Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RqBzl10URmxV9zIWIrhDu4fDkkQ.roa
File: RqBzl10URmxV9zIWIrhDu4fDkkQ.roa (raw, json)
Hash identifier: k4FnXCIQsjWq1oDSlzMBUoJnL9/3OhQp7/RTnMxWAcs=
Subject key identifier: 46:A0:73:97:5D:14:46:6C:55:F7:32:16:22:B8:43:BB:87:C3:92:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189940475293CDC5854A5226A18A4BA39DD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RqBzl10URmxV9zIWIrhDu4fDkkQ.roa
Signing time: Wed 26 Jul 2023 21:04:27 +0000
ROA not before: Wed 26 Jul 2023 21:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:9404:2d6b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:94:04:75:29:3c:dc:58:54:a5:22:6a:18:a4:ba:39:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 21:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46a073975d14466c55f7321622b843bb87c39244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b7:59:0e:a4:26:04:84:58:d2:5c:69:29:15:
4e:26:58:b2:83:55:12:37:86:bc:76:49:ae:8b:b4:
b4:a1:7e:ea:fa:e6:46:31:61:6f:50:d3:af:ee:ee:
a9:c4:14:05:00:57:21:ad:61:74:84:79:f4:82:10:
4b:84:ad:43:bc:1c:ef:9d:52:b5:3a:f5:00:87:7f:
53:81:cd:ab:39:33:fd:09:76:95:e4:76:63:93:6f:
e1:66:53:3d:59:52:2b:2e:a1:06:39:30:a4:c9:2e:
f5:37:74:dc:6f:36:c0:fa:c0:7b:6d:30:3e:d6:d9:
5a:b6:cb:10:e3:bb:ce:f9:16:50:a3:00:7f:0e:c2:
ef:89:76:65:d9:88:e7:f2:99:39:af:ce:3c:c9:fc:
7e:99:23:51:31:cb:f1:f0:02:2d:43:94:44:70:02:
95:ea:15:22:54:30:11:b0:f7:b0:6a:55:4d:6b:1f:
a7:11:b6:72:50:05:0c:7e:d9:d5:87:c8:9f:14:c5:
79:9b:5a:52:8b:85:bf:a6:b4:4f:d5:ff:ad:29:e9:
97:fd:84:24:ae:72:92:4f:0b:01:9c:9d:e5:02:ef:
72:2c:22:cb:29:3a:56:1a:1f:14:a9:b4:50:64:b1:
0d:5b:94:7b:0e:37:6d:7b:fa:b4:6e:01:72:1e:f0:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A0:73:97:5D:14:46:6C:55:F7:32:16:22:B8:43:BB:87:C3:92:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RqBzl10URmxV9zIWIrhDu4fDkkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:d9:96:dd:b7:56:14:21:29:bf:74:82:f5:31:4e:68:c9:16:
bd:ed:d0:52:33:c1:c2:45:4e:20:b7:78:f5:29:43:18:a6:44:
dd:22:0f:3e:08:6d:4a:0d:80:d5:8f:55:5d:26:7f:08:3c:c4:
0c:95:c2:f7:39:82:df:db:97:29:68:cd:74:42:af:ac:05:2c:
cc:22:8d:15:e2:f1:40:8d:57:5c:6d:5e:ba:06:cc:36:48:f2:
a2:83:6e:0f:14:bb:ad:f1:45:a0:f6:b3:b8:1d:21:f8:48:d8:
08:4d:e0:ca:ff:2a:6a:3c:93:2b:df:e3:4b:c2:14:47:ce:2d:
43:56:6b:d4:66:7a:ea:ef:42:a5:62:33:e8:e2:d8:e1:ac:93:
16:48:79:55:71:63:d5:22:52:a8:48:f6:ab:24:88:6d:f4:ba:
28:22:b1:4e:ba:2c:eb:23:3f:41:b1:1f:97:26:be:81:d7:0e:
1c:f5:9c:e2:a7:28:17:7f:29:90:4a:50:0d:1b:29:5b:ea:3a:
d9:9d:9f:ba:b1:c5:94:19:31:46:3f:4f:13:d9:df:5e:1f:93:
33:64:2c:04:3a:a7:c4:d3:9e:7d:dd:de:30:f5:53:d6:5a:87:
7d:c4:6c:eb:44:9f:f0:4c:ab:e5:2f:d2:ef:73:ce:1c:01:e9:
ca:de:0d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:20:12 2025 by rpki-client