Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D6rL7CrCtbEXYkOR9dKogqgluEU.roa
File: D6rL7CrCtbEXYkOR9dKogqgluEU.roa (raw, json)
Hash identifier: zSNl7OlfyUhiWFZEC05SkmK3NrUnx8sAJ2YIoZPqyzA=
Subject key identifier: 0F:AA:CB:EC:2A:C2:B5:B1:17:62:43:91:F5:D2:A8:82:A8:25:B8:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868390921184AC6127071300D5D3214762
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D6rL7CrCtbEXYkOR9dKogqgluEU.roa
Signing time: Fri 24 Feb 2023 13:15:35 +0000
ROA not before: Fri 24 Feb 2023 13:15:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:83:90:92:11:84:ac:61:27:07:13:00:d5:d3:21:47:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 13:15:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0faacbec2ac2b5b117624391f5d2a882a825b845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c2:59:90:73:0a:10:52:d1:52:c4:c6:4e:69:
2b:03:bb:96:1f:f4:2c:10:67:29:97:bb:33:e1:fa:
6f:5a:f1:6b:11:97:c7:b6:ba:59:9e:7f:3e:d8:3a:
b9:fc:e8:90:03:b1:45:cd:86:7c:24:d0:6f:75:6e:
99:b1:c4:ed:ba:df:e7:55:f5:b2:19:7f:fc:78:70:
06:f7:f7:01:51:db:68:81:a0:4d:33:4d:ca:4b:d7:
04:8e:1d:0e:6b:cf:73:00:5c:4f:e0:fe:c9:2b:eb:
9e:b7:64:f0:95:a0:d6:4c:67:9d:cb:89:ac:3d:9b:
2b:94:10:5b:70:97:ae:72:af:92:70:d3:fd:ca:62:
41:97:41:69:39:1e:02:74:72:7f:57:f7:bf:36:eb:
79:61:6c:2d:fb:c7:2e:a2:41:ee:88:c1:8b:2b:9d:
19:77:5d:d7:71:c3:08:cd:23:92:72:c5:2b:d4:b1:
2a:db:8e:df:fe:fd:2f:20:90:23:2e:f3:ca:f8:65:
5c:62:83:d6:9d:f3:b8:f5:c9:c0:57:c0:fb:40:bd:
f1:75:31:f1:c2:82:57:2d:5d:32:fe:b0:38:aa:93:
71:70:22:aa:c2:73:4b:9b:f7:52:d6:be:5e:e5:59:
ff:8f:20:98:e4:1a:28:62:5b:30:e3:e8:88:91:c7:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AA:CB:EC:2A:C2:B5:B1:17:62:43:91:F5:D2:A8:82:A8:25:B8:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D6rL7CrCtbEXYkOR9dKogqgluEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:b8:b0:6d:b1:01:1c:13:b0:cd:a9:39:41:fa:29:1b:eb:81:
89:28:ec:b5:ac:c7:4d:15:ac:49:2d:46:34:ea:b7:47:51:a6:
e1:17:46:fd:37:79:e3:31:5c:7a:ed:b0:24:35:07:50:20:da:
b2:1e:eb:35:25:90:cb:ea:4e:a2:23:ef:22:80:23:06:9d:17:
48:ed:4c:11:6e:5a:f9:56:6d:40:cc:bb:7f:cb:86:28:f8:cb:
2f:4c:a0:88:42:0d:56:f8:c1:f0:08:8e:04:a6:4d:b4:17:f7:
14:75:e4:49:0c:f8:34:35:c5:7f:ca:1a:92:bd:37:98:eb:9a:
16:b5:67:7f:4d:db:1a:cd:9f:a0:b6:82:f8:d7:35:92:44:dd:
b6:ce:b5:a7:93:5c:d0:ef:57:45:9f:6d:12:21:08:4e:ee:28:
a4:0d:1b:6b:2f:95:e8:4d:ef:c3:f3:1f:51:a3:f2:35:fd:91:
56:be:58:f6:bb:e2:99:cc:d4:11:00:cb:ca:35:51:21:f9:4c:
ec:a2:37:96:dd:d5:f7:da:64:cb:71:92:2a:9e:22:4e:c5:f1:
63:1c:14:3a:e9:c2:0c:21:bf:6d:50:e9:1b:0a:08:7c:80:77:
ba:92:f5:d1:9c:9c:17:45:e8:13:65:84:bc:4b:6d:fc:81:da:
76:4a:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:34:41 2025 by rpki-client