Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P6qOvwUKEA1x7O2bGs7RgZ30VH4.roa
File: P6qOvwUKEA1x7O2bGs7RgZ30VH4.roa (raw, json)
Hash identifier: 40cT7kv+hE28scIZ6awCvkJ86LjYI9MeLDuiqxgpFvs=
Subject key identifier: 3F:AA:8E:BF:05:0A:10:0D:71:EC:ED:9B:1A:CE:D1:81:9D:F4:54:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885F434D0E7714A640CE12E89F9885F67E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P6qOvwUKEA1x7O2bGs7RgZ30VH4.roa
Signing time: Sat 27 May 2023 22:10:26 +0000
ROA not before: Sat 27 May 2023 22:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5f:43:4d:0e:77:14:a6:40:ce:12:e8:9f:98:85:f6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 22:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3faa8ebf050a100d71eced9b1aced1819df4547e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:cf:3e:64:6c:f7:85:1d:83:2a:3b:f9:e2:
b4:0d:2d:1b:47:bf:da:ed:12:c4:0f:50:92:a7:92:
49:d7:1c:ae:58:d2:cb:eb:d9:ec:2d:75:ce:76:39:
7e:ac:87:f9:ef:b3:db:81:04:d2:d1:20:c8:50:15:
59:c3:13:8c:e2:74:62:69:0d:ad:46:1a:22:e6:80:
ff:d4:49:ec:2f:ef:e6:80:a5:a3:b1:62:ec:6b:ff:
00:00:db:8e:04:06:8e:df:f8:2c:95:29:c8:64:ac:
b0:b5:c5:a6:71:df:4e:30:95:6d:89:6a:c3:3d:43:
6f:ec:4d:03:1e:ba:dd:ac:26:84:cf:4d:23:b3:c7:
78:ce:22:fd:c8:ee:76:3e:c7:ab:80:47:e5:bb:47:
f3:c2:c3:50:c3:bc:3c:fe:43:38:2a:cb:32:9f:4c:
54:c1:09:c6:0a:04:8a:d0:7a:78:f5:88:ce:4f:c9:
ab:3e:bf:18:43:8d:b0:6a:60:6c:12:ea:b9:25:6e:
4f:81:a7:57:d1:5b:ac:24:4a:b9:25:2b:6e:a8:61:
fc:24:25:3f:31:70:c6:4f:dd:12:84:12:17:b6:d0:
9a:f4:01:d0:b5:e1:a8:82:ae:ba:dd:50:f2:cf:b7:
78:21:54:03:e0:55:ce:1a:38:d3:5d:55:f5:85:5e:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AA:8E:BF:05:0A:10:0D:71:EC:ED:9B:1A:CE:D1:81:9D:F4:54:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/P6qOvwUKEA1x7O2bGs7RgZ30VH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:e8:0a:e8:14:8b:38:ed:8b:23:99:4c:65:c2:45:3b:77:66:
50:e8:00:75:44:24:f2:ed:b5:62:3c:c7:da:d0:4a:14:f9:7c:
84:45:33:a3:32:26:cb:dc:96:4c:df:e9:22:09:8e:fd:c4:58:
36:80:13:fd:89:58:80:fb:de:bd:3d:4e:1e:0b:b0:33:1a:f4:
ac:c5:e6:82:93:4b:b4:22:09:bc:81:09:94:dc:da:0e:3a:b9:
06:3b:df:9a:2d:df:95:0c:66:b4:2e:24:58:08:92:d6:ac:8e:
b7:07:22:84:af:5f:cb:ca:7e:2e:63:ae:b4:9d:d5:fc:82:8e:
52:07:d9:b0:aa:1a:69:7d:aa:b4:5b:b4:2d:4f:52:97:14:da:
83:4f:f8:c3:11:25:90:3a:c1:f5:aa:e2:69:5e:b6:d3:b3:9d:
2a:33:fe:c8:85:8c:7c:96:d5:1f:bf:27:8b:eb:01:31:10:a1:
ff:2c:95:84:91:87:0e:01:7f:c7:80:b7:e0:b2:df:8a:92:2a:
2e:76:99:67:ee:d3:52:dc:ec:9e:96:a6:d5:3e:96:9f:24:ab:
ac:7d:93:2b:4c:af:d5:2b:08:d5:dd:48:89:76:0c:c6:1f:6e:
a9:de:4b:94:b8:d3:85:72:2c:84:b8:ca:9e:e5:26:c4:03:df:
4a:5b:a1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:24:06 2025 by rpki-client