Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D-86SjI1OO_Yx7V1cOTYJRKkxHw.roa
File: D-86SjI1OO_Yx7V1cOTYJRKkxHw.roa (raw, json)
Hash identifier: Q9v3nj95iyUxvQ/BFzYpyp67O44DHO6VBCHUc+gLjUk=
Subject key identifier: 0F:EF:3A:4A:32:35:38:EF:D8:C7:B5:75:70:E4:D8:25:12:A4:C4:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872D816C12A8E26C151CD4707222A17663
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D-86SjI1OO_Yx7V1cOTYJRKkxHw.roa
Signing time: Wed 29 Mar 2023 13:14:29 +0000
ROA not before: Wed 29 Mar 2023 13:14:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:81:6c:12:a8:e2:6c:15:1c:d4:70:72:22:a1:76:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 13:14:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fef3a4a323538efd8c7b57570e4d82512a4c47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:23:7f:6c:22:ed:b4:55:98:a4:82:8b:3b:5a:
2b:80:27:23:1b:7f:59:c3:9c:a4:82:e5:7e:c1:94:
e5:05:3b:da:bc:4f:a2:07:fe:ae:6b:28:a4:d6:f3:
45:bb:e9:f9:14:89:44:41:b9:0f:80:1f:e0:4d:75:
1d:6f:f6:0c:a6:79:fa:e4:ee:95:0e:60:5f:dc:58:
d2:4f:6a:8e:45:d4:dd:2d:93:6d:a7:3a:4c:2e:16:
44:0a:e8:47:64:0d:3b:52:32:19:44:06:f0:3e:ca:
42:3d:91:8a:15:a0:45:a7:3e:43:e5:e5:f8:49:77:
94:6e:ef:b1:ce:f8:38:dd:50:9b:bf:05:f6:83:64:
0a:0a:b4:8f:d6:c3:87:8e:be:e8:ce:87:59:41:b5:
4d:24:b6:96:cc:86:09:53:3a:f3:b2:9e:03:83:f0:
4f:dc:8a:aa:f9:f9:5c:6c:04:b8:d3:76:2d:56:28:
95:61:d5:30:7c:54:9b:4d:eb:7e:ac:dc:c7:48:2c:
9f:44:1c:d1:04:23:b2:c8:9d:6a:19:a5:bc:18:f7:
10:a1:9b:03:60:04:e9:97:c6:81:1b:91:31:bc:d9:
e9:60:a7:e7:4a:31:be:3c:a9:52:2e:d8:1e:b5:13:
6f:6b:d1:4f:04:48:46:aa:0c:f2:00:e5:7d:a9:ce:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EF:3A:4A:32:35:38:EF:D8:C7:B5:75:70:E4:D8:25:12:A4:C4:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D-86SjI1OO_Yx7V1cOTYJRKkxHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:22:a1:b3:f4:32:9b:99:22:24:ac:16:18:b5:c1:9e:b6:9f:
85:02:e1:41:7a:9c:2a:12:4c:fa:d2:f5:7d:0d:ee:07:1e:a8:
4c:bd:0f:a8:56:60:e6:f5:8c:df:08:1d:1e:e0:df:2d:96:4c:
29:e4:7b:df:d1:82:d0:78:ce:7e:26:14:97:03:ff:7a:34:a8:
ff:fb:55:26:ad:be:5f:5d:cd:67:af:52:cf:09:c8:ed:81:83:
4b:fc:f7:cb:43:70:17:e7:a0:ed:e5:3d:4b:00:59:e3:86:85:
7a:a2:0f:42:b6:b7:8a:40:24:e5:5b:c3:36:15:ad:ed:29:9b:
31:5b:55:2a:9c:0c:6a:47:51:c3:2d:f6:ca:82:be:f0:08:c4:
92:d2:7f:e9:b2:f3:b5:cb:6e:57:4b:53:bb:31:8f:73:b6:af:
26:e0:a3:37:89:6e:74:b7:03:15:47:a7:c8:16:32:f8:76:ee:
eb:a8:40:a9:0f:58:a0:8f:15:bd:b4:4e:a2:cc:19:7b:05:ef:
b1:02:f1:34:a6:80:3b:c5:89:6b:a1:46:d7:ed:03:62:d9:af:
d0:e7:7d:dc:f3:3b:fb:f5:2e:de:51:1a:d4:b8:ee:81:c0:2c:
f9:e6:81:c8:03:af:6e:29:a3:a6:7a:f8:0a:70:43:1f:95:8b:
dc:4e:68:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:52:09 2025 by rpki-client