Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D7faoTO7c2cpvGc4IwAvWEfPy_o.roa
File: D7faoTO7c2cpvGc4IwAvWEfPy_o.roa (raw, json)
Hash identifier: plSCO2f5sCdjNZ6jGjPB3ZYH3cu3FYwdyRfKmA+9KwE=
Subject key identifier: 0F:B7:DA:A1:33:BB:73:67:29:BC:67:38:23:00:2F:58:47:CF:CB:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D9FF0F8B5456B0BF4ECD38AF3960307D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D7faoTO7c2cpvGc4IwAvWEfPy_o.roa
Signing time: Wed 09 Aug 2023 11:11:58 +0000
ROA not before: Wed 09 Aug 2023 11:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:ff:0f:8b:54:56:b0:bf:4e:cd:38:af:39:60:30:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 11:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fb7daa133bb736729bc673823002f5847cfcbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:53:aa:7a:02:72:62:09:34:44:37:a5:7d:05:
db:18:2c:81:dd:84:a8:28:7b:aa:65:af:a3:1a:76:
f3:4a:ed:91:7d:03:74:cf:27:73:17:94:ce:f9:28:
ca:11:9c:de:d5:4c:d0:6e:96:c6:e5:17:2d:3c:7f:
f9:0a:f1:8d:ec:14:a7:eb:d7:3f:a1:1c:d3:ec:ee:
e3:5a:41:e5:64:0b:6b:36:6d:20:7d:7f:2e:51:2d:
ad:ce:87:35:c5:91:f7:3b:2a:e3:01:d3:59:46:70:
6f:10:01:b1:30:46:eb:25:14:c4:6e:64:1e:af:f2:
12:20:d3:84:12:2e:3a:3b:d4:9d:2a:a6:49:c1:a3:
9a:22:12:42:e8:b9:77:e7:4e:c3:7b:93:97:7c:80:
c5:8d:f8:07:e5:d7:d6:d1:7e:95:47:20:a2:77:33:
4f:fc:25:d7:3b:0e:9a:fa:a7:7b:6a:af:f3:c1:18:
d2:75:bf:78:13:78:ed:25:48:21:22:de:cf:33:64:
6e:b9:0e:6b:b2:15:f8:a6:b3:f0:f4:a9:5f:d8:62:
f3:49:c1:72:7b:af:52:32:31:60:0b:f3:d1:00:2f:
a2:17:7b:f0:40:33:a8:73:be:83:2c:c1:8f:f7:d7:
cf:f3:88:cd:0d:d2:4f:f3:7d:c2:7f:eb:ac:81:20:
58:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B7:DA:A1:33:BB:73:67:29:BC:67:38:23:00:2F:58:47:CF:CB:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/D7faoTO7c2cpvGc4IwAvWEfPy_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2b:1a:3b:e2:e3:bb:02:ab:92:1f:f8:d3:68:00:fd:29:4b:06:
8d:9a:21:72:d8:d2:e3:b9:15:33:9d:0e:41:ca:87:96:18:74:
d5:ca:fd:1b:0c:ee:42:48:59:20:f9:24:ba:c3:f6:b1:49:94:
2d:e7:60:20:7e:8e:96:01:ea:ef:d0:2b:74:b2:d4:11:8d:1d:
7a:95:e9:33:4d:d9:f5:06:f3:90:83:9f:0d:1e:e8:2d:f7:40:
a9:49:e2:1b:45:0d:b8:7c:ad:e1:c4:43:5c:dc:0e:7b:6e:28:
df:12:0f:43:ad:2f:27:45:2a:07:be:2e:d8:66:e9:f0:3f:2a:
83:f3:57:c2:c7:26:f6:00:a7:2d:78:ed:ac:8b:fa:5e:a8:e5:
83:ee:93:6b:65:2b:a2:50:86:a6:cd:42:bd:40:6e:43:64:f8:
42:cd:9a:0b:72:1f:3e:c6:41:ce:dc:f4:d3:f5:73:20:41:94:
35:3e:fd:55:3e:10:8a:0d:48:c0:2f:14:26:2e:10:8a:90:2c:
07:4b:83:a9:ec:a6:7a:d6:ac:9d:0e:0b:23:95:e9:62:7b:1f:
e5:7d:a9:d4:1f:af:84:32:a4:17:9c:5a:8b:fd:b7:8d:05:1d:
3f:24:28:94:62:54:39:43:e1:e0:f1:75:f2:f0:9f:31:6e:de:
40:dc:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:20:38 2025 by rpki-client