Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RdPb71v2onmpJ0MRbGKglg6q5_A.roa
File: RdPb71v2onmpJ0MRbGKglg6q5_A.roa (raw, json)
Hash identifier: +7iHyOrowHQoOSpAiluvLBZOAGrQN0cVf1IfdPyld8g=
Subject key identifier: 45:D3:DB:EF:5B:F6:A2:79:A9:27:43:11:6C:62:A0:96:0E:AA:E7:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A199159543C7280D69CFC8EA2791E107
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RdPb71v2onmpJ0MRbGKglg6q5_A.roa
Signing time: Thu 02 Mar 2023 09:13:29 +0000
ROA not before: Thu 02 Mar 2023 09:13:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:99:15:95:43:c7:28:0d:69:cf:c8:ea:27:91:e1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 09:13:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45d3dbef5bf6a279a92743116c62a0960eaae7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:67:a3:df:d2:a9:26:83:ca:c5:be:c6:ac:
a9:fb:92:8d:6c:69:e2:c0:0e:21:26:81:fe:3c:99:
1d:f3:3e:bf:5d:55:32:15:90:a7:57:8b:95:70:59:
5c:43:85:e0:d1:15:29:52:09:5c:13:18:8e:d0:07:
94:da:ba:4e:bc:58:0b:85:aa:c6:a0:14:1a:d4:0a:
8f:9a:a7:03:72:f0:fa:88:0b:f8:ac:ed:3e:a5:d2:
cf:fa:ad:2e:c4:c7:0e:c3:21:62:0a:50:5f:f5:7e:
84:29:f2:29:13:1e:c9:02:7a:b1:2d:b1:10:d0:74:
c1:3e:16:d9:dd:61:d2:64:d2:70:bc:c6:bc:f9:ee:
5d:dd:9f:36:94:73:50:c9:82:6b:a8:07:21:4f:e5:
6d:79:b6:39:39:cf:80:bb:ff:cb:27:04:2a:c5:49:
ac:50:54:95:05:ba:95:7a:61:12:f7:81:b2:b5:91:
1b:df:15:42:24:a7:8b:90:cb:b1:72:7b:b4:2f:87:
3d:d9:31:14:c5:c6:bc:cb:31:5b:51:0f:0b:31:e8:
e1:8f:6a:eb:8a:6c:93:b3:82:32:bb:cc:9c:bf:cb:
26:9f:94:4e:56:22:9f:92:f3:cb:d8:76:3c:ee:26:
d3:3b:ca:1f:00:9a:c3:87:a4:53:42:10:0d:2a:95:
b5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D3:DB:EF:5B:F6:A2:79:A9:27:43:11:6C:62:A0:96:0E:AA:E7:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RdPb71v2onmpJ0MRbGKglg6q5_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:97:5d:3d:7c:a3:12:3d:2d:c4:83:a5:ff:24:72:14:d8:06:
8c:56:50:10:5e:96:8c:ba:93:79:c3:18:c3:23:55:aa:2e:91:
f7:31:48:9f:25:aa:a8:3b:44:5a:f4:94:07:71:26:f4:68:93:
c2:21:e2:5a:86:54:9f:49:00:1d:8f:07:f4:f3:fe:ea:83:c9:
6b:4b:a9:6b:d0:90:47:82:f6:20:26:8b:76:30:8f:27:31:18:
15:c1:88:65:ec:71:81:4e:04:84:9a:38:2b:2f:7f:9d:90:8a:
b3:39:1d:67:be:fb:10:40:71:8a:d1:a8:7a:d5:05:32:06:3a:
de:f2:e9:e2:31:85:6e:2f:d2:a3:6c:ac:b9:6c:9a:37:ed:9f:
f9:0f:a5:a0:6e:f6:c4:8b:7e:ef:28:01:11:ad:64:4c:c1:39:
21:c3:05:fd:c5:8d:81:d4:89:6b:f3:19:bc:39:b6:1e:6b:1e:
60:d5:52:9b:1b:eb:44:02:97:b1:ba:1e:4e:88:71:6e:9c:cd:
47:b0:f4:7e:c5:51:8e:f7:f0:e6:c7:ee:f6:96:10:e1:d1:35:
90:58:cf:d6:68:91:5b:fd:42:d8:44:c2:bb:3a:a4:3b:d6:dd:
81:bb:62:eb:92:ec:97:2f:c9:71:a8:9a:98:b4:22:38:cc:ee:
28:6f:e5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:31:43 2025 by rpki-client