Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7t48NPwtrzZjqqooKsiSDGnoQYQ.roa
File: 7t48NPwtrzZjqqooKsiSDGnoQYQ.roa (raw, json)
Hash identifier: NAERu+qAjYWf20ebjqHXo06gKa/UHzcpI/nIzulIG7M=
Subject key identifier: EE:DE:3C:34:FC:2D:AF:36:63:AA:AA:28:2A:C8:92:0C:69:E8:41:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DC54E6394672211B6641B2EE5D0445DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7t48NPwtrzZjqqooKsiSDGnoQYQ.roa
Signing time: Wed 09 Aug 2023 22:04:58 +0000
ROA not before: Wed 09 Aug 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:dc54:3207/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:dc:54:e6:39:46:72:21:1b:66:41:b2:ee:5d:04:45:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eede3c34fc2daf3663aaaa282ac8920c69e84184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b9:35:fc:55:7b:a4:e9:c7:ab:a0:17:eb:10:
5c:49:ac:1b:0a:d5:f9:54:d0:71:3c:6d:57:fe:58:
49:79:66:8f:38:56:5a:70:02:ab:80:e6:81:b0:72:
90:ea:68:ca:9f:86:8b:97:45:04:1e:59:7f:68:e3:
1b:c5:0a:1f:51:bf:e2:8e:58:f2:d0:13:5a:9f:01:
b7:92:e0:e8:46:eb:f3:32:b4:51:9e:bd:fa:55:b3:
8c:f8:15:59:0b:56:86:ae:a3:d8:ac:80:4d:10:3f:
8f:0f:85:93:ee:64:00:9d:bd:4d:72:67:9c:94:51:
01:88:8e:48:30:df:4f:4e:8d:15:61:8b:15:d0:6d:
ed:c9:b7:a3:9a:9e:81:7f:69:fb:ef:c1:ba:6e:34:
ef:0d:f0:70:bd:da:64:ba:20:1b:12:69:74:77:6b:
40:1c:04:1a:26:53:b6:10:54:5b:25:fb:03:05:2a:
7c:02:ec:14:77:e0:9e:ee:9b:2c:ff:65:8d:e5:c7:
e5:bc:3a:55:bc:71:4e:ea:d0:81:7d:63:e9:09:dc:
cc:ed:32:fe:07:57:b4:48:1d:7c:2b:58:74:4c:30:
8b:d7:21:17:46:57:2e:d5:c2:a3:65:44:e4:1f:03:
9c:09:3b:bc:95:a2:6f:11:c9:a2:55:9c:69:e2:8f:
3e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DE:3C:34:FC:2D:AF:36:63:AA:AA:28:2A:C8:92:0C:69:E8:41:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7t48NPwtrzZjqqooKsiSDGnoQYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:6b:22:f7:f1:fe:a9:58:3c:28:1c:3c:88:db:c7:82:e3:cc:
b7:fd:57:d1:6e:d2:a3:c9:05:d1:d9:be:86:08:86:99:06:f0:
c3:2f:78:26:cf:a2:9b:b2:02:01:5e:ef:be:1c:bf:48:3d:61:
40:52:18:a3:f5:ec:0d:4f:c9:b9:a2:2d:8e:46:80:6b:aa:31:
93:79:46:17:d7:7b:36:d8:c0:d6:9b:f6:dd:30:72:25:16:16:
3e:c1:5d:28:8e:25:c1:03:3c:10:61:90:64:d0:44:d3:f5:3b:
45:f4:ad:9e:43:91:20:b1:45:03:f1:45:96:f5:69:32:90:a6:
fc:71:55:5a:22:c9:74:19:a5:7b:5d:b0:e0:c2:13:8c:79:1a:
2d:fa:fb:f3:0f:1f:4f:c2:d8:9f:ea:96:84:e8:77:81:13:c7:
15:f3:3a:b2:1b:92:dc:8a:c3:f1:9e:28:f8:ae:b6:b5:82:62:
90:0d:de:19:56:f1:8a:46:2c:fc:2a:8b:8c:c6:30:36:e6:ac:
8f:dd:59:f2:2d:0f:d9:c5:be:09:e7:a7:07:fc:07:ef:51:da:
68:3f:e6:12:95:9f:f8:20:7b:94:87:07:c8:60:b4:93:5c:07:
df:22:18:9e:1a:f8:4e:85:77:44:a3:31:98:7c:c5:d8:d5:b5:
ad:06:58:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 03:10:42 2025 by rpki-client