Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AIxVbwA_mxNEcBV1ImJKh-LB-2k.roa
File: AIxVbwA_mxNEcBV1ImJKh-LB-2k.roa (raw, json)
Hash identifier: b/b0yIM+w+m+9pipT977jlbBD7e3kmal6ppNQrfokiU=
Subject key identifier: 00:8C:55:6F:00:3F:9B:13:44:70:15:75:22:62:4A:87:E2:C1:FB:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0E929F632A629421147B5E6AD64484B4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AIxVbwA_mxNEcBV1ImJKh-LB-2k.roa
Signing time: Sat 19 Aug 2023 16:13:24 +0000
ROA not before: Sat 19 Aug 2023 16:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0e:92:9f:63:2a:62:94:21:14:7b:5e:6a:d6:44:84:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 16:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=008c556f003f9b134470157522624a87e2c1fb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:9d:23:57:70:34:35:ad:8a:4f:c1:e5:1e:
65:5b:a3:07:bf:66:c7:c1:8c:37:ae:7d:9c:4b:4f:
c8:de:86:18:2b:d7:21:ef:59:a2:78:6f:ba:11:5a:
d5:9c:1e:5a:62:31:c9:67:6a:ec:50:a3:0d:f6:bb:
d8:3c:20:b6:1d:ae:83:7d:7e:d8:be:f9:eb:7d:8b:
02:58:cf:e7:b7:fb:2f:6f:e9:00:5a:d2:e0:0e:52:
91:7e:03:41:4d:53:d7:6e:46:57:dc:fe:4a:e5:88:
75:b4:c3:1d:49:26:34:16:2e:15:e7:53:8c:1f:f4:
1d:e1:f9:d4:9e:a9:bd:dc:19:ec:1f:c2:1f:00:86:
66:dd:5c:82:ca:ef:ed:f8:af:83:87:33:de:fb:9e:
db:a3:0d:47:51:9a:ed:fa:ae:10:be:86:8c:d2:c8:
03:5d:8e:14:a8:67:5f:c7:2a:44:19:f4:45:df:68:
5b:c1:a1:7e:cf:c4:27:03:d3:40:26:42:51:32:c0:
35:0a:54:73:c9:52:8c:0f:04:3a:a8:3c:35:d5:21:
27:4e:f7:cd:bb:1c:34:f8:ef:68:07:0b:44:28:ee:
16:fb:a5:18:ab:aa:f9:0a:77:43:07:ad:a5:f7:c3:
f2:a4:ae:2c:0a:8f:68:4f:f3:12:93:2e:b7:6e:09:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8C:55:6F:00:3F:9B:13:44:70:15:75:22:62:4A:87:E2:C1:FB:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AIxVbwA_mxNEcBV1ImJKh-LB-2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:be:9d:53:bc:2e:a3:7c:58:9b:e1:ab:9e:9f:8c:3f:00:8c:
4d:ee:4c:35:6a:5a:86:cd:f7:d4:cf:99:94:48:4f:23:36:67:
db:67:5b:93:a1:a2:59:f8:b1:79:e9:76:33:99:35:a7:c8:14:
bf:27:50:06:a1:fe:53:f7:b5:d5:41:eb:b3:fb:41:2c:3e:71:
cc:f7:11:57:e0:92:39:c6:c8:1c:dd:7c:30:7c:dd:03:f5:08:
2f:06:8a:65:07:24:ca:7d:99:b0:44:f2:6a:dc:56:85:e5:be:
c7:82:33:0f:e4:65:9c:dd:9d:57:6a:48:6d:9a:0b:f9:6f:21:
ae:aa:36:65:d5:9d:cd:a3:6a:fe:08:9f:17:9f:70:1f:03:07:
33:c4:03:99:ec:91:af:03:52:a7:22:dd:64:db:0d:ce:48:1e:
8a:7a:00:fd:cd:29:de:c8:1a:39:34:5b:4f:5b:28:4f:59:59:
5b:ad:22:70:4f:8a:5c:ff:f2:75:28:85:9f:b2:eb:db:29:60:
a7:14:41:cb:50:f9:23:10:79:b3:38:8a:44:7e:e1:cf:e7:4f:
51:b2:ff:cd:ce:e2:64:c5:a9:2d:fb:ee:65:4f:a5:ec:bb:9c:
c5:2f:01:0a:d0:c1:ae:1f:73:a3:3e:8b:df:78:25:bf:0a:a2:
14:ea:01:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:16 2025 by rpki-client