Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RTZr4xd0RU_P1C-lkhUFxi514Zk.roa
File: RTZr4xd0RU_P1C-lkhUFxi514Zk.roa (raw, json)
Hash identifier: r8mNmHHgVwl7FiqLfTDaY0EdyzvFo1ajOZKzsFWnV7M=
Subject key identifier: 45:36:6B:E3:17:74:45:4F:CF:D4:2F:A5:92:15:05:C6:2E:75:E1:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DF940EF5ED01AAE60E339FCA33247053
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RTZr4xd0RU_P1C-lkhUFxi514Zk.roa
Signing time: Tue 14 Mar 2023 10:04:27 +0000
ROA not before: Tue 14 Mar 2023 10:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:df93:d558/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:94:0e:f5:ed:01:aa:e6:0e:33:9f:ca:33:24:70:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 10:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45366be31774454fcfd42fa5921505c62e75e199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:7d:2f:72:e0:18:28:33:36:96:1f:b2:c0:
e4:69:2a:f3:0e:4b:8e:df:a3:0c:89:d4:c6:41:df:
bb:08:ba:38:c9:fe:f0:aa:53:fa:5a:87:91:c3:4a:
e6:ff:3b:c9:63:1b:ec:90:d8:cc:9f:a7:89:1b:bb:
6b:e6:cd:11:8c:60:dd:ab:7f:24:6d:fa:bb:1c:86:
06:c2:3f:e6:01:79:ac:ad:4a:b2:0e:c3:84:8a:d1:
df:fa:66:1e:c6:f5:74:c4:6b:7e:86:75:67:9b:40:
06:9e:d3:15:a2:28:41:1d:64:b3:5c:06:3b:b8:02:
7f:f3:c3:b5:1c:74:36:f1:82:bf:f0:06:3b:5a:20:
2d:84:f5:23:fe:b7:48:9a:f8:38:24:7d:90:4b:a9:
4a:a0:c4:5e:f1:80:d5:7a:e0:25:6f:67:11:a6:96:
21:bc:14:27:26:1e:fc:8a:8c:9c:4d:3d:ef:a5:e5:
46:87:ac:95:8d:d2:0c:e2:f5:85:04:d1:50:64:00:
3e:38:8f:03:2f:85:90:74:18:17:71:4b:28:81:48:
b5:ff:7f:1e:0b:11:8e:65:86:9c:77:81:30:ec:79:
a8:6a:d6:a5:ad:4c:59:b5:8d:03:ba:bf:f4:57:88:
1d:4c:cb:40:c7:5c:9c:0b:16:07:00:be:3e:4f:1b:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:36:6B:E3:17:74:45:4F:CF:D4:2F:A5:92:15:05:C6:2E:75:E1:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RTZr4xd0RU_P1C-lkhUFxi514Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:d8:68:e6:58:ec:d9:f5:ff:59:bd:04:b9:45:13:56:30:8d:
89:43:fd:65:4a:75:7e:a2:5c:3c:00:78:b3:2b:6e:e1:26:2c:
c6:e4:4a:e4:c1:17:2f:2f:2a:b9:cd:c4:42:e2:27:7a:d5:ab:
c3:b6:6a:5e:00:fe:e2:b9:2d:97:64:b2:9f:7c:e7:56:44:56:
21:6e:e0:89:20:03:fd:ef:6d:5e:6f:81:b7:2d:ff:18:f7:0a:
43:a3:ec:e8:6e:c1:f8:ac:3b:14:86:b9:ab:b6:b1:35:63:d6:
da:62:69:ae:97:9e:fd:7f:76:3f:7e:a5:a0:2b:89:fc:89:14:
a3:23:03:ac:d6:63:ef:cb:79:66:8b:e0:13:fa:54:a0:32:ab:
61:7c:7f:0e:5b:ed:41:d8:51:d6:95:3b:e7:cd:c5:6b:3c:01:
b4:ad:49:d6:c8:08:64:e0:ad:24:f6:cc:d2:84:92:2c:06:9d:
39:51:42:31:52:b3:7e:58:93:fa:00:51:07:ad:19:d1:e1:da:
f1:16:6a:56:b4:84:38:de:44:46:e5:87:13:29:86:1d:d8:8d:
47:b1:63:e3:f7:c5:34:c7:9d:32:99:67:d3:ee:c5:4d:7e:30:
7b:aa:a8:23:f3:c5:a8:22:3f:e1:00:83:67:30:59:c8:49:1f:
32:9e:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:05:34 2025 by rpki-client