Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Id4DKSG6EmiMmlydbaOyu1_4PMU.roa
File: Id4DKSG6EmiMmlydbaOyu1_4PMU.roa (raw, json)
Hash identifier: to+WXUBlxko3Bn74PgJMR0WdFwdR60GKujE++P8KCBk=
Subject key identifier: 21:DE:03:29:21:BA:12:68:8C:9A:5C:9D:6D:A3:B2:BB:5F:F8:3C:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018694EE39A5490A9659CC6DAC9673D9B47D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Id4DKSG6EmiMmlydbaOyu1_4PMU.roa
Signing time: Mon 27 Feb 2023 22:11:25 +0000
ROA not before: Mon 27 Feb 2023 22:11:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:94:ee:39:a5:49:0a:96:59:cc:6d:ac:96:73:d9:b4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 22:11:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21de032921ba12688c9a5c9d6da3b2bb5ff83cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:e9:97:83:b4:30:bc:03:d9:29:02:aa:c7:
93:8b:3f:65:60:ab:8e:cb:57:c9:49:bf:f9:d7:27:
32:c7:22:b2:f9:1e:91:d5:da:b3:df:95:f3:ff:c7:
90:5d:1a:96:e7:9e:e4:e3:94:b4:ab:54:52:81:de:
77:73:3a:20:da:0a:b5:27:52:8e:9e:2e:83:02:d4:
ff:a4:5a:a8:b8:8d:50:f7:ca:a7:d4:ce:a0:c8:b7:
be:ba:2c:af:ba:1f:1d:dd:4b:7a:4a:f9:c1:04:12:
63:ec:fe:6c:bd:cc:e4:2f:52:14:87:02:a8:c0:19:
44:17:da:37:e1:cf:59:f0:9e:51:01:ed:a0:1f:d4:
ce:44:1d:83:57:4d:ae:89:9e:da:b5:71:11:59:5b:
45:19:ea:ae:4c:b4:bd:67:4c:54:9e:82:ff:54:a7:
c1:11:48:93:95:67:71:cf:5f:9d:3c:6e:ed:d9:3c:
f6:14:26:53:86:24:ce:c9:ff:92:9c:66:ad:c0:97:
9d:03:ce:c7:f7:b8:48:1c:c0:13:7f:ab:2a:93:b9:
b0:2f:ed:71:fd:32:0c:3d:6b:f7:6b:e8:ab:d3:6c:
8a:48:49:57:14:cd:bb:a8:94:cc:ac:15:5b:27:91:
46:50:86:77:c9:74:09:05:a5:60:a7:93:3c:28:1f:
78:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DE:03:29:21:BA:12:68:8C:9A:5C:9D:6D:A3:B2:BB:5F:F8:3C:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Id4DKSG6EmiMmlydbaOyu1_4PMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:8e:f1:a1:46:c2:12:55:64:6f:35:67:3e:2d:a1:53:a4:98:
53:57:09:19:46:e7:dd:e4:6c:33:a3:4c:70:05:5d:b1:53:64:
09:0b:6a:40:69:31:47:aa:44:2e:71:ee:10:20:7a:47:06:e2:
e7:f4:91:de:ea:3e:56:6d:06:28:d5:22:4e:2a:75:92:f5:93:
ad:eb:20:56:67:b8:55:bd:c4:a6:a0:d8:40:18:86:f7:8e:82:
b5:93:94:12:c0:d0:fb:b2:13:08:e1:15:08:ba:55:07:77:94:
3e:16:03:bf:50:ba:8d:7d:4f:86:27:53:a2:b2:10:1f:c7:10:
1c:83:26:bd:4f:6a:40:c7:de:82:48:0c:14:29:88:c8:b6:74:
da:69:5d:4e:77:38:fa:35:f2:d8:58:f2:52:12:11:91:07:e7:
06:50:2a:12:7e:5e:fb:31:a1:49:ea:ad:d3:68:05:e4:38:d9:
2c:e0:d1:62:cd:e1:3b:0b:bc:ee:56:b0:3c:45:56:6e:22:1a:
1a:61:c9:5f:16:ca:12:8b:0e:af:65:c9:2b:35:0b:f5:3f:d8:
7f:39:b0:49:69:57:32:db:a7:62:e4:2b:11:05:66:aa:fb:57:
32:74:59:13:99:e9:61:a8:45:88:a5:54:7a:b6:e3:82:34:ce:
01:0f:f2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:02:49 2025 by rpki-client