Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RRgNLIachf7noLgyg10WYYMO_ag.roa
File: RRgNLIachf7noLgyg10WYYMO_ag.roa (raw, json)
Hash identifier: N/+GiKOXYEcBRjBSOZn9T054+Tg+UDOM4vLG8E9JIEg=
Subject key identifier: 45:18:0D:2C:86:9C:85:FE:E7:A0:B8:32:83:5D:16:61:83:0E:FD:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0D49092C8A7AFF4867D54AF83E73289A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RRgNLIachf7noLgyg10WYYMO_ag.roa
Signing time: Sat 19 Aug 2023 10:13:24 +0000
ROA not before: Sat 19 Aug 2023 10:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0d:49:09:2c:8a:7a:ff:48:67:d5:4a:f8:3e:73:28:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 10:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45180d2c869c85fee7a0b832835d1661830efda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:8b:29:8f:0b:1f:a6:f2:d2:bc:9d:b7:15:
e0:b9:05:1b:59:ef:0c:1b:63:f7:c2:f4:b2:be:74:
82:d3:96:12:18:a3:cf:ba:93:01:b2:5e:13:81:df:
50:c2:09:20:05:79:c8:da:bc:0d:17:ca:97:d0:10:
39:31:98:c0:d2:fc:41:07:6b:12:30:57:24:d2:6f:
e5:2e:51:6c:1e:a4:ac:e1:40:21:8c:c5:cf:27:40:
d4:97:fc:a5:e1:12:cc:ed:c4:d1:50:b3:62:55:ce:
28:ac:6a:f7:d5:ec:77:7e:71:3a:ae:79:97:65:3a:
3b:5b:56:c8:a8:de:39:21:e5:3d:30:87:6f:50:93:
43:34:59:bf:e2:2e:b1:8f:28:3d:12:da:18:aa:3a:
d5:08:a9:9e:50:5a:1d:64:5a:37:d4:ac:4a:3d:ca:
5a:ee:0f:00:1e:b9:e9:18:dc:54:19:f6:32:1d:c9:
5b:fc:c2:ab:e7:7d:e6:b8:10:66:ea:8d:fb:e9:f1:
17:99:26:8e:8f:80:94:e7:c8:da:b7:75:db:5a:2e:
98:cf:ec:48:79:71:58:fd:5a:d6:23:15:3a:d9:1f:
0f:c8:9c:33:7c:9a:6f:59:e6:2e:03:6e:95:44:ff:
a5:56:c9:23:ed:86:51:6b:70:7f:a4:d9:ba:b2:16:
87:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:18:0D:2C:86:9C:85:FE:E7:A0:B8:32:83:5D:16:61:83:0E:FD:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RRgNLIachf7noLgyg10WYYMO_ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:65:25:5a:b5:7f:c5:06:84:8e:93:69:41:d3:3d:5f:87:3a:
65:bc:ed:ba:00:c1:e9:c5:ea:c4:cd:79:02:14:e6:13:a6:63:
ed:e1:d8:c3:0d:dc:12:4e:1c:a6:28:6a:b8:10:da:f2:13:e3:
09:f9:ed:a8:1e:cd:48:39:69:3f:78:e1:10:c3:f5:7f:19:7b:
d1:ed:a9:7a:9c:9b:e8:5e:ad:eb:26:09:0a:72:3c:04:84:03:
4e:8b:d7:5b:85:f0:8d:b8:0f:a8:17:42:bc:fd:c6:60:96:ae:
b3:8d:f2:ef:00:46:a7:ac:08:4c:99:b2:09:4f:4c:1d:99:6d:
50:c2:a9:15:7f:e8:f9:24:8a:50:5b:47:8c:b7:fa:ed:23:5e:
12:84:08:f0:ae:42:f4:6c:e3:ae:86:ca:c7:35:d6:fd:2f:b2:
41:77:89:82:6c:36:e5:ca:8c:06:60:5e:b2:8c:7e:68:07:e7:
5a:c8:46:aa:34:35:14:0b:89:68:0f:85:a1:9f:ce:f5:bd:0b:
a6:36:41:44:a4:89:09:57:ab:a6:28:66:57:39:a8:16:36:57:
2c:ea:d8:c9:78:48:f1:26:91:9f:92:83:8e:9e:7e:62:c8:56:
35:5e:50:bb:57:40:97:f9:60:72:c8:f1:48:c2:e5:97:ea:89:
f6:13:4b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:24:21 2025 by rpki-client