Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9ACg1njfexGUEFQ7J-WdbVBjRnI.roa
File: 9ACg1njfexGUEFQ7J-WdbVBjRnI.roa (raw, json)
Hash identifier: 3E0ljnV34wNmwLK+ryrIOCx0uXv37ketOnw2fKiROwE=
Subject key identifier: F4:00:A0:D6:78:DF:7B:11:94:10:54:3B:27:E5:9D:6D:50:63:46:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0FA3733EDF8757FEAA1B651E7DF8581B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9ACg1njfexGUEFQ7J-WdbVBjRnI.roa
Signing time: Sat 19 Aug 2023 21:11:24 +0000
ROA not before: Sat 19 Aug 2023 21:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0f:a3:73:3e:df:87:57:fe:aa:1b:65:1e:7d:f8:58:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 21:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f400a0d678df7b119410543b27e59d6d50634672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:08:18:c2:f5:48:f4:2b:62:e5:06:10:0a:
de:57:09:49:dc:ce:62:d0:ff:aa:95:7e:d5:20:03:
ed:5a:97:4f:fc:95:57:f1:c5:9e:99:57:4d:3b:ef:
66:52:74:96:b1:77:d9:5c:e3:d1:f6:e9:af:25:cd:
0e:38:d9:57:93:b6:33:c8:70:d5:48:7e:fd:b8:ba:
62:13:c6:d7:26:d5:37:9e:54:40:8d:fd:03:1b:bd:
af:de:b5:1a:ce:8c:0f:31:d1:6c:fd:ee:2b:0b:42:
b6:c6:bf:61:ca:96:7e:ed:65:af:20:5b:49:a7:c0:
93:ea:a3:61:31:b6:c4:8c:a3:60:ed:8d:d3:ba:c6:
9a:79:44:83:da:16:9c:09:cb:66:72:e3:4b:1d:50:
e3:24:a2:d3:60:6c:99:7b:1c:06:07:46:cd:93:5c:
d7:8c:7a:5e:c2:e9:64:9a:b0:50:1b:39:27:e2:c0:
58:3a:de:c7:cd:36:a7:df:bf:23:54:cf:b1:19:71:
36:50:bb:a6:17:a5:20:39:4c:47:6b:39:82:e3:e0:
d1:1c:7c:d1:49:e3:b9:bf:39:c6:c1:26:03:fc:65:
2a:42:c7:a4:82:b6:e9:a7:7a:c4:74:78:69:38:c7:
ed:d3:3c:21:1f:19:f4:3b:7c:b6:cb:ba:4e:ca:45:
7c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:00:A0:D6:78:DF:7B:11:94:10:54:3B:27:E5:9D:6D:50:63:46:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9ACg1njfexGUEFQ7J-WdbVBjRnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:17:2b:74:e0:25:d8:ac:4a:ea:7d:d9:5f:2e:f6:aa:01:11:
97:06:d7:a9:02:0e:54:46:bd:bb:cb:28:5a:b3:50:d0:ee:24:
03:63:60:a6:9e:87:d1:99:3e:85:88:37:03:83:65:19:d0:80:
62:64:2f:bb:37:ad:59:42:f6:43:8c:a1:48:ac:bf:ea:e7:9c:
7a:cc:53:5e:c8:b6:b5:5d:03:b4:c4:00:76:04:4d:dc:9e:4d:
d2:60:31:9a:73:39:7f:b3:fa:82:cb:f3:ac:f2:a4:33:4f:73:
4c:82:4c:d4:ad:7d:77:0f:7c:3a:de:4e:ce:7e:3b:ee:66:6b:
4b:fb:4d:aa:dd:2e:6a:f7:b4:fb:47:a4:52:13:f6:18:e2:95:
9a:e2:24:c6:0b:40:58:29:24:2b:dc:71:94:77:2b:5f:1c:3f:
5c:d0:1c:73:cc:37:16:82:05:dd:62:98:a2:7d:a4:c6:ca:d8:
2e:9b:02:32:1b:2f:ef:04:c2:a9:14:dc:55:38:a7:d5:4c:a9:
c1:5b:61:4d:cc:0e:b5:8c:df:92:05:80:12:95:75:0c:3a:19:
db:2f:b3:e4:f6:0a:60:c2:e6:c7:e7:5d:b6:4b:3c:78:8d:c5:
84:79:5e:5a:9a:69:c0:6c:97:da:d8:df:f0:f1:af:b2:58:33:
36:49:54:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:17 2025 by rpki-client