Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P1isGFLdZC4YOk6fQR0N8s2jY8w.roa
File: P1isGFLdZC4YOk6fQR0N8s2jY8w.roa (raw, json)
Hash identifier: 4hsRNRMg+SCeIZ4htLQpbJZN/PkI0noNppaPwho5VEw=
Subject key identifier: 3F:58:AC:18:52:DD:64:2E:18:3A:4E:9F:41:1D:0D:F2:CD:A3:63:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FCC44343E8EC5D206A408243813730AC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P1isGFLdZC4YOk6fQR0N8s2jY8w.roa
Signing time: Wed 16 Aug 2023 05:14:27 +0000
ROA not before: Wed 16 Aug 2023 05:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fc:c4:43:43:e8:ec:5d:20:6a:40:82:43:81:37:30:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 05:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f58ac1852dd642e183a4e9f411d0df2cda363cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:cf:a9:7c:36:8c:f4:aa:e1:ca:ae:5c:8a:
15:f2:b3:78:6b:c4:54:4e:b6:2b:6e:9d:46:2f:e6:
e6:6c:13:e2:40:8f:02:d5:97:0b:ed:e1:9b:db:e1:
d6:a4:98:33:4d:f9:e0:61:a4:8b:74:53:69:fc:95:
70:3f:45:a6:7d:21:09:7c:f3:00:0d:9a:03:f3:69:
b0:af:25:75:4c:71:5c:f8:91:e9:c2:e9:e4:04:e5:
79:19:c1:bf:b2:88:52:c4:d0:de:81:6f:6c:9a:22:
32:1a:2c:c0:84:d0:1a:43:8b:53:78:a2:9b:24:9a:
81:4e:d1:b2:e7:6b:38:5a:39:21:3c:e0:52:72:3c:
47:a7:11:0f:f4:10:25:82:74:b5:8a:02:1f:c6:56:
b3:80:3d:df:e2:9a:1e:67:41:f5:53:41:f0:0e:a4:
be:5a:93:83:8f:9d:0c:39:74:e5:3c:d0:e6:2d:9f:
bc:ec:78:a2:35:b2:b5:1a:d7:08:83:07:6e:b6:82:
4b:45:b7:6b:87:7a:ac:0f:2e:aa:8f:79:8c:6e:46:
a9:6f:8e:f4:7e:99:93:54:03:87:a2:cd:1a:1a:95:
d1:10:9f:ac:d1:2e:7b:1e:6d:e6:35:91:55:6d:b3:
4a:85:54:b9:d6:a7:2e:81:af:14:5b:39:24:92:bc:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:58:AC:18:52:DD:64:2E:18:3A:4E:9F:41:1D:0D:F2:CD:A3:63:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P1isGFLdZC4YOk6fQR0N8s2jY8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3e:7d:d1:5b:98:63:cc:ec:f2:07:70:c4:b8:16:32:16:fd:e7:
4c:36:d6:55:e9:6d:86:79:a7:7b:13:9b:53:16:78:44:56:2d:
00:45:09:f2:b3:2a:67:5e:a7:6d:00:d4:45:35:89:5d:ce:1b:
9d:3e:51:09:e7:73:0c:72:1c:db:c1:56:d9:a6:76:0e:22:f2:
b8:ac:8b:bd:81:2f:9e:51:a7:e2:f6:23:8f:b0:27:f3:2f:45:
3e:2a:9e:e9:da:0a:a4:b5:68:ff:17:7d:95:33:69:a2:9c:2d:
15:8b:da:f5:dd:1d:5a:07:1a:f8:56:bb:0d:0c:87:9d:32:d2:
e3:81:a2:d1:e2:c3:8f:d0:d1:69:a1:b4:43:20:4d:5f:89:bc:
0f:08:fd:e7:61:40:57:1a:42:33:ac:0d:80:02:fb:8e:2f:28:
96:74:b1:34:dd:9e:b5:6c:c2:de:a2:68:0e:24:f2:d5:3a:3a:
8d:a8:87:47:85:88:12:ba:21:d3:2b:f6:04:4c:74:63:24:7d:
c2:55:01:14:c4:a6:fd:e6:16:78:43:8b:29:ab:56:e1:97:40:
0d:08:70:1b:1d:52:ec:3f:2d:8b:31:13:f6:5e:fd:92:2c:01:
46:7a:6e:8a:0e:59:f5:c7:d4:84:df:dc:29:93:d1:44:b4:37:
ec:c6:2c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:29:41 2025 by rpki-client