Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Od81SUHuYF-jNiQtOU3KZ_9ZWAc.roa
File: Od81SUHuYF-jNiQtOU3KZ_9ZWAc.roa (raw, json)
Hash identifier: K3zoo/LODf6q5bXTCNmpw1zs6Qf9pE2XLj1r6pj1pr4=
Subject key identifier: 39:DF:35:49:41:EE:60:5F:A3:36:24:2D:39:4D:CA:67:FF:59:58:07
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187AC8490BB71A73E3C73C0089843F53346
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Od81SUHuYF-jNiQtOU3KZ_9ZWAc.roa
Signing time: Sun 23 Apr 2023 05:09:41 +0000
ROA not before: Sun 23 Apr 2023 05:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ac:84:90:bb:71:a7:3e:3c:73:c0:08:98:43:f5:33:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 05:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39df354941ee605fa336242d394dca67ff595807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c3:43:75:cc:b5:81:62:5a:6f:7e:46:aa:2d:
3a:1f:f5:b1:22:b8:b5:83:2a:83:ac:7b:6a:d6:1b:
8f:1d:2f:f7:69:59:4c:53:ad:8b:73:37:0e:fa:e1:
a1:2e:0c:35:f9:e5:af:8b:5e:00:99:fc:e0:22:4b:
6b:5e:5e:2f:c1:81:48:0f:fa:4c:cf:5a:b4:30:80:
3d:f3:94:c7:61:6b:8c:48:68:07:6a:d0:5d:0f:b6:
cd:fb:cb:c0:7b:f4:fe:be:d7:54:73:08:fa:48:af:
ca:de:15:81:21:99:a8:7e:68:bb:3b:d0:2e:92:9b:
10:cd:ca:a4:64:f0:2f:95:2a:72:d3:3e:47:3e:38:
28:6b:e2:51:46:ae:90:cf:c5:b9:21:1d:22:97:92:
05:dd:98:e6:1f:34:26:f4:04:a2:1b:16:63:20:76:
b6:9e:4c:0b:ee:fa:cc:6f:03:09:51:45:52:49:0b:
bc:50:63:62:64:b1:d4:12:f1:4a:e6:db:49:e5:6c:
af:18:bf:72:a9:1e:0a:94:eb:73:e9:bc:e6:7c:5a:
00:74:8f:ea:4c:4b:aa:9c:2c:7f:12:e1:91:8c:db:
28:0c:7c:57:ff:dd:1c:3e:80:3c:0a:91:66:27:8e:
fa:62:02:11:db:3f:d4:56:8c:43:71:9e:46:33:8e:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DF:35:49:41:EE:60:5F:A3:36:24:2D:39:4D:CA:67:FF:59:58:07
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Od81SUHuYF-jNiQtOU3KZ_9ZWAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:ee:b9:c5:74:46:cc:9c:7e:4a:3c:d8:54:f9:3f:af:29:7a:
5c:78:46:22:ee:d5:e1:f1:26:fc:6c:cd:da:f1:ce:70:04:9d:
c6:95:f8:f3:f8:b6:5c:11:4b:aa:ee:a4:75:74:5c:0d:61:f0:
de:c4:00:46:d0:09:cb:57:9a:d6:2b:78:f5:8a:32:1d:e5:dc:
d9:fc:a5:4c:8e:46:1f:eb:ec:bb:2a:7e:ce:10:7f:68:e3:8e:
b0:12:01:f5:98:9a:02:8a:2a:99:ef:d4:46:9f:cc:d3:12:c6:
f6:bc:1b:b5:74:87:78:1b:84:62:06:e8:9c:df:08:8b:3d:3e:
21:03:a6:f4:fa:9d:4d:23:10:0f:e5:36:fb:0b:9f:4c:6c:7f:
03:0f:f2:42:34:64:bd:0a:bd:92:6c:ea:b4:bc:a9:3a:eb:d4:
ad:32:f1:40:99:68:6e:09:8b:f9:a1:b4:2a:c3:84:32:b2:a7:
77:25:90:fe:00:c3:b3:d6:2f:08:3c:54:22:2d:75:ea:f6:6a:
02:7e:9c:10:3c:c5:39:d5:6b:aa:30:c5:97:ee:63:5f:32:37:
14:a3:92:33:a5:ed:7c:c3:06:7e:7c:cf:de:81:a2:dc:d0:22:
7c:44:87:44:1b:a6:56:45:b8:4c:3a:5f:fb:ac:97:e4:c4:81:
35:12:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:19 2025 by rpki-client