Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RLF0WJPsqCBlPuOD94-dFUY5YR0.roa
File: RLF0WJPsqCBlPuOD94-dFUY5YR0.roa (raw, json)
Hash identifier: kcCd+5MaUWt4YFNQrLIPvZW8vK+9lB8tqjfmdf43TH4=
Subject key identifier: 44:B1:74:58:93:EC:A8:20:65:3E:E3:83:F7:8F:9D:15:46:39:61:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189834E3004F02634CC718D6C88A99CA51C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RLF0WJPsqCBlPuOD94-dFUY5YR0.roa
Signing time: Sun 23 Jul 2023 15:11:26 +0000
ROA not before: Sun 23 Jul 2023 15:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:83:4e:30:04:f0:26:34:cc:71:8d:6c:88:a9:9c:a5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 15:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44b1745893eca820653ee383f78f9d154639611d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:13:e8:ed:af:74:bb:94:b9:9b:dc:ea:1a:
76:00:a2:bd:0f:31:f0:6c:68:0d:a3:11:fe:73:46:
80:bd:64:a2:66:00:05:56:42:76:d1:34:90:f6:cc:
e9:e0:d3:e7:93:d6:db:fa:21:49:2f:95:50:7f:53:
ae:86:d0:d2:2b:9f:ae:3d:16:64:71:46:8e:82:b4:
5e:e5:74:a9:c7:51:72:2c:91:39:da:84:e9:e8:3c:
ac:c6:04:58:5d:d7:80:5e:d9:cd:8c:e3:e6:28:00:
53:ac:2c:67:ef:94:eb:96:fe:ae:21:8d:93:6a:da:
50:1e:0b:d0:32:24:d8:da:88:ad:67:0d:15:ff:31:
92:e5:a2:ba:e5:d3:00:88:11:4f:06:ee:74:c2:d0:
14:35:96:57:63:17:44:4f:9a:97:d1:06:bd:e7:47:
ff:0d:3c:ee:53:e5:d3:b3:37:46:17:b2:f4:4e:04:
5f:21:10:e6:79:da:dd:54:0d:34:5d:61:79:7f:89:
17:5d:d3:5c:c2:d4:00:bf:98:dc:82:f8:79:74:19:
b8:23:b6:02:e6:96:a8:f0:fd:48:3f:49:21:59:3b:
83:ba:95:fa:a3:79:94:72:9a:22:97:7d:9a:3f:d3:
1a:42:9b:0f:b9:70:22:78:f0:24:b4:3d:6a:a2:7b:
32:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B1:74:58:93:EC:A8:20:65:3E:E3:83:F7:8F:9D:15:46:39:61:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RLF0WJPsqCBlPuOD94-dFUY5YR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:79:71:50:04:db:63:52:cb:95:e3:6e:83:ff:df:b4:1a:4b:
5a:e4:97:68:b7:f5:86:04:36:70:5c:c5:9a:ed:c8:33:3f:5b:
b3:29:0e:6f:3c:cf:2a:a1:ee:72:2e:5f:a7:d5:65:18:da:38:
fc:36:94:31:0f:b2:62:95:2f:38:21:8f:70:d8:75:05:bb:38:
b6:78:4b:a3:cd:b8:3e:ea:a3:6d:b1:6c:73:b5:d5:4f:a6:39:
22:78:01:2a:79:1d:35:d4:ac:fa:bb:f5:14:35:f6:08:84:8d:
d3:05:ff:3e:b1:89:14:12:7e:37:58:ca:73:53:a3:03:b4:42:
36:21:09:d9:e0:88:20:34:f1:55:bf:d0:51:5f:05:d1:75:0b:
2c:dc:68:f5:8b:bb:f0:69:96:00:fd:78:c9:0a:25:85:6c:d5:
6c:2b:ae:26:8b:d0:47:10:da:75:8d:1a:c9:23:aa:01:aa:c3:
cd:cd:ab:16:31:5f:17:98:1d:cf:dd:95:bc:3d:93:f5:8e:be:
b9:7b:79:4e:eb:27:fb:ba:b0:e2:16:d3:48:19:5c:e5:9c:a9:
84:fd:69:98:4d:5d:91:7f:15:2c:62:56:d6:56:87:71:05:34:
b7:4b:3b:45:d1:1d:af:ec:54:fe:8b:7c:5f:09:59:d3:57:53:
d2:6a:b2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:59:03 2025 by rpki-client