Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IfNV7Ep0jNV2GzPGM6-UyrJiO1I.roa
File: IfNV7Ep0jNV2GzPGM6-UyrJiO1I.roa (raw, json)
Hash identifier: pUynSNhOl0bSJob489wHdGuTf7GTENPYAw+Vv/+nJy8=
Subject key identifier: 21:F3:55:EC:4A:74:8C:D5:76:1B:33:C6:33:AF:94:CA:B2:62:3B:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877E949EB12CD5BD2409EAA6A990AAC996
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IfNV7Ep0jNV2GzPGM6-UyrJiO1I.roa
Signing time: Fri 14 Apr 2023 07:04:41 +0000
ROA not before: Fri 14 Apr 2023 07:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:187:7e94:707e/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7e:94:9e:b1:2c:d5:bd:24:09:ea:a6:a9:90:aa:c9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 14 07:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21f355ec4a748cd5761b33c633af94cab2623b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:fb:be:6b:ba:44:f7:57:51:ca:1d:e7:90:
e9:30:82:3d:89:29:af:75:35:f8:c8:95:16:78:ff:
94:71:68:c0:b5:6d:4d:aa:be:16:33:75:3c:86:b3:
cc:53:48:28:8d:53:c4:d7:69:cb:28:91:d0:4a:7b:
ba:8b:32:bd:0d:1b:5f:e8:91:14:6d:be:12:81:50:
47:a4:36:9c:46:7e:98:b9:ec:63:13:f3:46:ec:dc:
59:0b:9d:55:65:1f:98:be:15:d0:6c:ba:89:24:45:
c3:70:5f:f9:24:55:f9:5d:c6:73:65:d7:48:76:df:
89:1e:dc:2d:21:08:ff:98:db:6e:de:69:e2:a0:55:
cc:59:22:81:7a:d7:bc:39:ac:34:d5:4d:1c:33:89:
85:57:88:17:2f:13:97:78:91:0b:77:25:68:b2:d2:
a0:79:da:06:5e:78:1e:52:75:85:2f:42:46:f6:da:
b1:f8:ae:a1:76:50:1c:a0:c0:ef:fb:b4:10:13:09:
48:68:03:40:a9:79:a6:5c:ed:bf:7f:f3:e3:10:5f:
1a:4e:71:9d:06:0a:1c:e0:94:95:f9:76:d0:91:69:
7b:16:3f:76:9d:b7:3f:6e:fe:25:87:0c:ac:97:69:
76:d9:75:0c:1b:4d:11:28:d6:fb:8d:b6:86:3a:01:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F3:55:EC:4A:74:8C:D5:76:1B:33:C6:33:AF:94:CA:B2:62:3B:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IfNV7Ep0jNV2GzPGM6-UyrJiO1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:2b:43:e9:72:7a:16:91:f0:ee:3c:f1:49:39:1f:87:7d:63:
3b:58:dd:80:00:93:bb:bf:26:3d:c4:fe:12:5f:7d:5b:10:4a:
40:58:4d:12:a6:f1:e6:ba:ef:1a:b9:a1:83:c6:33:40:35:21:
49:ac:77:67:34:0f:45:6b:95:a4:c9:56:f4:37:76:87:e8:8d:
62:8d:83:5e:56:b2:78:c2:b6:e5:d6:62:8a:0d:ba:83:a5:1f:
46:87:e6:8d:6b:c7:e3:08:4f:b8:74:6c:43:5c:8e:d3:18:a2:
54:07:c7:39:73:12:8f:b3:48:ec:d4:94:e9:35:2a:5b:af:8e:
05:dc:8f:56:6e:2a:b1:f0:12:a1:c9:0e:a6:ba:99:ab:c0:19:
5e:ae:4a:be:7e:f8:50:42:c7:3f:70:e0:42:7d:87:37:1c:c8:
f9:72:3d:11:f1:b5:29:92:60:df:11:7d:1f:0f:6d:97:98:a1:
1f:8d:1a:57:7e:97:f3:56:df:40:74:97:a5:62:cb:c0:a9:82:
56:de:10:fe:05:12:6d:3a:38:71:81:f5:eb:47:ea:b3:86:24:
bb:40:45:51:df:73:e3:f8:07:6e:f2:69:30:41:2f:19:10:d5:
6e:19:d4:fe:5b:f9:1d:7b:fd:d2:d2:bf:3e:77:6e:7a:be:96:
b7:58:24:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:13:04 2025 by rpki-client