Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/89pm3BNLnffKgsWhcC0poD73kSo.roa
File: 89pm3BNLnffKgsWhcC0poD73kSo.roa (raw, json)
Hash identifier: OzxI7jzso4EjQN3wWYPwItYe4qxWqXkgWRgX606dC5A=
Subject key identifier: F3:DA:66:DC:13:4B:9D:F7:CA:82:C5:A1:70:2D:29:A0:3E:F7:91:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899EC48A8A0B4514B78EC00A2428DC5919
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/89pm3BNLnffKgsWhcC0poD73kSo.roa
Signing time: Fri 28 Jul 2023 23:10:27 +0000
ROA not before: Fri 28 Jul 2023 23:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9e:c4:8a:8a:0b:45:14:b7:8e:c0:0a:24:28:dc:59:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 23:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3da66dc134b9df7ca82c5a1702d29a03ef7912a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9a:df:84:3c:42:c7:f1:bb:03:3b:ea:ea:57:
d0:ae:0d:6e:b2:a6:94:da:bb:46:fe:fd:41:e6:15:
57:70:97:6e:a2:5a:8c:24:10:f0:09:c3:f0:bd:24:
ed:83:3a:6b:9d:50:ad:ce:64:a8:2e:35:2f:6d:a3:
8f:78:43:63:10:42:02:f7:af:b6:dc:e6:27:1b:ec:
53:f8:45:c4:e4:29:55:c1:17:fc:48:81:0b:8f:a5:
0d:14:99:c8:93:f5:3b:60:5d:59:56:17:7a:26:1e:
86:68:78:d4:c2:68:a2:86:c5:04:b6:8a:62:6e:04:
16:6a:d9:89:87:26:0b:3c:2a:b1:17:e6:31:4e:c4:
30:0e:7c:c3:50:ca:8b:55:3b:d7:9f:74:cd:60:9e:
d9:1d:f4:0a:85:49:b3:25:18:63:3a:6f:1f:79:71:
dc:d3:b4:11:66:6f:05:59:b3:b1:83:60:0b:22:0f:
02:cb:04:91:20:15:e5:d4:8b:17:24:35:7e:a7:86:
20:c4:22:04:9c:ff:04:57:88:6a:59:b9:7d:17:fa:
19:20:4c:27:3a:dd:d7:45:ee:55:c8:6c:7a:cf:d3:
97:79:95:57:8b:c1:5c:8e:c4:1c:2d:cb:e4:c8:28:
75:dc:32:73:78:b5:a0:15:6e:3f:9e:6e:15:e4:80:
38:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DA:66:DC:13:4B:9D:F7:CA:82:C5:A1:70:2D:29:A0:3E:F7:91:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/89pm3BNLnffKgsWhcC0poD73kSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:c8:8b:bf:b7:2c:93:40:e2:ae:cd:65:2c:17:de:f1:bf:a8:
ac:2d:1a:48:5c:db:ee:18:ae:c6:08:95:ca:1d:d1:0a:6e:c5:
12:15:6d:e8:4c:ba:c7:44:2f:3c:22:fb:99:19:36:06:f1:6c:
d8:73:ef:d7:d6:f9:0b:03:07:9a:a0:2d:b1:af:89:8a:7d:0a:
7b:bb:eb:71:99:b5:40:9c:88:bc:a6:0d:4a:2f:7b:34:76:78:
07:9a:41:2a:a6:69:4b:01:9b:03:14:d2:0e:dd:0a:bf:e3:be:
f4:7f:ac:b7:04:90:da:0f:37:7c:5d:7e:0a:e0:a4:fd:46:35:
0f:83:eb:2a:61:5f:bf:5c:0f:9f:33:e3:d2:67:bc:3d:5c:03:
cd:09:b7:8e:94:9a:e7:e0:09:3e:ba:10:42:69:c6:b8:df:48:
0b:24:e6:94:19:60:9f:fd:f5:d8:f7:ec:28:43:54:34:51:d1:
07:45:88:f4:50:b3:3e:be:6c:ab:99:43:c9:06:96:60:d2:10:
1c:e8:20:67:ad:30:8b:da:04:5e:42:57:32:a3:ba:69:92:85:
98:f3:92:36:e6:67:60:f5:be:2c:05:03:f2:4e:7f:e2:9c:8a:
9e:e8:79:17:39:e6:15:e3:73:b7:ac:5f:86:68:2a:cc:ff:68:
c4:56:ec:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:21:08 2025 by rpki-client