Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IfQp2UReCHbXJs0KRtIs8lE5d1w.roa
File: IfQp2UReCHbXJs0KRtIs8lE5d1w.roa (raw, json)
Hash identifier: mXcEIJcLI+Uj0ZmbpM4YSYg2OTTeqQ8NxO3/o4sIVuc=
Subject key identifier: 21:F4:29:D9:44:5E:08:76:D7:26:CD:0A:46:D2:2C:F2:51:39:77:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876EF01C47CE09CD72D009D4B93CA2149E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IfQp2UReCHbXJs0KRtIs8lE5d1w.roa
Signing time: Tue 11 Apr 2023 06:10:42 +0000
ROA not before: Tue 11 Apr 2023 06:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6e:f0:1c:47:ce:09:cd:72:d0:09:d4:b9:3c:a2:14:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 11 06:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21f429d9445e0876d726cd0a46d22cf25139775c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:5e:ae:c9:af:ad:38:45:4f:2c:0a:23:11:
5d:aa:c6:c8:02:ab:be:12:26:35:3a:4f:76:97:a5:
36:5e:a9:4a:d0:87:51:96:61:10:af:e4:9b:07:25:
78:67:34:3b:ea:c8:89:3e:b4:ab:06:58:ce:d1:2c:
6d:ba:a8:28:ff:24:5a:59:56:09:c4:8b:cc:87:0f:
8b:10:eb:3e:59:f0:0e:7c:28:05:f4:86:94:9a:53:
17:38:fb:55:8e:45:07:0d:fa:14:e5:47:83:65:a0:
b6:e4:7b:70:5d:df:9c:10:71:9b:08:8e:1c:80:cc:
73:7f:77:84:21:c6:1c:19:b8:ec:d4:14:dc:e0:f3:
ba:fa:d4:c4:bc:83:51:bd:e7:f8:af:8d:65:f7:01:
16:20:ae:af:5b:b1:ed:10:77:9a:a2:af:30:b1:14:
a9:62:1d:f0:cb:68:0f:ae:6c:1c:59:85:e4:53:ee:
14:9e:dd:d9:c6:23:37:3c:9c:97:81:68:94:6e:d0:
2e:b5:a8:cd:50:98:d3:88:f7:34:4a:66:4e:3e:fd:
69:21:86:51:bb:dd:b2:81:63:43:a0:32:7a:1f:63:
eb:08:80:70:c0:47:65:bb:bf:70:28:b0:80:f5:36:
ef:04:4a:b9:ef:45:69:30:04:6b:16:43:1c:1a:3e:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F4:29:D9:44:5E:08:76:D7:26:CD:0A:46:D2:2C:F2:51:39:77:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/IfQp2UReCHbXJs0KRtIs8lE5d1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:ce:ef:38:b2:e3:8f:cc:c7:39:67:d7:b7:af:cc:b7:5d:f9:
3d:8a:82:18:6e:c3:2f:d2:c6:ee:12:0e:55:e9:75:e2:a4:2f:
4c:93:61:aa:4a:4c:0f:23:c2:2a:a1:fe:33:47:37:c2:8f:e0:
84:98:2e:f6:d0:13:29:0a:7f:30:a9:21:68:b6:e6:97:a0:74:
2d:f6:f9:b2:7a:dc:31:e5:4a:31:b6:16:ba:e8:3f:db:b8:cd:
3b:36:ed:9b:6e:a5:6c:9d:95:b4:ad:68:72:2e:09:ea:b5:1f:
a3:7a:1a:ba:9f:08:b5:65:59:fc:64:7c:3a:12:1c:61:1f:3c:
b9:93:00:a1:74:f5:7e:f6:5f:3a:df:3f:98:20:23:c6:f2:ca:
1c:e7:da:7e:f9:97:db:14:19:d9:e6:4f:67:ae:d9:4e:84:66:
61:1c:a5:97:78:bb:20:7f:4c:4c:6b:e3:fb:5b:1e:32:ef:b2:
41:8e:de:bd:8b:d2:c2:3c:6a:50:0b:9e:48:e0:f5:5e:39:5d:
e0:d3:71:dc:ee:fa:91:ce:cb:a4:1c:dd:13:43:29:6d:06:cb:
dd:73:7d:eb:18:76:18:a2:f5:81:61:bc:22:bb:eb:59:a9:34:
0f:1a:9e:3f:c5:b9:49:44:f8:cc:27:ef:e5:93:69:da:a2:5c:
9d:e1:e9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:49 2025 by rpki-client