Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B44M4Xz07q5eruoW-kMnADq66uw.roa
File: B44M4Xz07q5eruoW-kMnADq66uw.roa (raw, json)
Hash identifier: LyJjWqJvWzvRD4+pxa/dW5QSfRomMdgrxKq06Osw/5E=
Subject key identifier: 07:8E:0C:E1:7C:F4:EE:AE:5E:AE:EA:16:FA:43:27:00:3A:BA:EA:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188CE6A7D54F912D36C7F85D277CEC42DEF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B44M4Xz07q5eruoW-kMnADq66uw.roa
Signing time: Sun 18 Jun 2023 12:11:05 +0000
ROA not before: Sun 18 Jun 2023 12:11:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ce:6a:7d:54:f9:12:d3:6c:7f:85:d2:77:ce:c4:2d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 12:11:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=078e0ce17cf4eeae5eaeea16fa4327003abaeaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d4:02:1c:ec:44:19:b7:16:70:19:39:20:bf:
77:67:01:c4:bd:96:6f:4b:27:79:f4:7d:1b:56:9d:
4b:3d:d4:9b:78:95:cf:9c:dd:74:bc:83:af:9b:bc:
05:73:89:bc:50:49:4a:5b:03:c3:f1:f6:b2:c6:45:
0b:55:a7:47:71:a4:ca:f1:22:aa:a1:47:3f:de:30:
53:11:3f:27:90:e1:74:9c:f0:3e:f2:ff:ee:17:09:
80:04:45:e1:01:b0:c7:77:45:62:52:12:4e:04:99:
e5:51:de:05:86:43:3d:8f:b9:1d:54:6d:a2:4c:b9:
31:a4:b3:77:d9:1b:ae:74:a5:c0:67:85:fc:af:f1:
63:c6:af:c6:6c:3b:16:43:b4:e3:3c:07:a4:0b:eb:
86:4c:e6:b1:20:80:6f:ae:e2:04:a1:53:e0:10:5b:
4f:3b:18:6b:db:bf:d8:04:94:af:93:01:fa:5a:91:
fe:66:9e:3f:e7:db:78:15:21:df:cc:96:4f:3d:e1:
4e:5b:c0:9a:e9:2a:06:d9:ac:2b:d6:f8:08:11:0b:
c0:52:46:9b:a0:c5:3e:54:c9:e6:f7:58:a0:ed:85:
a1:74:95:94:ce:bf:95:b5:35:6a:a4:61:50:d2:b5:
25:b0:21:c8:b6:03:90:dc:ce:58:c0:e3:cd:d7:5d:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8E:0C:E1:7C:F4:EE:AE:5E:AE:EA:16:FA:43:27:00:3A:BA:EA:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/B44M4Xz07q5eruoW-kMnADq66uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:54:a3:b6:45:a3:20:f3:fd:37:16:c7:74:1c:0b:1b:cd:4c:
c7:24:26:a2:90:56:96:b9:cc:29:80:94:89:18:90:5d:53:dd:
2a:7d:84:06:ae:a7:d3:0e:21:8c:2d:b7:2f:fe:42:8e:a2:98:
17:6e:b0:bd:6f:c3:ac:8e:a8:f3:13:cf:fa:e3:b4:9c:f4:3c:
08:df:77:b1:a0:6e:26:6d:2c:a1:56:80:45:e4:cb:44:c6:71:
3a:0b:f4:24:82:8d:ef:fa:6f:ac:b2:dc:e7:2d:19:0a:f8:dc:
61:f4:56:8b:53:50:c6:c7:d9:af:80:47:f5:89:8a:90:ca:bb:
ea:a1:05:c1:5f:0b:13:c8:52:cd:84:ab:56:ee:76:4b:d1:93:
b7:c5:97:16:fd:2e:24:f9:c3:a9:8c:ff:98:21:99:15:c1:1f:
38:6f:aa:bd:16:49:2b:30:01:6f:16:82:09:df:60:21:21:cb:
a5:53:76:a2:16:47:d9:28:bc:72:d5:c6:9b:46:21:4c:9d:6c:
39:bd:f3:b6:21:75:03:97:2a:92:1f:3a:c3:b9:81:7d:96:44:
79:1c:75:b2:72:c7:cc:70:14:ec:d6:db:69:7f:d4:10:1b:5c:
23:b6:bc:54:8a:4e:89:40:41:d2:f5:3e:f3:24:01:c4:1a:0f:
f8:cd:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:00:41 2025 by rpki-client