Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ADHBrAKw6Xlx5aYastC0GEKERFk.roa
File: ADHBrAKw6Xlx5aYastC0GEKERFk.roa (raw, json)
Hash identifier: jQovB+0JO4wIwTCiTdUSphJTm91AM1ViVA/XI03+8Fs=
Subject key identifier: 00:31:C1:AC:02:B0:E9:79:71:E5:A6:1A:B2:D0:B4:18:42:84:44:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189947339D2AAB0046FF1645748A85C3629
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ADHBrAKw6Xlx5aYastC0GEKERFk.roa
Signing time: Wed 26 Jul 2023 23:05:26 +0000
ROA not before: Wed 26 Jul 2023 23:05:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:9473:40b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:94:73:39:d2:aa:b0:04:6f:f1:64:57:48:a8:5c:36:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 23:05:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0031c1ac02b0e97971e5a61ab2d0b41842844459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:00:f5:ec:bc:32:18:f4:8a:df:a2:71:bc:80:
80:24:3f:9c:d1:1f:1b:ed:b1:d6:1f:73:00:1b:c9:
d0:0b:8d:22:45:21:3f:fb:6e:c5:9a:89:ed:03:e8:
00:d8:0e:29:78:96:51:0c:ca:88:07:42:6f:06:8b:
67:c0:a6:d3:05:b6:f4:9c:19:1e:c7:e7:8b:42:3b:
98:91:c4:de:5c:2a:f4:57:e0:42:41:da:21:80:88:
a6:76:cd:ab:0c:12:9c:b5:23:e4:25:b4:49:00:13:
48:45:64:2f:d7:c9:b1:9e:00:8b:55:46:9e:fd:96:
6e:f6:c6:bf:ee:b9:33:fc:25:6a:22:2f:9f:62:6e:
6a:a2:4f:0d:f9:5b:3d:04:ed:ca:74:9c:65:3b:a8:
e9:ee:b3:ae:db:11:7d:92:b8:8b:17:13:24:cf:7b:
11:f6:34:bf:41:c5:6f:35:9b:6a:e1:7e:79:1f:5e:
f7:13:93:e6:8a:c1:d7:29:89:2c:81:d2:de:03:ac:
29:4a:f9:71:ed:01:57:90:d0:f8:32:33:3c:b2:22:
97:7e:ff:c8:9e:a2:ba:15:51:cc:3f:db:a5:b7:dd:
18:93:17:da:7f:9d:cd:66:fc:7e:e3:f8:b9:56:4b:
92:25:e9:1a:83:40:d4:cf:10:64:2f:77:d5:bc:4b:
95:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:31:C1:AC:02:B0:E9:79:71:E5:A6:1A:B2:D0:B4:18:42:84:44:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ADHBrAKw6Xlx5aYastC0GEKERFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:17:14:a6:e8:de:4f:d9:7c:98:dd:dd:67:a5:16:cb:71:65:
2f:77:d7:68:e7:ec:db:8b:73:a3:ad:fe:63:88:2c:27:d6:b6:
35:93:96:75:64:74:1f:85:31:bd:b7:fc:03:1a:11:25:56:e3:
1b:40:94:18:7d:69:ff:cd:4d:85:70:1f:42:53:f6:49:91:24:
7e:f5:ec:0f:47:15:c7:57:d6:3f:87:72:7d:ed:0c:71:0e:b8:
09:d4:0e:c4:58:38:76:20:50:e0:7b:14:e3:5c:97:6e:bc:ce:
b9:a7:66:ae:ee:0e:52:66:5b:5e:f0:a5:db:8f:44:87:2f:d5:
0e:c7:0b:66:0f:0f:a7:3f:7c:36:72:dd:0a:1f:14:73:26:20:
69:51:99:3e:18:85:48:23:ff:72:e4:8f:c3:0d:7a:da:96:d8:
5a:6d:4b:84:59:67:8a:73:78:86:ea:b8:63:0c:f9:62:17:c7:
a7:bd:a0:7c:93:89:b9:ff:4e:48:78:4b:21:0f:a4:a3:f8:16:
83:94:31:56:de:a2:a7:1d:f6:c7:86:ae:31:80:9e:18:4d:95:
72:cf:0d:8a:0f:1c:39:f3:8e:9b:fd:c4:8b:7a:39:6d:50:18:
30:93:40:b8:e5:fb:cb:7a:ab:fe:15:ec:9e:e0:6b:7c:a1:51:
97:e0:40:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:08:59 2025 by rpki-client