Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AhdDSdFkQtUuMT8MQ3GO7MC3SkY.roa
File: AhdDSdFkQtUuMT8MQ3GO7MC3SkY.roa (raw, json)
Hash identifier: wWg7+HXpTvb4HnEMKXZgLOyWET9ELoB3Be3nO3eqS94=
Subject key identifier: 02:17:43:49:D1:64:42:D5:2E:31:3F:0C:43:71:8E:EC:C0:B7:4A:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D0220837CDD5E99828B8D953545EDBE6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AhdDSdFkQtUuMT8MQ3GO7MC3SkY.roa
Signing time: Mon 07 Aug 2023 13:13:58 +0000
ROA not before: Mon 07 Aug 2023 13:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:22:08:37:cd:d5:e9:98:28:b8:d9:53:54:5e:db:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 13:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02174349d16442d52e313f0c43718eecc0b74a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:49:84:a8:6e:5e:f4:b0:c1:57:b9:e2:5a:9d:
5a:24:d5:14:f6:5d:aa:bd:e2:b5:9c:c5:f7:de:4b:
af:91:cb:d8:1a:6e:c0:f2:80:be:9b:20:c0:e0:7a:
f9:3c:9f:fa:85:e4:0e:3a:b8:4f:41:69:cd:f2:3b:
2f:39:f0:70:29:4b:fe:1a:3b:c8:ca:b0:47:82:a3:
cd:f6:6d:c2:bb:13:05:16:ca:3d:d7:2b:a0:1f:a7:
53:a8:cf:e2:68:15:96:22:b8:ef:e3:3f:ef:d2:eb:
a6:79:86:bc:90:42:21:1a:f7:bd:e6:09:2d:23:15:
5c:01:5a:8a:4c:9e:78:67:1c:57:d2:d5:29:44:18:
30:d5:a9:be:c5:b6:e9:07:09:f8:54:9b:05:ac:cf:
8a:cf:c8:c0:28:69:54:7a:e6:4e:40:07:ca:bb:de:
90:0e:57:22:de:86:31:d2:01:96:86:0c:01:93:fb:
e9:44:dc:30:fd:7b:87:ac:4e:1e:ce:84:34:e9:4c:
75:a0:dd:1f:f1:27:a2:7f:2a:99:8b:17:f6:e8:f7:
8f:dd:e7:4a:19:a3:3b:47:6c:ab:da:d9:11:33:b4:
4e:db:37:47:63:ab:9d:f3:b1:1a:ce:97:b3:18:da:
06:d7:9e:f0:dd:8a:75:6d:92:65:c3:27:6e:c1:a3:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:17:43:49:D1:64:42:D5:2E:31:3F:0C:43:71:8E:EC:C0:B7:4A:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AhdDSdFkQtUuMT8MQ3GO7MC3SkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:61:27:af:a8:3b:6a:69:21:11:ed:17:e2:d9:2f:7d:a6:67:
50:32:78:10:79:23:0b:4e:fc:09:36:31:f7:ef:f5:7f:3e:87:
23:7a:2b:52:c4:db:aa:92:8d:f2:ad:41:a1:9e:83:f0:45:ea:
ba:b7:7c:6e:81:b6:d2:bc:f4:0d:41:d5:36:1f:83:68:ac:d5:
45:ed:83:40:36:e3:49:0b:ea:d4:bb:50:65:a8:5f:9c:e7:2b:
29:24:a7:7d:a7:3c:46:7a:b2:c8:11:6d:7d:f6:36:46:18:95:
f7:20:24:b8:65:74:78:1e:db:3c:cc:60:51:c4:2d:d3:f1:32:
25:74:fb:92:d0:3f:18:0c:cc:96:19:00:06:ca:29:68:2f:c9:
6b:08:7e:dd:5d:5e:aa:4f:85:17:3d:ce:b2:fd:4c:87:63:da:
37:41:6c:6a:40:c2:9e:c8:27:ea:2f:94:25:61:20:d9:64:31:
80:37:fb:82:1e:f6:9d:dc:3d:4f:36:98:48:e7:3f:98:91:b2:
5a:45:19:90:ba:93:bb:b3:53:10:ec:71:5f:1e:7b:6f:8e:ea:
74:26:02:0d:a4:04:9b:fc:7f:8c:3f:10:d5:b3:a4:39:2c:29:
77:4e:3a:cc:b6:f7:b9:64:07:85:56:af:ba:1a:99:28:11:e8:
7b:bf:b8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:35 2025 by rpki-client