Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/69s8977gkqmBSFAxL0tzfiL7Zc8.roa
File: 69s8977gkqmBSFAxL0tzfiL7Zc8.roa (raw, json)
Hash identifier: CDGVMwpAw6qQEnhtblTmI9EHiMRcXi/JTeMAai3oyeg=
Subject key identifier: EB:DB:3C:F7:BE:E0:92:A9:81:48:50:31:2F:4B:73:7E:22:FB:65:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189939697A37143BAAB241AF07C381BC4D9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/69s8977gkqmBSFAxL0tzfiL7Zc8.roa
Signing time: Wed 26 Jul 2023 19:04:27 +0000
ROA not before: Wed 26 Jul 2023 19:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:189:9396:6e2e/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:93:96:97:a3:71:43:ba:ab:24:1a:f0:7c:38:1b:c4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 19:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebdb3cf7bee092a9814850312f4b737e22fb65cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:c6:56:b7:f1:92:07:6d:67:76:7d:a8:2d:
b0:85:cb:ef:c2:27:b5:f2:3e:d2:1b:eb:e6:4b:7b:
e8:65:dd:30:fc:16:5f:03:47:fb:c7:7f:4e:0d:40:
06:b5:9b:ee:4b:24:3a:21:52:03:94:74:6b:5c:6a:
f2:81:08:60:5f:5f:27:be:aa:6f:16:c3:a4:92:93:
9c:a4:5f:05:4b:b8:ea:12:0c:a7:ec:f2:27:3e:cd:
9f:d4:b2:dd:ef:82:a6:ad:fd:e4:48:90:f7:cb:6d:
c0:1e:90:e8:67:be:63:21:45:eb:74:c4:77:54:f8:
df:84:0c:10:b3:a6:ab:6f:65:57:bb:47:21:ed:87:
f4:8a:99:74:8c:5b:b0:6c:5c:31:32:22:0e:c3:59:
7a:0c:7b:41:4a:ac:c5:6c:01:6b:d6:c6:13:0d:b9:
e5:1a:d5:55:72:0e:f0:91:05:c4:96:e3:ae:eb:68:
70:b1:14:0e:40:23:69:84:d5:72:a3:69:27:32:05:
b8:c8:a0:5d:43:cb:86:e5:c8:74:06:c0:0f:02:2c:
b0:d1:18:7d:1f:85:99:33:78:cc:d4:21:9d:70:74:
55:e7:88:d3:35:d9:a4:d3:b9:0e:e4:c2:77:32:af:
f2:15:ea:5f:a6:a4:25:21:06:1b:90:c2:22:5b:40:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DB:3C:F7:BE:E0:92:A9:81:48:50:31:2F:4B:73:7E:22:FB:65:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/69s8977gkqmBSFAxL0tzfiL7Zc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:8d:3b:26:f1:32:b1:9f:5e:14:d5:1a:5c:1b:af:d5:37:d8:
02:b8:07:e0:6b:08:17:c4:b7:f4:72:a0:9b:55:40:7e:d1:da:
91:e7:5c:99:ab:d3:ac:b1:b2:cf:f4:a7:e0:dd:44:0d:90:1e:
9f:98:b3:84:eb:26:4c:e8:be:91:f4:7c:ff:4c:e1:52:ec:cc:
95:1f:76:6a:a0:bc:80:17:c0:53:7f:26:75:2f:5a:6d:88:14:
a5:a9:cf:53:22:95:4b:09:39:63:ce:7b:74:81:ff:67:a0:a4:
a0:b1:eb:d3:d9:e0:2f:67:b9:f8:53:49:26:1a:b0:cb:ba:61:
1b:af:e0:f0:ae:03:10:17:81:90:b0:27:fc:ad:11:09:3e:4f:
b3:7b:18:52:f8:c4:e2:20:83:a9:63:98:d5:b7:e5:c6:9f:31:
3a:e6:76:4a:27:c0:d8:43:a9:c7:9f:dd:d6:8d:95:a3:49:a6:
1f:36:0d:5c:ad:9a:3e:43:53:e0:2e:aa:07:a1:2f:31:9a:21:
74:29:2e:0f:78:a8:c5:80:33:84:5d:05:dc:a2:14:64:10:2c:
a1:63:99:0d:9e:9f:3c:bb:b2:b1:ee:52:02:12:be:86:f7:8d:
a0:22:d0:46:57:f5:8c:d0:6c:65:dc:dc:cb:cc:ef:56:65:9e:
4e:57:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:27:21 2025 by rpki-client