Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RbcmSpNrkNpjvetkbOVBvdtOpcI.roa
File: RbcmSpNrkNpjvetkbOVBvdtOpcI.roa (raw, json)
Hash identifier: nsAAhHRtoSyZX8Nk+adZmqnA+y7/3kRDtxkQewFNUmM=
Subject key identifier: 45:B7:26:4A:93:6B:90:DA:63:BD:EB:64:6C:E5:41:BD:DB:4E:A5:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880AE993463D3C50AD3BE618FEF6169BE2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RbcmSpNrkNpjvetkbOVBvdtOpcI.roa
Signing time: Thu 11 May 2023 13:04:19 +0000
ROA not before: Thu 11 May 2023 13:04:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:188:ae9:820e/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:e9:93:46:3d:3c:50:ad:3b:e6:18:fe:f6:16:9b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 13:04:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45b7264a936b90da63bdeb646ce541bddb4ea5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:01:57:ca:e6:b4:ad:d2:6d:52:1f:6c:f9:73:
68:ed:8c:51:80:33:47:d5:ce:f1:df:f8:cb:97:5c:
7d:6d:64:9b:70:78:3c:48:b5:c6:fb:3b:fa:eb:cb:
d2:3a:32:3b:95:4d:92:ba:81:34:7b:4e:59:25:a9:
91:30:77:5a:68:8e:f8:74:ea:d8:31:f5:ee:56:e7:
9d:c0:6a:49:1d:51:aa:9a:a4:bc:ca:9f:77:5b:63:
4c:a4:75:47:55:1a:bf:bc:7b:80:55:ec:79:f5:62:
67:a6:8c:f6:be:c6:02:cd:3e:a4:1b:14:6a:a6:68:
9a:34:b0:28:62:c8:4e:38:3f:04:9a:fb:dc:12:8b:
93:44:d8:aa:4e:ca:26:db:8f:97:74:57:f2:75:68:
60:bc:d0:74:0a:ba:39:4b:80:1a:e4:fc:20:8f:27:
c4:24:d2:a0:53:2f:f6:c4:cb:90:e1:7f:c0:56:2f:
d2:ec:eb:de:6f:11:47:c1:83:a7:30:db:99:9c:21:
d5:f7:54:65:c2:d6:a1:da:dd:49:50:13:7e:08:94:
45:d2:cc:ab:c9:81:b4:43:f9:c9:08:b7:81:3c:11:
6b:08:f8:ef:0d:ce:98:bf:d9:cb:46:9c:d0:87:26:
6a:56:e2:9d:f3:e9:8f:a6:a2:c4:72:4c:04:df:bf:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B7:26:4A:93:6B:90:DA:63:BD:EB:64:6C:E5:41:BD:DB:4E:A5:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RbcmSpNrkNpjvetkbOVBvdtOpcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:eb:f0:80:64:aa:b3:e6:26:df:8a:40:d4:4d:78:d1:5f:a6:
64:f5:26:7f:10:36:da:18:a0:fe:e9:99:98:15:fe:38:40:28:
91:31:e8:a5:6a:58:ea:65:26:03:5b:3c:d2:35:14:3a:ef:7a:
05:6b:57:8b:25:2e:8c:b8:fc:3e:8e:eb:29:4d:32:f2:e2:66:
65:5c:d2:55:7d:e2:55:83:96:db:48:e4:f7:86:4d:c3:b1:b6:
97:93:66:dd:c6:b3:d2:99:cc:fa:e9:4d:c5:66:4f:6e:16:fe:
c2:10:63:aa:a3:e0:c8:c7:03:ff:64:c8:39:91:b9:43:99:86:
58:3f:19:1e:da:33:85:e1:85:32:df:46:eb:73:d0:5f:f7:81:
0a:0d:05:5d:38:19:12:e0:7c:2d:ba:e2:1f:74:a4:49:e7:2a:
c6:69:34:4b:84:da:73:47:2d:9d:b2:96:7a:ad:8f:fc:13:64:
7d:1e:6e:86:95:e0:1e:4f:7c:6f:df:9d:32:87:e3:bf:b1:30:
dd:de:8e:62:28:1a:a0:1e:38:37:6b:04:56:40:cd:d3:8f:80:
b3:56:ab:2c:c6:bc:b8:6c:64:f5:e6:0a:3f:13:b7:4f:6d:5a:
42:26:aa:23:a8:84:20:57:e7:33:32:42:12:0f:94:18:c8:3c:
b4:af:18:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:43:22 2025 by rpki-client