Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rc-qb52yzM9QM1KDn3Tvcm0MQY8.roa
File: Rc-qb52yzM9QM1KDn3Tvcm0MQY8.roa (raw, json)
Hash identifier: 07XIInJS9ZisijpcwzNJsmiZzDtIGyo0bJKTQTsfGZw=
Subject key identifier: 45:CF:AA:6F:9D:B2:CC:CF:50:33:52:83:9F:74:EF:72:6D:0C:41:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870558061A26E39A4D249074730DA3AC67
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rc-qb52yzM9QM1KDn3Tvcm0MQY8.roa
Signing time: Tue 21 Mar 2023 18:04:27 +0000
ROA not before: Tue 21 Mar 2023 18:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:557:dfe7/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:05:58:06:1a:26:e3:9a:4d:24:90:74:73:0d:a3:ac:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 18:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45cfaa6f9db2cccf503352839f74ef726d0c418f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ae:7a:9b:47:18:a1:22:94:11:16:49:eb:48:
d7:f4:09:bd:7d:80:87:63:fc:bf:11:21:1b:0d:10:
e3:cb:86:9b:65:02:24:7c:42:8b:9a:04:26:df:2e:
5c:b7:a3:1e:6d:49:31:16:a7:d0:49:94:4f:26:05:
09:b8:c9:ba:da:af:4e:6b:9d:07:a4:46:d9:02:70:
cb:e1:14:15:aa:33:62:f9:85:43:41:83:6c:48:2c:
4a:59:53:6d:33:34:72:21:c9:4b:c5:83:3d:d5:79:
c8:94:34:65:27:2d:60:bb:eb:c6:5b:f9:91:f8:90:
9a:fa:df:1d:26:08:b9:a3:d1:74:69:0e:18:72:86:
0b:1d:ab:9f:bb:5c:69:e4:95:f3:2c:47:5d:e0:78:
38:ca:71:36:29:19:81:5b:15:4f:c9:c7:d0:19:34:
97:5a:56:9f:c7:cd:95:82:ff:d6:c5:fd:b1:32:cd:
25:6f:b5:eb:28:63:1b:89:40:c6:08:03:48:e5:85:
4c:34:f4:d9:a6:04:19:3e:e5:28:91:df:8a:6e:40:
03:1a:a5:f4:df:5a:a1:15:8e:ca:54:f9:1c:64:20:
b1:1c:c5:01:79:c0:f3:bb:18:00:9f:a4:83:19:3f:
e9:45:04:fd:3e:1c:95:7a:97:75:15:cf:0a:69:2a:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CF:AA:6F:9D:B2:CC:CF:50:33:52:83:9F:74:EF:72:6D:0C:41:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rc-qb52yzM9QM1KDn3Tvcm0MQY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:c3:5e:4e:b1:a7:0d:d7:82:1a:0c:eb:04:91:a0:20:fd:24:
10:ec:2a:62:1d:23:79:e9:c7:e5:73:c5:04:b7:2f:57:a6:e3:
51:69:9d:3c:de:ce:cd:90:a9:50:8c:25:4d:5a:ca:ee:7d:e0:
5e:b5:95:bd:bc:f9:ec:97:95:f6:b6:28:95:3b:9d:89:9b:09:
b8:13:c9:e0:34:13:7a:c2:e4:bf:d9:f5:a7:5a:72:17:42:50:
39:c6:31:a5:63:25:8a:d9:17:c4:98:74:9b:cf:70:0b:84:2f:
41:30:61:57:e9:78:7b:8a:f6:49:e7:3a:1c:ae:03:d1:cc:15:
bf:57:e7:fc:f3:2c:46:54:1c:87:f4:b9:a5:d5:b2:04:a4:4b:
97:33:21:53:f8:21:39:9a:64:74:af:e4:d8:69:b2:d2:4e:73:
fe:ff:0b:bb:24:22:0c:44:f5:f3:3e:ba:b5:9e:5b:14:de:81:
0f:73:d7:a1:c4:4a:04:73:59:fb:94:eb:58:54:56:6b:0c:d9:
03:f6:0d:3b:85:73:a9:83:d5:5a:56:fb:c5:ea:08:a3:62:d2:
b7:a6:b2:13:ea:2a:05:ca:a0:80:cc:43:72:50:5f:08:98:ad:
45:71:76:33:12:9c:0a:6e:e6:47:1c:3e:b7:59:de:ab:a8:1a:
05:fd:bb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:24:58 2025 by rpki-client