Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/55l9Ta_3vHlZ6sEIXh-UGAq_FvA.roa
File: 55l9Ta_3vHlZ6sEIXh-UGAq_FvA.roa (raw, json)
Hash identifier: dIimcbZ8MhB3ynIeEXa3fYeyFzHVdgtN4Q56YzQ43To=
Subject key identifier: E7:99:7D:4D:AF:F7:BC:79:59:EA:C1:08:5E:1F:94:18:0A:BF:16:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189348CD01F4C9BCD5DE1B23454BB925FFE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/55l9Ta_3vHlZ6sEIXh-UGAq_FvA.roa
Signing time: Sat 08 Jul 2023 08:09:50 +0000
ROA not before: Sat 08 Jul 2023 08:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:34:8c:d0:1f:4c:9b:cd:5d:e1:b2:34:54:bb:92:5f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 08:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7997d4daff7bc7959eac1085e1f94180abf16f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:22:7b:0d:ee:ec:79:b6:2b:4d:9a:3b:e4:18:
ca:b5:22:03:0f:7b:b0:82:ac:ba:65:74:ca:b6:1a:
92:4a:d0:78:96:ce:4e:70:03:dc:48:29:f5:00:b0:
d4:46:87:65:09:93:58:12:29:46:03:b9:9a:52:b6:
74:79:f3:85:4e:1a:57:08:84:3a:bc:34:10:35:91:
f0:e0:b9:d0:99:40:43:48:92:69:92:b6:8b:b1:3d:
33:db:37:1a:ef:63:84:ba:65:77:ec:7a:99:63:96:
b8:37:2d:85:6c:47:76:2a:84:b8:dd:7f:8a:07:3d:
5a:db:de:79:8f:31:19:86:34:8f:13:02:71:71:2d:
08:40:72:28:66:f3:03:9b:e3:c7:88:b8:ac:72:8f:
69:a8:6d:fc:c9:c2:16:ed:de:1e:89:98:47:80:4f:
b9:9b:dc:05:47:4f:d0:a8:b4:14:69:99:f2:ae:60:
99:50:74:d5:6f:c9:44:f7:ee:82:a5:00:93:6d:bf:
8d:ca:51:15:de:1f:fb:aa:b5:fd:ae:02:3a:a7:06:
4e:4a:89:8f:5e:88:9a:eb:9e:66:dc:f8:23:ec:ef:
64:e4:3c:ad:13:9a:3b:cd:ae:b7:b1:70:19:33:bf:
5c:3b:ed:be:ad:cc:f4:8c:77:f5:a4:28:4e:38:10:
37:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:99:7D:4D:AF:F7:BC:79:59:EA:C1:08:5E:1F:94:18:0A:BF:16:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/55l9Ta_3vHlZ6sEIXh-UGAq_FvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:03:10:53:a7:23:66:7f:63:7b:7a:d2:6d:ac:d0:7e:8d:3a:
3e:0c:8d:c3:00:58:ea:62:86:e8:24:7a:5f:b5:5e:ae:9f:4b:
bb:ba:5b:d5:26:33:d5:c5:d9:71:f5:78:bf:51:8a:c6:c9:91:
23:be:7b:2a:77:c1:74:11:d7:38:79:b5:cc:3b:68:f1:68:e4:
9d:c1:9c:26:dc:62:79:48:e0:1f:af:a2:e3:98:bc:f7:7c:64:
07:e9:2b:11:ed:c7:b8:be:7b:62:81:54:f5:79:74:7f:60:3c:
ab:fc:d1:45:07:21:6d:6c:75:d8:eb:c9:e8:3d:ff:b3:b0:93:
5a:32:ef:0c:fa:c8:81:1a:33:56:63:d0:c6:68:d1:58:93:6a:
61:00:e5:c8:2b:e9:7c:f2:e7:98:70:86:78:e8:4a:e6:02:93:
58:f2:cb:8e:d4:11:71:61:df:e6:b9:e5:e5:b6:c5:02:9c:b6:
d8:82:cc:a0:bf:ae:73:00:f7:2d:da:17:c3:70:61:ac:71:3a:
6e:63:0e:73:4f:51:c3:17:5e:2e:1e:6a:5e:99:a7:5d:cb:6e:
33:26:06:c1:93:01:ea:5c:ee:6f:89:a4:13:5e:30:70:0a:ab:
ba:a8:33:a5:25:56:d1:ac:87:cb:b1:3b:ce:53:3a:a3:5d:8d:
41:88:44:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:07:14 2025 by rpki-client