e0:eb:a7:5e:
b2:42:3d:96:0f:b5:ca:ac:4c:eb:16:7c:7f:66:1e:f9:42:78:
51:d1:23:da:88:ff:b4:f1:a7:65:e0:64:e0:01:0d:69:f7:f5:
b5:b1:3a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:46:57 2025 by rpki-client