Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rdnu7-Lok9xG8gnCvmf7QqwuQE8.roa
File: Rdnu7-Lok9xG8gnCvmf7QqwuQE8.roa (raw, json)
Hash identifier: A7ysJqJSbmJ+u9hSTeVEiQyIP7J2RGgs13fuk1tnQpM=
Subject key identifier: 45:D9:EE:EF:E2:E8:93:DC:46:F2:09:C2:BE:67:FB:42:AC:2E:40:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894AE160386C77DFB29CAB4AA33DB8D497
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rdnu7-Lok9xG8gnCvmf7QqwuQE8.roa
Signing time: Wed 12 Jul 2023 16:13:51 +0000
ROA not before: Wed 12 Jul 2023 16:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:e1:60:38:6c:77:df:b2:9c:ab:4a:a3:3d:b8:d4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 16:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45d9eeefe2e893dc46f209c2be67fb42ac2e404f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:b7:d8:ca:80:69:af:15:8c:22:1c:40:eb:
a9:59:d8:28:c3:7c:28:d5:f8:6c:f2:d4:01:82:de:
e8:27:86:28:ae:48:f6:94:8c:3d:b7:64:09:c2:c5:
7b:63:67:d4:5b:95:10:ac:c8:01:90:3a:78:c5:67:
e1:aa:12:94:6c:7b:64:4e:4e:cf:8a:a8:da:8e:a8:
55:22:a0:82:98:72:44:ac:df:2c:59:af:27:8b:d2:
21:73:ae:db:17:2e:6a:0c:fa:92:83:98:54:8e:ae:
82:a1:1d:82:22:05:38:60:ed:40:ab:de:ab:0d:61:
2d:42:4e:02:43:c7:4a:88:bd:25:6c:5e:70:ea:40:
f8:bb:10:91:53:dd:90:0f:24:ee:47:72:7f:93:a3:
4e:e7:3f:0c:15:eb:91:84:6d:51:9b:53:84:e7:bc:
ef:d7:86:34:94:7d:95:4d:47:6b:09:2c:6a:e1:20:
73:1e:7e:d2:23:da:c4:07:8d:40:04:38:e7:0e:41:
de:f4:5c:12:6a:2d:dd:a8:3d:39:62:1e:48:21:42:
fb:86:8c:10:36:88:d7:2b:b4:dc:c8:dd:4c:3c:31:
a4:bf:be:87:bf:ba:d1:40:f6:16:da:a7:1f:40:e4:
6c:06:51:e7:37:cd:bf:cf:7b:60:d5:9e:bf:76:7e:
64:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D9:EE:EF:E2:E8:93:DC:46:F2:09:C2:BE:67:FB:42:AC:2E:40:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rdnu7-Lok9xG8gnCvmf7QqwuQE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:94:e8:b6:6e:b6:1b:a3:3c:85:65:1d:f8:e4:a0:3a:5f:0f:
89:24:ba:ee:a6:12:e7:a3:76:6e:48:82:2b:ff:13:21:0b:e2:
f1:0a:8e:e0:f6:a8:13:80:d4:1e:de:8d:3b:41:3d:a6:b8:1c:
3f:fc:c2:04:f0:29:55:65:cc:69:43:89:36:9a:0b:94:5f:10:
3f:09:e4:15:2a:6e:3c:5f:24:33:a6:7f:b6:2b:07:0d:f6:d2:
75:7a:a4:23:56:2b:05:77:d8:5c:3b:a1:84:be:7c:03:2e:cc:
47:b3:c6:0b:a0:18:ab:d3:79:95:87:50:69:c6:4f:c8:00:4e:
1b:ba:b6:e8:fb:6b:88:f7:9e:63:27:3a:0a:3a:5f:c4:4f:37:
9c:d6:5c:5d:f1:d6:6e:ff:cf:53:7a:43:a8:d2:69:89:d1:3b:
c2:53:f3:3e:a2:57:f5:5c:d5:72:b2:bc:f2:ee:16:cf:0d:05:
07:72:76:37:48:5b:90:4e:23:d8:44:1d:32:cf:02:23:7c:eb:
53:50:b6:67:46:30:b3:4b:e9:3a:9b:29:61:0e:78:13:7e:25:
d0:c9:4f:fd:57:0e:c1:91:32:ed:61:10:98:bc:26:9b:f5:3e:
f0:d7:b6:b4:5c:71:81:9b:bc:83:4a:d7:26:9a:a7:a6:0a:2c:
97:cc:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:17:18 2025 by rpki-client