Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rg7Xt8BSefViGMl3faYRihqloek.roa
File: Rg7Xt8BSefViGMl3faYRihqloek.roa (raw, json)
Hash identifier: s7Azk8q/6q8qiM9NZrDU6uQVCUmLmnKBYuYtylfuukk=
Subject key identifier: 46:0E:D7:B7:C0:52:79:F5:62:18:C9:77:7D:A6:11:8A:1A:A5:A1:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869A55CA856884287126E7B886E2B38355
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rg7Xt8BSefViGMl3faYRihqloek.roa
Signing time: Tue 28 Feb 2023 23:22:38 +0000
ROA not before: Tue 28 Feb 2023 23:22:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9a:55:ca:85:68:84:28:71:26:e7:b8:86:e2:b3:83:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 23:22:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=460ed7b7c05279f56218c9777da6118a1aa5a1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:b7:c8:a8:86:ff:e4:08:2e:e1:f9:ed:55:
8b:f9:9f:58:23:ea:3e:0d:01:f1:fc:9d:12:ce:a0:
2f:5b:bd:16:e4:3c:17:19:99:a7:06:19:68:aa:00:
0f:d0:e5:e6:f0:bd:cd:78:6d:45:c4:6a:cc:10:8e:
dd:25:16:03:e0:6d:1a:b1:e8:e1:31:b0:9b:25:66:
ad:04:57:59:de:7c:d1:19:ee:c1:07:03:5b:18:05:
df:db:20:ba:cf:ff:2b:d3:39:c8:9f:25:5e:19:e8:
37:7f:df:c7:0d:27:44:28:86:6d:1c:be:db:2b:7c:
dc:8c:51:24:d6:54:6b:cd:29:d7:05:45:10:50:05:
f8:7f:04:0e:43:bb:97:fd:87:1b:b9:d3:a5:95:67:
c5:29:b9:ba:cc:fc:ab:04:6f:83:c5:da:2e:31:33:
b9:34:c2:80:5b:ba:d7:c3:66:53:11:21:9c:61:2a:
5d:38:11:d3:11:11:1b:0c:b9:9f:51:ac:9d:14:96:
c9:27:0f:3e:d9:bd:a1:43:3a:4b:c4:61:54:a3:f0:
56:1b:7a:dd:05:a1:35:70:d7:11:b4:95:89:35:6f:
20:7e:7e:08:39:8d:74:32:76:f2:0d:22:12:80:87:
93:7d:29:89:21:b0:b0:6a:3c:cc:72:49:49:6e:b7:
31:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0E:D7:B7:C0:52:79:F5:62:18:C9:77:7D:A6:11:8A:1A:A5:A1:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rg7Xt8BSefViGMl3faYRihqloek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:21:45:1d:f9:fe:44:7b:82:04:6b:ac:32:c0:40:29:9e:05:
25:20:ec:cf:c2:aa:22:cf:67:1c:86:cd:02:6e:9e:ea:41:be:
df:c6:1d:f3:e4:20:a6:3e:ff:40:52:c9:d8:cc:ef:d1:9c:fc:
6f:9c:e6:11:43:dc:68:bb:12:2e:49:89:21:dd:8a:d8:8a:d4:
8b:2a:f7:12:f9:49:5c:48:0a:34:30:bb:73:0e:4d:9c:63:aa:
59:c5:1c:bd:a9:26:f9:7e:6a:f4:4b:12:16:a7:48:34:92:fa:
f2:c1:45:35:fc:37:f1:af:a1:36:df:04:17:4e:55:2c:09:0c:
86:db:b5:31:c2:0b:bf:56:9f:cc:fa:0b:cc:00:8d:03:15:da:
99:63:17:96:23:50:71:ee:6f:ef:73:1c:27:4d:54:f7:e6:a2:
ac:d7:23:3a:27:c5:bf:1e:1f:10:14:14:c3:66:ba:01:a8:8c:
a5:28:0a:ae:d6:84:d3:84:66:90:62:10:d0:a6:9a:cf:06:ac:
2f:cd:35:08:01:f7:15:da:80:d5:4e:03:47:1d:33:6c:2c:ce:
d2:db:8b:2d:a4:fb:36:a8:c5:9c:78:fd:6b:ec:58:15:fe:04:
1f:68:72:9a:0a:35:16:10:91:cd:54:73:ce:bc:e9:76:29:6f:
c4:da:d7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:43 2025 by rpki-client