Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LEh1uhGfRWobHg4m9H2hVCNfSjg.roa
File: LEh1uhGfRWobHg4m9H2hVCNfSjg.roa (raw, json)
Hash identifier: zHE0g722liK4Rgj/AuD19zOeTUoLwWRpjF1vtw3kvjg=
Subject key identifier: 2C:48:75:BA:11:9F:45:6A:1B:1E:0E:26:F4:7D:A1:54:23:5F:4A:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187E2962461D1C7316E2793A833A5CA0AAA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LEh1uhGfRWobHg4m9H2hVCNfSjg.roa
Signing time: Wed 03 May 2023 17:08:23 +0000
ROA not before: Wed 03 May 2023 17:08:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e2:96:24:61:d1:c7:31:6e:27:93:a8:33:a5:ca:0a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 17:08:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c4875ba119f456a1b1e0e26f47da154235f4a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e9:96:00:4e:69:e2:af:5a:0f:06:b9:5e:2d:
dd:cb:ca:08:6e:15:ca:45:61:aa:17:9c:af:08:c9:
a9:cb:7a:e5:b1:25:71:f9:0a:c7:18:6e:80:2c:e7:
1c:b0:91:4a:a5:40:a0:13:16:67:f2:5c:75:9c:f1:
28:8c:d3:d9:19:d9:fc:a3:8d:33:93:3e:65:0a:be:
26:54:13:68:1a:d8:a7:5c:06:4e:c5:1f:6f:d0:c1:
6f:b9:f0:84:f3:99:75:4a:cc:2a:1b:60:78:e8:c6:
14:c4:32:39:34:84:92:a9:b4:94:29:c5:c7:4d:1b:
1f:d2:44:de:87:4a:cf:5e:62:71:a9:1f:ef:4a:96:
2b:04:05:4f:be:bd:9a:12:ca:bf:53:60:e0:8a:94:
44:06:d6:72:41:58:d8:54:b8:5b:38:9c:07:7d:6d:
61:7e:b2:71:6c:f0:95:9e:78:c6:72:ef:e8:82:31:
c9:24:31:c1:03:93:ec:3d:48:f6:6c:c2:23:a4:7c:
d6:a5:a7:b6:3e:af:dc:e0:28:9d:3e:9c:17:3c:98:
ba:e2:32:51:4c:9c:3d:37:f0:42:a1:d9:8f:83:d2:
65:28:77:b7:7a:13:6c:12:07:1a:77:7d:3f:1d:2d:
52:0d:e0:fb:51:f0:ba:d1:eb:f8:87:f3:62:e2:38:
3d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:48:75:BA:11:9F:45:6A:1B:1E:0E:26:F4:7D:A1:54:23:5F:4A:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/LEh1uhGfRWobHg4m9H2hVCNfSjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:d2:ba:a4:af:09:d0:18:ab:4c:c2:70:98:7c:d1:53:aa:27:
61:cc:3f:63:b6:6c:3f:64:ea:61:ba:32:c0:b9:9e:66:f0:ca:
d7:4e:ca:4e:42:49:35:44:f0:1b:fe:65:dc:26:7e:3a:20:2b:
6e:3d:02:62:79:eb:ea:9c:33:53:9a:50:33:0a:fc:2f:74:96:
03:ea:81:b9:07:20:c9:60:e2:73:33:8d:48:e0:ef:cf:32:6b:
40:6a:cf:0f:b6:92:92:46:16:4d:f7:1f:ce:fd:ed:1e:34:3a:
a7:95:74:b3:fe:57:03:97:9c:9f:83:26:9b:8a:2b:bc:4e:51:
02:eb:f1:43:29:75:1b:76:15:89:cb:86:10:29:aa:f1:c1:49:
c3:1a:08:e7:cf:e1:f3:5e:a7:53:74:e0:79:0f:14:5a:78:38:
18:8a:6c:77:cf:fc:76:fa:f0:03:75:2a:0c:0b:53:d9:fb:e8:
ce:a8:ca:51:f5:6b:f3:b9:d4:19:b2:bb:e9:3d:04:2a:24:75:
0f:09:86:aa:53:a7:54:f5:37:20:7c:b2:e5:d5:f9:f1:88:a3:
dd:e4:43:be:6f:5a:f3:7e:0b:5c:47:e7:db:a9:06:e1:28:4d:
c9:ee:27:a8:2a:df:0a:5d:e4:c1:ac:46:7a:76:f5:74:04:ad:
f3:d6:5b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:36:44 2025 by rpki-client