Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4yOnx6GFNX2cmNskM8QAsYLhfNc.roa
File: 4yOnx6GFNX2cmNskM8QAsYLhfNc.roa (raw, json)
Hash identifier: epZjk6vE0TGe+yeCzmYIZdx0ogkRwJ6Z1D4SaRhjStA=
Subject key identifier: E3:23:A7:C7:A1:85:35:7D:9C:98:DB:24:33:C4:00:B1:82:E1:7C:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186790CA5C0BF7561FF3DD83D7E1847A5B7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4yOnx6GFNX2cmNskM8QAsYLhfNc.roa
Signing time: Wed 22 Feb 2023 12:15:17 +0000
ROA not before: Wed 22 Feb 2023 12:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:0c:a5:c0:bf:75:61:ff:3d:d8:3d:7e:18:47:a5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 12:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e323a7c7a185357d9c98db2433c400b182e17cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:23:f6:53:eb:6f:83:68:fd:3a:cd:18:36:23:
bd:05:9e:ce:ca:04:00:9b:50:d2:1d:6d:ea:16:2c:
83:26:dc:f2:fe:b9:90:6a:cd:a3:49:ea:63:bf:12:
e0:cf:6b:b9:6a:d8:fa:60:ed:39:70:55:69:36:a7:
77:f7:8b:24:dd:af:48:fa:cc:59:28:48:f2:bf:f6:
45:ad:18:8c:d0:cb:f3:e2:21:fc:9c:f2:f4:3c:fb:
18:c6:e4:ec:3e:0e:21:7b:5d:af:4f:eb:30:cf:56:
81:70:4c:2c:a8:1e:8d:47:22:9f:4e:77:0d:8e:f8:
3d:aa:c0:00:89:c2:0a:03:f4:d4:7a:10:b7:9a:4a:
d5:36:f2:1d:58:70:b0:d8:65:6c:1e:49:6d:31:2b:
de:40:01:6d:0d:61:94:f3:f1:57:b2:db:89:d7:2c:
59:63:11:ce:b6:b0:7f:49:44:a8:88:ac:7f:1b:20:
67:93:fc:28:66:ed:04:3e:b2:c6:a1:94:8e:f3:9f:
b3:3d:f9:20:a7:24:2c:ad:c2:78:bc:04:95:0a:9b:
4a:b1:f4:ab:a6:23:69:f5:80:55:81:c3:8a:97:fd:
c1:7c:92:e0:cd:58:bc:8b:a6:03:2c:cd:4d:67:23:
66:b3:9c:74:d3:ac:fb:e5:37:53:eb:58:31:bc:5d:
8a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:23:A7:C7:A1:85:35:7D:9C:98:DB:24:33:C4:00:B1:82:E1:7C:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4yOnx6GFNX2cmNskM8QAsYLhfNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:fc:d4:80:06:6f:af:20:08:3e:2f:b8:06:71:f3:ce:30:ad:
2b:ba:fd:3e:d2:66:98:c4:0b:cc:e8:96:8b:7d:63:f0:99:5f:
14:ab:2b:2c:eb:7d:8d:64:e8:be:27:51:83:83:46:45:80:7f:
69:11:d9:56:f7:9e:ab:4c:98:d5:4a:1d:f7:f3:a6:c1:e2:3f:
f1:a9:d1:64:00:2b:2f:ea:8e:b9:02:28:fa:84:e2:a5:47:8b:
57:f0:08:47:bb:e0:23:e6:a7:d0:09:93:a5:d9:74:07:15:c6:
a2:56:6d:d2:62:0b:04:e2:f0:c8:63:c3:0c:1f:32:2c:43:f3:
fe:b0:e2:ea:33:05:da:f1:31:56:8e:04:85:17:1e:41:fa:6b:
bc:c3:24:e8:5b:f5:b4:37:e3:ec:11:a2:0d:fc:9f:ea:26:ab:
5b:b3:e7:ce:d6:f3:51:56:96:ec:7e:0a:6b:c1:fb:95:ce:56:
4b:fc:5a:fc:2b:8b:3f:c6:87:2e:8f:df:5d:b3:92:31:a5:0d:
1a:f3:8f:9d:32:5d:fc:59:77:50:0b:b1:76:70:77:e7:05:bf:
68:7d:61:c2:a0:25:cf:e2:50:1b:99:00:5d:de:6d:66:3d:50:
1d:18:fa:bf:af:74:0b:ae:b9:0c:41:07:b7:78:d6:04:a7:98:
26:35:06:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:46:13 2025 by rpki-client