Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I383i8SOTteXy6O0umCJnJNRKZU.roa
File: I383i8SOTteXy6O0umCJnJNRKZU.roa (raw, json)
Hash identifier: 0rhZzWRakX2+WnOtOshRugt00OXOHd+xzA/G8CKJDcU=
Subject key identifier: 23:7F:37:8B:C4:8E:4E:D7:97:CB:A3:B4:BA:60:89:9C:93:51:29:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896DA5C2349A1C08CE17A5D01A50241306
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I383i8SOTteXy6O0umCJnJNRKZU.roa
Signing time: Wed 19 Jul 2023 10:15:26 +0000
ROA not before: Wed 19 Jul 2023 10:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6d:a5:c2:34:9a:1c:08:ce:17:a5:d0:1a:50:24:13:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 10:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=237f378bc48e4ed797cba3b4ba60899c93512995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:c1:3a:dc:bb:15:de:42:ec:58:67:04:e2:
3f:40:b7:e2:b1:bf:73:24:a0:7f:30:36:c3:f7:88:
14:98:b3:4c:8b:b9:f0:ee:be:de:38:d4:1b:83:cd:
8f:b9:d2:39:7a:c1:a1:e0:35:aa:82:a3:82:75:1c:
5f:20:e5:68:3f:e5:ba:4b:99:a1:f3:24:79:9e:11:
17:35:cb:e9:96:1f:5a:a8:98:05:2a:b4:97:34:38:
5c:d6:75:76:ed:4a:fc:57:1a:82:20:94:1d:10:60:
78:76:b8:ba:47:6d:ee:4b:2b:cd:da:ce:9c:6e:30:
3a:16:60:d1:7c:fd:4b:75:6e:59:b0:fd:3e:68:46:
7f:79:17:6f:a2:c5:00:4d:75:c9:98:82:40:88:b0:
69:7d:99:ce:7a:ee:b7:12:ff:fa:67:63:0c:3f:4e:
27:70:70:ff:da:b3:ec:1d:61:61:b4:5f:3e:41:da:
0a:d5:ca:6b:f5:5e:2a:9e:99:88:23:d9:c2:28:65:
1f:38:c4:16:52:cf:8c:c9:27:2e:86:0b:7d:ed:83:
db:77:73:87:49:e0:ed:38:ef:61:cd:5f:1c:71:35:
91:4d:c6:a4:9b:28:7c:d6:58:46:1b:8f:49:97:f3:
45:89:2d:47:e9:07:e7:db:3f:9e:55:2e:0d:46:f3:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7F:37:8B:C4:8E:4E:D7:97:CB:A3:B4:BA:60:89:9C:93:51:29:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/I383i8SOTteXy6O0umCJnJNRKZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:f4:e4:96:8b:87:46:71:24:db:7b:a4:b0:61:de:29:97:f7:
9b:aa:3d:d7:8a:e5:75:19:d3:41:9e:30:bb:07:b4:75:a8:0a:
b8:ff:87:19:71:c0:3c:89:c0:93:ed:9a:e5:67:b0:06:96:d7:
58:94:19:6f:c8:4a:b5:e1:d6:31:e1:e4:f2:a2:ce:a2:a1:28:
ba:fd:76:0c:dd:1a:6c:00:ef:5a:5a:40:39:f0:1b:09:01:aa:
9f:99:68:23:da:b5:a0:65:9a:b2:a2:2a:16:3b:eb:24:a2:75:
3c:f7:da:b3:39:4f:26:e2:9f:b4:06:f3:5b:9b:92:ab:e7:d4:
1d:bf:f8:52:3f:bd:3c:c8:ba:06:a9:4e:28:28:37:22:db:a7:
85:0a:ad:81:fb:70:3f:6f:0b:42:ef:93:57:1d:aa:30:45:03:
88:67:6e:07:e5:fc:02:4a:7a:a4:ee:2f:85:d3:9c:c9:2d:61:
35:49:dd:6f:b4:b1:fd:78:fd:de:ed:1b:0c:32:24:0d:46:24:
31:1a:93:39:d7:d8:ac:10:fb:9b:5e:88:94:c6:60:2e:a3:97:
52:bb:5a:c5:a4:b1:c3:89:ec:b2:a4:98:d1:80:db:00:0a:0a:
23:f1:8c:6e:3b:d2:33:bc:5d:8c:60:c0:c9:00:c9:1c:8e:13:
74:86:72:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:08:45 2025 by rpki-client