Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R4rTWC8eA_uLowVEsHahLudHsAA.roa
File: R4rTWC8eA_uLowVEsHahLudHsAA.roa (raw, json)
Hash identifier: DUtznZGsTBIA71brz0mtYC7czBGdHupr0yMOKmAHDlw=
Subject key identifier: 47:8A:D3:58:2F:1E:03:FB:8B:A3:05:44:B0:76:A1:2E:E7:47:B0:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182D6300C683AD0C674FA528BFEB92FE542
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R4rTWC8eA_uLowVEsHahLudHsAA.roa
Signing time: Thu 25 Aug 2022 18:07:29 +0000
ROA not before: Thu 25 Aug 2022 18:07:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d6:30:0c:68:3a:d0:c6:74:fa:52:8b:fe:b9:2f:e5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 18:07:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=478ad3582f1e03fb8ba30544b076a12ee747b000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:95:eb:e5:a4:13:56:93:b9:f4:57:2a:b8:3b:
a3:e0:d6:05:01:9c:e7:63:5c:c4:a4:c5:cd:55:e6:
77:06:48:4e:f3:26:97:9a:b9:b9:4c:cf:3a:5d:b1:
9b:f2:f9:04:71:69:ee:aa:b7:59:2a:b2:20:24:0e:
95:48:2c:cc:12:5e:9f:b8:fc:a5:7f:a9:06:65:df:
d1:2e:b9:0a:e6:cf:5e:cb:7e:d5:ca:f2:52:63:e1:
12:5d:ef:70:01:cf:ee:50:3d:98:cd:b0:46:e9:bd:
66:8d:f5:52:18:26:7b:73:b7:d2:b2:bc:7f:a4:cf:
7a:bd:a5:ae:4f:5f:14:52:ae:e8:a9:60:73:dc:65:
da:83:56:13:15:5f:84:11:f1:8d:98:d2:14:d7:3d:
81:99:4f:53:84:1d:a8:4b:8e:32:eb:55:15:7a:f8:
5c:3a:62:ba:4c:20:db:52:38:69:ba:e3:19:de:9f:
a3:36:25:f3:7d:93:d2:ca:33:a5:7a:05:cd:3b:70:
52:91:3c:25:f9:63:1b:20:35:e0:e7:81:f1:4c:01:
aa:8e:ce:dd:90:07:0b:9d:82:49:ba:41:e8:f7:56:
d0:5e:51:ca:ef:b1:c8:67:a5:08:ec:da:61:ff:35:
32:b5:37:4f:9f:3f:f7:6c:c4:d6:7c:fc:98:61:a2:
1b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8A:D3:58:2F:1E:03:FB:8B:A3:05:44:B0:76:A1:2E:E7:47:B0:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R4rTWC8eA_uLowVEsHahLudHsAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:86:2b:b1:64:dc:12:b7:4e:f4:ae:d6:b7:ff:72:c6:db:f3:
86:c7:99:86:e5:a7:92:39:c9:1f:b7:72:e4:af:bd:56:c2:e0:
d4:ac:f8:a8:5a:aa:74:fc:9d:ea:0a:5a:84:13:0d:bd:7b:ff:
1d:72:d2:2a:bd:55:64:c0:dd:3f:3e:fb:7a:1b:7d:ee:8b:99:
da:17:c5:d0:b0:72:11:8a:57:7a:e2:d3:64:0e:fa:f9:b8:be:
6f:6a:d4:84:f4:df:2d:9e:56:80:fc:6a:9d:80:f2:b4:63:f2:
ee:ba:d4:9b:eb:fd:8e:c7:69:3e:77:ca:d0:0b:64:be:28:a2:
b0:9e:a1:67:af:8b:d8:da:7b:c4:ee:21:b6:fc:00:e2:b8:de:
56:23:f1:99:43:f1:54:e3:70:bb:eb:fd:68:25:9b:b9:1e:4e:
ad:ca:58:4c:25:25:56:ec:e9:74:55:40:86:d3:4a:cb:bc:8a:
18:f2:64:d0:68:5f:85:db:e0:b2:77:ef:11:d6:9d:23:79:9b:
76:67:f2:20:d4:18:bb:9d:ac:bb:0e:26:b1:9b:90:58:0b:48:
1f:71:4a:57:d4:9b:47:0e:93:ca:6b:87:fe:4d:b3:d7:d1:8e:
10:1e:af:6e:a5:57:ba:ff:14:f8:c8:46:e7:bd:46:62:d4:69:
c5:b7:8f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:25:03 2025 by rpki-client