Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RQk2hEVEp-NsfPuyW3eZl7woVik.roa
File: RQk2hEVEp-NsfPuyW3eZl7woVik.roa (raw, json)
Hash identifier: pRUaE3g95G7PR8505FoL/Psg17CGSJu/q3kWkijCI2s=
Subject key identifier: 45:09:36:84:45:44:A7:E3:6C:7C:FB:B2:5B:77:99:97:BC:28:56:29
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E672EBEED002167D2956F64A97B057D7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RQk2hEVEp-NsfPuyW3eZl7woVik.roa
Signing time: Fri 11 Aug 2023 21:13:58 +0000
ROA not before: Fri 11 Aug 2023 21:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e6:72:eb:ee:d0:02:16:7d:29:56:f6:4a:97:b0:57:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 21:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=450936844544a7e36c7cfbb25b779997bc285629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:1f:c4:da:1d:1b:ff:c1:37:9f:25:f1:9d:
0a:4d:2e:49:35:10:2c:f2:05:44:8b:43:4a:a4:d1:
bc:09:8b:c4:11:0c:8d:8c:e0:61:72:19:60:4c:d1:
4d:37:34:e0:86:ce:86:da:9e:d6:fe:71:ad:b9:6e:
b1:7d:21:05:7e:9a:62:c8:9e:39:c5:56:6b:78:90:
b3:4e:16:c6:60:01:13:53:3a:25:0d:2d:1a:d6:f6:
d2:a9:71:51:d9:12:44:d9:73:5c:a2:95:33:99:5b:
db:c0:61:2c:a4:27:25:4d:45:c3:5a:fa:de:05:2a:
1a:bf:49:9e:ed:55:7f:98:52:26:5d:a8:a9:97:50:
06:4c:90:36:f0:17:e7:c3:9d:36:d0:8b:cc:05:11:
a4:4b:fe:2f:25:85:05:e3:4a:55:bc:70:bf:a4:79:
88:8a:a3:5b:d8:07:a3:ce:89:d2:61:a3:ef:99:66:
e1:d2:de:66:1a:d8:fc:08:e0:39:c7:50:60:b0:c6:
90:6a:d4:3f:82:4f:e1:aa:b9:50:85:31:2f:9d:ab:
75:45:48:81:8a:32:52:76:5d:44:f8:9b:0e:54:e6:
96:84:36:03:97:14:d0:3b:0a:ea:56:a8:26:e2:9d:
91:38:42:37:2f:7c:c1:88:10:ed:61:86:a4:a7:fe:
f2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:09:36:84:45:44:A7:E3:6C:7C:FB:B2:5B:77:99:97:BC:28:56:29
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RQk2hEVEp-NsfPuyW3eZl7woVik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:c5:24:ae:4c:d1:d9:21:62:34:d3:de:a8:cd:1a:8d:3d:73:
a5:0a:b3:5b:00:17:1e:70:06:e5:bd:88:cb:4d:70:57:d0:60:
ca:53:0f:76:1e:be:67:6a:8c:4e:99:e7:2b:12:e7:ac:14:45:
00:a1:f2:1e:df:19:a2:1b:bc:20:a4:ea:98:7b:cf:af:6f:b2:
74:d1:56:03:15:4a:fe:c0:76:37:0c:e0:2f:7d:c1:59:62:84:
51:2a:c9:14:2a:65:2d:b8:75:3d:28:f5:3a:0d:44:34:60:26:
54:a8:2b:a6:23:51:f0:cc:20:9e:b5:94:cf:55:3c:3f:5b:56:
4e:df:15:cd:b8:f8:c9:5d:89:15:82:65:5d:45:b6:1a:c9:69:
ce:0a:a0:94:38:0d:8a:4d:9b:5a:61:bc:e1:ae:f3:33:98:59:
f8:19:af:34:f5:56:19:1f:72:17:71:1c:c6:70:53:86:eb:d1:
6d:25:93:f4:c8:6e:e4:66:44:70:64:07:6f:06:8a:cb:7e:9c:
1e:d7:55:ee:7f:ad:a4:c6:bb:99:9e:f4:f8:16:07:3b:7b:31:
b4:36:3c:eb:7a:a1:5c:a7:79:75:4a:aa:9f:c2:66:3f:a9:45:
27:fa:cb:d3:04:e4:8b:17:dc:6a:b3:7f:28:3a:08:92:75:50:
63:7d:a1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:23:13 2025 by rpki-client