Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R0MwL0sPzp7NsQZ_yZtK8-RGc6Y.roa
File: R0MwL0sPzp7NsQZ_yZtK8-RGc6Y.roa (raw, json)
Hash identifier: Y24qK7il6FGdUHuE/WElmDrzm2yWOtXzIbFPCKO9F58=
Subject key identifier: 47:43:30:2F:4B:0F:CE:9E:CD:B1:06:7F:C9:9B:4A:F3:E4:46:73:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01836D0CF26BD3661B532207AF2A86284BFF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R0MwL0sPzp7NsQZ_yZtK8-RGc6Y.roa
Signing time: Sat 24 Sep 2022 01:11:48 +0000
ROA not before: Sat 24 Sep 2022 01:11:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6d:0c:f2:6b:d3:66:1b:53:22:07:af:2a:86:28:4b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 24 01:11:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4743302f4b0fce9ecdb1067fc99b4af3e44673a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:81:7d:69:7b:e1:c0:f6:28:93:49:7d:f1:
46:9e:1f:68:e4:1c:20:da:08:f2:73:05:69:e3:67:
f1:c5:bb:9a:ee:f9:46:fb:fc:67:3b:ff:dd:07:d6:
63:f1:73:88:fa:70:24:89:6a:d1:d7:58:14:be:31:
ad:11:92:33:7f:f0:18:e3:b1:5a:6a:2b:79:2f:4d:
09:a7:6b:e5:0e:74:e5:b6:9f:df:19:0d:b6:84:3d:
40:1a:d3:bc:d0:83:9b:8a:e5:9d:af:eb:c7:ec:dd:
ac:92:03:a9:4b:6a:cc:14:05:f2:70:cf:5c:1e:42:
90:ec:9d:a9:75:4b:65:2e:8b:04:c6:31:16:47:c2:
ba:67:0f:34:23:f8:a2:2a:03:55:9f:28:3e:9e:30:
01:d3:7d:d5:b7:6b:10:19:75:64:ed:75:83:4e:d7:
1b:37:92:93:fb:10:de:ad:c8:1f:9f:a5:15:f7:ba:
0c:51:13:0c:7a:8e:ee:1a:61:77:0a:63:7a:e1:84:
17:1c:3a:06:9d:76:ee:a9:35:ab:52:47:84:eb:cd:
d8:d5:11:d9:a1:1e:e6:23:00:1d:f3:40:02:60:69:
ca:96:f7:06:92:bc:f9:74:a2:4c:fa:68:f0:c0:5e:
d1:a2:02:c8:1e:71:75:c9:09:19:ba:78:39:26:14:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:43:30:2F:4B:0F:CE:9E:CD:B1:06:7F:C9:9B:4A:F3:E4:46:73:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R0MwL0sPzp7NsQZ_yZtK8-RGc6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:fc:49:ce:2a:d7:1f:8d:08:b5:03:16:ba:67:58:ac:a9:55:
b3:bd:ab:ed:b8:ed:2a:24:c5:44:c3:83:38:a1:9f:5a:4f:a3:
e6:15:b1:e3:60:bf:8a:cc:db:b6:6a:29:cd:95:0d:09:5c:17:
e9:65:3f:63:3b:13:7d:49:57:78:b2:f3:62:52:91:76:26:71:
07:b1:96:9e:cd:48:b0:d0:e6:03:fc:ca:f1:3a:5f:e0:7a:9f:
b6:5a:2f:e3:ee:3e:87:3f:60:cf:56:b2:9b:bf:cc:54:07:6e:
d3:d7:59:75:99:7b:d5:b0:7d:f0:0c:59:3b:71:e1:c2:b0:27:
4e:98:f0:a3:d7:a5:9a:2f:54:14:1d:eb:ed:29:a8:5e:9e:f1:
6b:65:2e:1b:de:fc:ad:07:fd:17:ad:b0:44:79:af:81:fa:b5:
62:48:41:5e:52:cf:82:0a:43:0c:e2:8c:33:61:19:ff:2d:fa:
21:39:28:49:df:40:9e:3c:65:60:6f:8b:23:ed:2a:53:ee:18:
5e:bb:2b:25:95:42:3c:15:96:39:95:06:6e:70:2f:9a:3b:b1:
c1:71:a6:dc:6f:0d:34:cb:ba:37:fd:6a:ae:54:c0:f5:96:a4:
8f:fd:11:62:9c:96:fa:fe:c3:9d:97:71:d0:65:a0:9d:3d:91:
58:4a:32:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:42:24 2025 by rpki-client