Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C72kAJjUsPQVHCFUJ9LNv3iWpVU.roa
File: C72kAJjUsPQVHCFUJ9LNv3iWpVU.roa (raw, json)
Hash identifier: 2PmV7rr/5lXvI+VU+mNpuI6jl/nhJ34CBF7OAmvD9go=
Subject key identifier: 0B:BD:A4:00:98:D4:B0:F4:15:1C:21:54:27:D2:CD:BF:78:96:A5:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898B0A7AD374C4CED7B88066F82EFEA36B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C72kAJjUsPQVHCFUJ9LNv3iWpVU.roa
Signing time: Tue 25 Jul 2023 03:14:27 +0000
ROA not before: Tue 25 Jul 2023 03:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8b:0a:7a:d3:74:c4:ce:d7:b8:80:66:f8:2e:fe:a3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 03:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bbda40098d4b0f4151c215427d2cdbf7896a555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c4:b3:c7:4d:8b:01:a3:98:c4:77:b3:26:f5:
8f:74:c8:9c:dd:0e:b3:99:36:27:6f:41:97:1e:36:
b3:e7:fd:c8:ab:4a:4d:35:5a:ac:a3:36:87:3f:66:
31:68:80:87:d6:2a:49:41:4b:ac:c9:99:73:54:3d:
e3:69:83:57:a0:05:8c:3d:51:10:45:1b:44:44:51:
cb:f2:b7:78:f0:b3:b3:12:e8:87:32:18:0b:b4:db:
09:1b:9e:b5:d5:c4:a5:0b:06:c6:f6:25:7d:eb:cc:
24:07:4d:b4:1c:d6:d9:de:b9:5d:ef:e7:c5:48:a4:
d2:6a:ad:9d:bc:a2:f7:fa:10:cb:7f:07:a1:75:d3:
74:64:35:bf:f9:df:e9:79:6e:3e:0e:91:f5:78:ca:
41:c5:41:a5:7e:10:79:7e:84:e8:9b:7d:40:25:47:
b2:a6:af:61:97:89:0f:71:dc:5f:ad:a4:e5:ef:6f:
a7:54:2f:c8:7d:10:5b:b7:90:d1:98:cd:c4:73:b9:
e5:2a:95:e5:41:06:90:e1:e7:6a:56:31:89:c7:ac:
48:f8:18:29:58:db:15:e6:a1:e5:2a:ce:c4:71:39:
c7:af:83:32:9d:9b:ba:b5:46:dd:aa:0c:c2:7e:2f:
dc:c8:6d:3d:e2:ca:25:82:c4:99:61:8e:f0:cd:01:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BD:A4:00:98:D4:B0:F4:15:1C:21:54:27:D2:CD:BF:78:96:A5:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/C72kAJjUsPQVHCFUJ9LNv3iWpVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:a2:9b:4a:06:46:2b:25:a9:e1:9c:e9:42:87:1e:de:df:62:
e2:59:a9:ee:ae:22:a3:04:52:71:3d:aa:a8:83:82:8c:47:ef:
1b:90:e7:af:85:de:29:95:12:d3:42:14:91:45:11:17:24:47:
21:b5:c5:e7:14:3e:1b:96:e5:56:a6:97:48:59:a0:f1:06:78:
7f:cd:0b:f0:fd:42:9b:8c:5e:c0:c4:ce:57:4d:ba:d9:d4:3a:
9c:86:24:90:1c:30:32:91:b3:84:16:9f:ef:14:6b:dd:c2:b2:
ed:a4:19:df:4d:ad:4d:f9:04:cc:0b:be:06:4b:f6:9d:c3:10:
69:2b:f5:8e:eb:03:28:2b:2d:3f:cb:4d:59:35:d0:62:2f:a6:
a3:58:7b:66:d7:73:f3:9a:ab:2a:d1:4a:b1:3a:f4:69:fc:1c:
39:cd:72:2a:89:72:31:71:01:91:ab:a1:b1:84:d0:20:23:9b:
df:e5:df:c4:54:18:ef:4b:40:cd:b9:52:7e:a9:b4:a5:d8:14:
36:1f:a4:6f:a9:fc:44:22:3b:ff:1e:28:75:b5:c3:fc:c9:18:
f2:7c:94:9b:01:40:b6:7d:e3:0c:98:da:9b:d4:e6:d1:9b:cc:
30:f4:96:04:0d:15:39:73:0d:df:3e:c4:1a:66:d2:db:9a:3d:
4d:dd:a1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:41 2025 by rpki-client