Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/80zRrofaVe-LfCM1ap0tc0Jf-zs.roa
File: 80zRrofaVe-LfCM1ap0tc0Jf-zs.roa (raw, json)
Hash identifier: bfjv+bDEimCXOHZ74nk8l4GACfXF5mBDwFI3LqonWJQ=
Subject key identifier: F3:4C:D1:AE:87:DA:55:EF:8B:7C:23:35:6A:9D:2D:73:42:5F:FB:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E302307CD9061932051FE86C4596C3CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/80zRrofaVe-LfCM1ap0tc0Jf-zs.roa
Signing time: Fri 11 Aug 2023 05:11:58 +0000
ROA not before: Fri 11 Aug 2023 05:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e3:02:30:7c:d9:06:19:32:05:1f:e8:6c:45:96:c3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 05:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f34cd1ae87da55ef8b7c23356a9d2d73425ffb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a2:87:61:54:a0:f3:ca:3d:0b:b3:47:59:9c:
46:e3:2b:fe:8f:03:43:c8:b6:9b:2b:74:f2:53:13:
5c:20:ac:38:b2:80:f3:ba:4c:8f:8f:01:c0:01:26:
7a:ce:00:e9:81:fc:30:b4:a2:bc:99:01:4a:db:53:
43:8e:78:e5:cb:29:19:47:aa:b6:e1:0e:b1:c0:d8:
7a:3a:27:d3:2e:e3:57:f7:46:05:5b:73:b3:5f:64:
a0:ed:90:ea:6c:2a:04:1d:e0:c0:cc:9b:0a:d3:af:
81:6e:51:25:d6:7f:74:ae:05:ba:16:c4:cc:25:57:
fc:a6:bf:37:70:e3:55:54:cd:17:2c:3c:cc:e8:36:
c6:9a:66:64:41:3c:ae:e1:38:cb:ed:b8:12:4f:cc:
40:94:25:13:27:9f:d2:db:6b:e9:03:96:08:b2:d1:
05:5a:1d:e9:3d:16:14:f1:a9:42:58:46:f5:3c:c3:
cf:96:ac:43:fc:27:88:0a:8e:c8:7e:27:c5:4a:b0:
e8:4b:aa:50:00:6c:64:2c:de:5f:fa:ee:b0:98:7d:
6a:ad:52:96:b9:23:45:bf:60:ef:5a:4d:14:eb:b6:
97:b3:b2:31:6e:f2:d7:3c:c3:94:39:df:d4:c2:37:
0e:e8:45:cc:7b:1f:3e:da:4c:d9:15:63:d9:5d:da:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4C:D1:AE:87:DA:55:EF:8B:7C:23:35:6A:9D:2D:73:42:5F:FB:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/80zRrofaVe-LfCM1ap0tc0Jf-zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:a9:d3:75:4e:1e:1c:59:6b:c1:b6:5e:d9:08:e6:16:1c:45:
75:ce:46:df:08:75:06:81:97:8d:b7:63:0f:ee:62:7f:6d:98:
64:ba:30:ac:e8:f8:00:62:00:a5:96:29:01:8e:53:60:0d:6b:
7b:d9:46:9b:6f:00:5e:c8:d6:aa:87:4d:b5:87:8d:1b:d8:5a:
47:a1:40:5f:06:40:66:c0:ae:ad:25:88:6a:d1:1b:10:83:a7:
c4:f4:23:5d:cc:d3:98:6b:7c:54:25:ab:6d:fb:3e:5b:49:72:
b7:f3:02:27:19:6a:f3:8f:0f:43:bd:be:9e:5e:9e:5a:84:5f:
23:51:da:f0:fe:69:76:6a:33:67:e3:74:53:6a:7a:65:6b:c6:
c5:ed:ae:1a:ac:ad:73:b5:32:55:51:d1:f4:4b:61:f0:4c:60:
64:cc:b3:db:6a:a1:93:4e:ad:49:0f:82:b8:3d:a1:a9:a6:5d:
7a:61:10:b5:b2:35:63:8f:b3:e6:5d:3d:bc:0f:00:93:b6:32:
2b:3a:74:08:60:8e:64:a2:8d:fb:3b:5c:31:24:84:79:64:49:
ae:18:c8:ac:fb:5e:af:54:fd:16:2e:e1:49:c0:ec:68:e3:1c:
d8:2d:a0:13:ae:6c:47:93:48:3f:b9:f1:64:7e:05:2d:59:9e:
28:2a:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:17 2025 by rpki-client