Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4yeUVM4QAYA3ZjA4Wea1-mY6290.roa
File: 4yeUVM4QAYA3ZjA4Wea1-mY6290.roa (raw, json)
Hash identifier: X3AQ/JJzu21MVam+Ejf3NNj6SCW7yCdNLCJsYN/18Ho=
Subject key identifier: E3:27:94:54:CE:10:01:80:37:66:30:38:59:E6:B5:FA:66:3A:DB:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018880188BF05695B0C09B5AF3EA8C62F89D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4yeUVM4QAYA3ZjA4Wea1-mY6290.roa
Signing time: Sat 03 Jun 2023 07:11:12 +0000
ROA not before: Sat 03 Jun 2023 07:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:80:18:8b:f0:56:95:b0:c0:9b:5a:f3:ea:8c:62:f8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 07:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3279454ce1001803766303859e6b5fa663adbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:42:4d:7d:ba:82:51:24:de:8d:2e:bd:2d:
b4:ed:f7:46:39:87:d7:87:fd:45:8c:32:dd:4b:ae:
88:db:d2:f2:c6:b1:7a:b0:bc:e2:73:6b:df:8b:d0:
61:e5:30:be:56:2b:df:b6:23:8a:4e:86:2a:a4:c3:
55:66:81:e6:71:a6:b7:6f:64:93:5b:a8:d7:70:b9:
b5:1e:0a:24:33:4a:49:b3:f6:f3:48:30:6a:f1:e7:
82:30:bd:c1:72:b8:02:35:ac:da:0b:c5:fc:1e:24:
86:fb:a3:b3:23:d2:b9:f6:5c:34:bf:91:6e:49:f0:
68:b1:26:5a:dd:7a:39:23:c3:0c:a6:88:67:03:e8:
55:d2:e4:77:1f:31:9d:a4:97:5d:3c:aa:fe:0e:8f:
e7:5e:14:39:7a:21:7c:b1:13:4a:59:a9:59:9a:50:
50:3f:16:bd:ee:86:9c:45:ab:85:d2:d7:73:a6:0c:
87:34:88:59:94:c6:db:e3:35:5f:36:6c:82:2e:92:
22:d8:a9:44:b5:99:3a:77:fa:61:91:92:9a:7d:79:
16:e6:e5:6a:ab:11:92:6b:e2:6e:3a:b7:30:43:3f:
2a:79:cd:7c:97:12:ab:27:08:04:9d:5f:cd:ad:02:
17:b0:51:f9:3b:c6:ea:df:8d:f2:36:e4:fe:9c:71:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:27:94:54:CE:10:01:80:37:66:30:38:59:E6:B5:FA:66:3A:DB:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4yeUVM4QAYA3ZjA4Wea1-mY6290.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:da:59:1a:e3:22:93:a9:a7:af:b3:32:93:aa:3e:c5:5e:b1:
4e:e7:d8:2b:23:f2:d3:99:8e:95:53:d3:6d:7d:b0:67:06:28:
fe:96:c5:fa:b3:43:9c:1f:28:17:5a:a9:6c:79:60:b1:b3:d9:
dc:59:87:d4:72:d4:92:6a:0f:8e:50:43:30:45:1f:57:cf:7b:
aa:3a:ff:13:3d:b4:20:47:1e:3d:11:d7:05:8b:7f:99:ef:ab:
42:54:e7:4c:ca:61:90:50:14:d6:56:0f:e5:10:c0:0c:6c:12:
8a:78:a4:fc:15:8c:f7:fb:ce:1f:a9:61:09:1b:ea:f9:59:77:
8c:25:ad:1d:c9:89:61:dd:7b:59:f2:2b:3c:b3:5f:a6:6c:27:
8b:6d:f2:7c:eb:1b:d2:5e:53:dc:a4:e3:ca:da:5d:ee:89:ff:
9e:3c:e3:eb:9c:ea:bd:1d:35:b0:94:93:e0:70:eb:97:e2:5e:
d0:e9:aa:36:2f:81:e6:d7:4f:b8:f8:16:bd:5a:a4:c7:81:61:
97:67:bb:fc:ae:de:38:a0:d6:2d:2f:55:6e:3a:82:94:6c:e9:
7e:ab:cc:cb:b3:dc:8e:0d:7c:52:f7:b2:21:43:04:64:ce:9f:
33:7d:26:50:8d:b7:75:11:a9:9e:f5:4e:85:c4:20:ef:7b:80:
25:35:d4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:49:33 2025 by rpki-client