Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P0XAPfe3yNIxdCiyb_M5FcYNUZs.roa
File: P0XAPfe3yNIxdCiyb_M5FcYNUZs.roa (raw, json)
Hash identifier: V9F5CIJFse5sBEG2a/cw2k1D63L5NNoR76yNhSzQ1CI=
Subject key identifier: 3F:45:C0:3D:F7:B7:C8:D2:31:74:28:B2:6F:F3:39:15:C6:0D:51:9B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01883DC907711FF8E520EF2807B29EDCA51E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P0XAPfe3yNIxdCiyb_M5FcYNUZs.roa
Signing time: Sun 21 May 2023 10:09:24 +0000
ROA not before: Sun 21 May 2023 10:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3d:c9:07:71:1f:f8:e5:20:ef:28:07:b2:9e:dc:a5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 21 10:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f45c03df7b7c8d2317428b26ff33915c60d519b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:9c:10:45:15:a4:72:ee:7b:d4:b8:8a:f0:
4b:08:96:c7:57:45:f4:88:f0:3a:92:eb:b3:27:6d:
17:9e:ff:84:c6:aa:fa:1a:9e:2a:71:6d:b5:5f:70:
b7:ea:a9:fb:6a:ae:db:21:62:2d:03:45:ab:0f:40:
f6:39:a3:2f:84:51:b6:1d:47:0c:79:ae:24:f0:c5:
ce:09:fb:cd:f6:db:db:e8:f2:16:38:b1:1e:bb:06:
59:0a:4c:fb:93:02:d4:ef:81:03:4a:f0:d6:61:fa:
2f:60:26:58:49:d1:ad:91:c2:75:f8:26:ec:b5:37:
00:a4:66:14:7c:12:e2:01:73:fb:4a:31:56:6e:b0:
14:91:fe:5a:a6:02:88:45:5c:77:a4:d0:66:9c:3f:
f6:5a:5e:be:55:58:33:c1:f5:86:2b:a8:c0:28:da:
a6:21:e1:cb:10:b5:1e:9e:07:19:1d:4a:f4:b2:b5:
13:85:8c:37:4d:36:36:c1:ea:2b:80:36:32:70:7d:
b7:09:df:e8:c0:2a:be:f4:ad:d7:7d:cd:5c:8b:84:
2b:93:16:6b:57:83:3c:7b:bd:8a:bb:6e:c5:68:d4:
b3:f5:3b:6e:21:ad:88:4b:de:2c:92:4a:58:a7:e7:
d4:12:00:38:b4:57:d1:64:30:92:d0:96:18:05:ff:
c7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:45:C0:3D:F7:B7:C8:D2:31:74:28:B2:6F:F3:39:15:C6:0D:51:9B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P0XAPfe3yNIxdCiyb_M5FcYNUZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:b0:4a:2f:cb:2b:ef:e8:91:b2:50:ec:3d:77:66:4e:0a:91:
ca:a4:95:dd:1d:fa:d9:db:55:fb:fe:5a:03:ab:aa:31:2c:aa:
10:82:40:c8:ed:de:f6:75:e5:e6:18:2c:4f:3a:e8:cc:ef:94:
b1:55:24:16:a6:9c:49:f4:25:a3:62:66:4b:12:f3:fb:d9:77:
41:b0:d7:27:93:f6:b4:8c:83:c1:09:87:60:22:5c:e0:a6:48:
1c:d6:e5:5e:59:11:71:36:80:f2:d5:86:25:1a:83:2f:52:14:
be:39:a8:6d:98:70:3d:7a:97:ee:c9:7b:a2:c4:60:04:1e:ee:
94:11:71:84:bc:92:0c:50:a1:99:12:7a:cc:c0:89:17:e7:c8:
50:31:fc:1e:bf:9d:fc:bf:ef:8d:5d:2a:3a:c4:4d:8f:19:e8:
d4:67:0b:94:e0:de:84:af:09:6c:7a:f7:26:04:bb:55:01:f6:
f4:9c:7f:ea:f0:1b:de:07:a7:18:82:23:e4:f8:e5:33:e8:6a:
50:14:de:b0:b7:e1:4d:31:bb:e9:c6:24:c8:f4:62:06:36:ba:
e6:b6:90:05:35:63:c0:96:83:17:70:eb:b8:b1:6a:a2:d1:2c:
3f:9e:57:11:10:4d:a1:0c:6b:14:24:be:8d:0b:ac:fe:bf:40:
54:46:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:18:08 2025 by rpki-client