Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RNBxUl4oouUoNFl0qzywUUD4Dyg.roa
File: RNBxUl4oouUoNFl0qzywUUD4Dyg.roa (raw, json)
Hash identifier: dB2PyGxcr+tR1BeWI1m78nDaDZaMkGugCe3aL61lWJA=
Subject key identifier: 44:D0:71:52:5E:28:A2:E5:28:34:59:74:AB:3C:B0:51:40:F8:0F:28
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873684EFA8E1C89092EF010273B876FDAF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RNBxUl4oouUoNFl0qzywUUD4Dyg.roa
Signing time: Fri 31 Mar 2023 07:14:54 +0000
ROA not before: Fri 31 Mar 2023 07:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:84:ef:a8:e1:c8:90:92:ef:01:02:73:b8:76:fd:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 07:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44d071525e28a2e528345974ab3cb05140f80f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:d2:74:d6:5d:74:dc:25:95:cb:ac:01:92:
f8:55:c9:e5:cd:9c:14:62:89:cf:ff:9f:41:f8:1b:
e5:ff:a1:4c:d6:75:99:94:58:9d:42:ad:da:12:c0:
af:e2:b3:22:75:32:19:ac:62:c3:1b:d1:59:4e:e2:
84:50:67:ec:ea:1c:c5:50:7d:57:73:73:f5:6d:a4:
ac:40:ee:f7:e8:15:2f:eb:0f:7e:cf:34:6e:40:e8:
0e:ef:f3:09:0e:d3:66:14:69:96:22:52:01:ac:aa:
f8:6d:3d:b1:70:93:27:63:c1:59:1a:aa:dd:9f:50:
7f:57:ce:5b:8c:d9:fa:56:ea:84:cc:9c:2d:67:51:
bb:70:e1:bd:e9:0e:0b:45:a5:26:f1:ca:37:e4:af:
cc:31:4f:39:75:ea:c7:bd:f8:5c:a9:0f:25:3d:b6:
2f:03:94:fc:8f:15:a4:4d:5a:60:32:5b:1b:b5:30:
62:95:5b:85:6a:e3:68:44:5c:66:92:73:09:2a:a1:
68:f6:78:ed:12:d4:39:50:97:46:d6:bf:96:71:81:
51:7a:f4:4a:df:39:a1:84:c0:6b:ba:65:36:df:01:
ae:b7:1a:1b:44:0f:55:d9:c8:47:a5:d6:7b:f2:11:
27:cc:66:91:5c:6e:76:dc:60:e2:60:b1:7a:7f:34:
7c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D0:71:52:5E:28:A2:E5:28:34:59:74:AB:3C:B0:51:40:F8:0F:28
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RNBxUl4oouUoNFl0qzywUUD4Dyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:75:bc:7e:63:a5:50:f5:05:5b:a7:c4:a5:b0:c3:89:eb:e6:
d1:ed:81:84:9d:f2:3c:b6:7b:7d:e1:d5:d6:2e:05:54:1d:9d:
c2:ff:7d:0b:36:67:62:74:66:1f:ad:0b:12:51:37:56:88:7c:
00:d0:de:4f:69:d1:cd:b9:1a:fb:95:a7:ff:f5:13:41:24:34:
fd:2e:bc:d9:d2:6b:58:10:ba:cc:7d:cd:6f:00:69:aa:60:95:
5d:18:fa:a4:08:9e:56:01:6d:82:e6:e9:a6:1a:ef:73:06:d4:
9b:58:e0:f7:0c:b2:3d:5e:51:63:3d:b0:8c:37:ac:50:14:8f:
fb:7a:fc:45:ed:5f:cc:53:dc:3f:65:84:90:48:ac:aa:81:87:
4f:0a:29:58:e8:b8:d2:42:bd:2a:ac:72:b8:b7:58:d7:33:7d:
9e:b1:c0:1c:9f:95:93:72:65:12:ec:95:e7:1e:36:10:66:b2:
d8:7a:de:d3:41:46:af:29:8c:f7:26:7a:fe:3b:5f:61:1e:fe:
df:9b:3b:20:93:17:3c:f2:df:ee:e6:b6:cc:e0:10:9c:ab:32:
53:c0:c9:8b:d4:99:8c:ed:a2:da:f9:7a:bd:56:39:8e:fc:d4:
15:8e:1d:2c:de:ef:88:76:b0:6e:ae:2b:36:f4:f5:df:bc:a1:
45:fc:30:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:28:45 2025 by rpki-client