Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R7DWGn773PLxyKm4gz0eiQv_ZuM.roa
File: R7DWGn773PLxyKm4gz0eiQv_ZuM.roa (raw, json)
Hash identifier: J4e/Qj0iRYYbx59VblnIJ2z6cVEVNfnSgAGwkoS8z4Q=
Subject key identifier: 47:B0:D6:1A:7E:FB:DC:F2:F1:C8:A9:B8:83:3D:1E:89:0B:FF:66:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D325D1E7FEA8E6887F5E5EE7BE81470D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R7DWGn773PLxyKm4gz0eiQv_ZuM.roa
Signing time: Tue 08 Aug 2023 03:16:58 +0000
ROA not before: Tue 08 Aug 2023 03:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:25:d1:e7:fe:a8:e6:88:7f:5e:5e:e7:be:81:47:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 03:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47b0d61a7efbdcf2f1c8a9b8833d1e890bff66e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:f9:54:2b:b3:7b:84:c8:ae:ff:11:a7:5a:
fc:28:95:ec:5d:63:9f:1e:ab:8d:0a:58:dc:88:09:
8b:0b:c0:18:6c:1b:4a:63:47:b6:91:1d:26:d5:18:
30:9b:b9:6e:79:38:6a:27:42:3a:b7:c2:2f:69:b0:
ce:b0:4a:fa:40:54:52:9a:db:68:6e:55:5a:63:ea:
24:41:0f:89:6f:c2:1a:0e:d4:27:b2:2e:f2:74:6a:
2e:61:9e:bd:6b:24:d4:ae:13:90:c4:15:79:d5:da:
47:2a:b1:8b:82:f8:79:6c:57:d4:d6:45:d9:93:1d:
19:10:9a:19:01:94:32:bb:0e:d3:c4:f7:1f:10:05:
f0:8c:a5:8e:b9:bc:18:ab:cb:bd:44:b4:61:58:b6:
06:bc:5e:3e:db:cc:f7:33:99:cf:5e:47:5f:63:83:
8d:77:7a:41:4c:b4:9c:b1:03:8d:bc:8f:19:c7:1c:
b1:98:3b:9e:81:26:56:13:97:bd:e2:48:ac:94:24:
5b:46:96:48:96:9e:7e:31:91:ff:a9:b1:47:98:b7:
83:94:ef:bc:af:8f:78:5f:dd:97:26:97:49:ae:86:
22:6d:6b:b3:4f:9c:68:b1:63:da:a3:f2:c9:25:a8:
0d:10:4d:54:02:ec:c8:00:c2:d0:d0:fd:12:df:8c:
ee:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:D6:1A:7E:FB:DC:F2:F1:C8:A9:B8:83:3D:1E:89:0B:FF:66:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/R7DWGn773PLxyKm4gz0eiQv_ZuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:60:03:06:2c:0d:49:a7:24:03:7a:d6:54:5b:c0:51:7a:11:
27:12:ae:69:71:63:f6:e5:37:35:de:e4:39:17:f8:f5:1e:4f:
0c:c2:9f:bc:e4:67:3c:7c:d2:27:e3:56:39:fd:f7:cc:41:00:
8c:67:82:a1:56:1c:45:9f:04:c4:ba:3b:17:c1:be:f4:39:76:
2f:5c:f0:dd:03:46:b0:8d:03:23:cf:82:da:d6:cf:d6:8c:6f:
c5:c7:1b:99:5b:d6:b9:ce:2a:11:5b:ba:a2:06:3f:9e:58:9f:
79:08:31:b5:ee:04:92:23:35:99:d2:e4:7d:1b:e6:8e:fd:36:
89:86:32:42:36:3c:7a:a4:aa:f4:28:d9:39:f9:49:7d:75:77:
3d:2e:a8:2a:75:54:00:9e:e6:39:05:93:07:43:f3:5b:8b:10:
45:2f:8b:fb:ac:fe:d6:1d:df:d0:f4:6d:9b:7e:47:ed:10:49:
e4:fc:68:ac:54:99:b6:a3:c2:d3:b9:c5:65:d7:ee:24:e5:9d:
ae:78:6a:67:9d:6f:d2:54:04:73:cc:33:58:2d:f0:af:fa:3d:
92:21:7c:a7:0b:0f:58:e7:ed:a5:eb:46:12:02:b5:18:5c:4f:
66:2a:18:d7:a7:8c:80:15:81:7b:5b:4f:29:cb:ea:50:8d:17:
1f:28:93:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:21 2025 by rpki-client