Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Av2G9EsqZNR4c0DHQHW4Jhly7-I.roa
File: Av2G9EsqZNR4c0DHQHW4Jhly7-I.roa (raw, json)
Hash identifier: OjE0RdOERnuEnYHta5lD9bcueZoz9iTGEhx7r2ytBqY=
Subject key identifier: 02:FD:86:F4:4B:2A:64:D4:78:73:40:C7:40:75:B8:26:19:72:EF:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A21DAC765B91CA64E3E0F6A25A2662971
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Av2G9EsqZNR4c0DHQHW4Jhly7-I.roa
Signing time: Wed 23 Aug 2023 10:05:00 +0000
ROA not before: Wed 23 Aug 2023 10:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:18a:21da:49ea/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:da:c7:65:b9:1c:a6:4e:3e:0f:6a:25:a2:66:29:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 10:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02fd86f44b2a64d4787340c74075b8261972efe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:44:7f:fb:17:dc:91:76:d0:35:f9:46:e1:fa:
0d:ce:82:c4:53:08:b4:4b:88:21:cc:d6:28:f7:a1:
58:ed:1e:2b:5c:19:ce:e1:96:05:8c:54:d3:5e:d4:
9c:55:db:2a:ae:c4:11:ea:fd:ed:b9:e7:1d:de:7a:
d2:e0:be:bd:ad:bf:93:7f:29:67:54:80:5b:e8:91:
62:40:e5:de:81:4b:88:83:9f:f2:88:d8:74:76:50:
3a:f7:7c:2e:2a:ae:da:5f:db:5f:43:90:c5:aa:e6:
25:5b:28:ab:24:f6:b6:80:e1:a2:aa:1f:74:47:29:
b9:a5:cb:bf:9b:63:57:cd:1f:68:58:78:10:5e:de:
c0:f4:a0:5b:a4:22:08:96:5a:7c:82:ac:cd:26:38:
a1:ef:b9:af:ce:80:1f:33:8e:8f:c0:4c:e6:0e:ec:
b8:20:65:d5:d8:7c:a0:68:4f:55:80:af:c0:f2:4e:
81:cf:3f:e9:30:72:c9:fd:d0:42:05:76:e1:2b:db:
70:9b:ff:a6:7f:06:06:a3:9d:ab:44:cd:70:66:ca:
50:4d:20:0c:c9:49:55:0e:8e:6d:98:b6:61:ce:5a:
1a:2a:76:aa:6a:4f:f4:9c:e1:90:e4:c7:bf:74:50:
d4:56:02:e3:e0:e9:0a:cb:b8:cb:22:12:ca:85:51:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FD:86:F4:4B:2A:64:D4:78:73:40:C7:40:75:B8:26:19:72:EF:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Av2G9EsqZNR4c0DHQHW4Jhly7-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:ac:75:5c:56:da:24:7f:eb:97:33:95:ab:b3:7e:52:05:f3:
ea:e0:00:54:f1:4b:9b:91:23:1f:1c:b6:61:cc:a9:7a:2b:ff:
86:41:f4:3b:1c:26:5c:43:e9:a1:24:bf:3e:b1:11:86:83:f7:
7e:2b:35:db:05:03:95:e9:8f:e2:c0:a3:27:ef:f3:95:e9:cc:
0c:b4:f7:0c:f0:b9:9c:91:65:c4:8f:8a:ff:aa:c7:10:bb:2d:
e9:e4:55:43:51:2a:de:fe:ac:9d:cc:d8:15:b6:b1:49:d6:f0:
fa:73:e8:ef:ab:94:ef:97:47:e9:60:cf:a5:bd:15:b5:31:76:
53:7e:a4:7d:cd:fb:ee:94:50:69:d6:bc:aa:c6:22:dd:ee:8a:
f4:49:f0:bd:26:b5:66:75:55:be:c2:77:dd:9e:72:81:84:29:
17:47:76:a1:c7:19:be:c0:ae:e1:b7:a5:85:93:3f:df:07:48:
8e:10:52:94:d3:8c:da:71:2a:0e:c1:71:93:19:43:fd:ab:7f:
c6:c7:04:f5:cd:c6:84:05:c9:7c:bc:84:6a:ef:b8:c6:0e:29:
06:55:c2:da:f4:52:32:db:87:f9:9d:53:ac:6e:e5:06:3d:d1:
64:73:5a:4c:95:8d:18:b5:a7:6f:89:e1:52:68:7d:04:98:91:
42:5d:11:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:25 2025 by rpki-client