Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AoT4EZJTHOW4KoEKu10A8WJfU-g.roa
File: AoT4EZJTHOW4KoEKu10A8WJfU-g.roa (raw, json)
Hash identifier: DWrJd7A3ltSzv0jqPdi5ZFu7z8rh9yxJoveqE1HIfaE=
Subject key identifier: 02:84:F8:11:92:53:1C:E5:B8:2A:81:0A:BB:5D:00:F1:62:5F:53:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BA7502B582FEEF1DA41959EAABCF6B18
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AoT4EZJTHOW4KoEKu10A8WJfU-g.roa
Signing time: Thu 03 Aug 2023 08:12:57 +0000
ROA not before: Thu 03 Aug 2023 08:12:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:75:02:b5:82:fe:ef:1d:a4:19:59:ea:ab:cf:6b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 08:12:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0284f81192531ce5b82a810abb5d00f1625f53e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:05:1b:53:85:d2:1e:a8:3b:6f:e6:f6:a0:
54:49:d1:d8:16:59:57:68:37:33:7c:f4:0c:bf:78:
a4:9b:41:71:e7:e7:3b:4a:7d:dd:4d:11:bc:a0:ea:
41:16:9a:0d:bc:83:9b:3f:e7:b9:a2:ad:6d:d3:ec:
31:49:c9:bd:a0:11:57:9c:ac:87:c7:37:b5:3b:52:
67:78:f0:53:94:29:6f:89:3d:90:7c:fc:c4:b8:29:
d7:66:e9:be:e6:57:d4:ce:3d:00:e4:7c:40:4b:94:
e1:77:e9:6d:12:4a:df:6f:ef:c7:bd:da:ec:1a:b5:
42:99:1b:c8:6d:49:f3:b3:71:80:85:d3:30:38:99:
59:87:93:0a:1d:78:f0:19:b9:d0:23:c7:81:4b:ab:
86:d4:61:d5:ee:2d:db:a3:23:57:17:66:ea:78:4f:
a5:dd:9d:3e:03:56:8f:41:5a:a6:1b:a3:9a:b4:26:
af:3c:e2:f0:38:cb:7e:1c:eb:e7:7e:d9:de:2e:d0:
31:63:9d:49:60:e6:84:49:f2:40:37:80:65:8d:37:
6c:8b:ca:c0:0e:19:bf:bc:1d:33:ab:9c:53:cb:ce:
c8:34:75:3f:0a:3d:01:db:57:18:f6:43:80:12:13:
cf:22:b6:70:bc:4a:ef:a0:00:db:49:45:4f:f5:8a:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:84:F8:11:92:53:1C:E5:B8:2A:81:0A:BB:5D:00:F1:62:5F:53:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AoT4EZJTHOW4KoEKu10A8WJfU-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:11:53:0f:97:f6:eb:d2:a2:c7:18:be:8c:71:bc:e0:23:97:
c5:b5:dc:1a:ea:5c:7a:af:ff:1d:9a:22:86:fb:57:18:54:b5:
6b:7a:32:63:48:ec:87:9c:d1:cb:a9:be:0d:dd:58:05:fa:45:
9d:82:61:71:eb:06:d3:f7:45:f3:be:63:77:8e:73:df:b8:53:
f6:af:c8:04:ea:06:93:0f:82:f1:be:55:92:72:2e:33:b6:4c:
88:2d:fc:04:43:25:97:9e:ad:0d:00:d1:f7:ce:18:b0:c5:f7:
a4:4f:1c:cd:24:7c:34:27:2a:7d:1a:db:9b:7a:89:5e:85:7e:
38:46:11:75:48:00:eb:d9:96:00:74:ce:e2:54:80:b9:c3:79:
c6:04:57:45:ee:76:75:44:e6:ec:db:96:7c:a7:ed:6d:ea:b2:
a0:22:66:03:0b:c3:86:bf:46:8d:6c:2d:db:d8:ef:17:99:9a:
9c:bb:68:08:ea:2d:56:b4:d8:0b:0a:37:73:cb:dd:9d:c2:fc:
2b:41:ba:d7:f3:7f:71:93:59:9a:8c:24:4c:22:2f:d1:e9:f8:
5b:16:26:1c:d8:d3:10:fb:3c:f3:6c:6d:b3:d2:38:82:60:d1:
b6:d7:7d:bc:48:76:c7:f2:a9:44:e8:70:9b:b3:9f:08:89:26:
0d:f8:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:03 2025 by rpki-client