Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rt-vpQZRE5WNvD6jVVmtFsnrvcI.roa
File: Rt-vpQZRE5WNvD6jVVmtFsnrvcI.roa (raw, json)
Hash identifier: QoaVO20e7n1+zH0Le+CjYQa4B5D+BWzDitTo74oZYRE=
Subject key identifier: 46:DF:AF:A5:06:51:13:95:8D:BC:3E:A3:55:59:AD:16:C9:EB:BD:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189673547EE295B836FAA02BDA71CDA5989
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rt-vpQZRE5WNvD6jVVmtFsnrvcI.roa
Signing time: Tue 18 Jul 2023 04:14:52 +0000
ROA not before: Tue 18 Jul 2023 04:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:67:35:47:ee:29:5b:83:6f:aa:02:bd:a7:1c:da:59:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 04:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46dfafa5065113958dbc3ea35559ad16c9ebbdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:52:08:c5:19:ed:b7:5e:09:97:e0:dd:7c:29:
07:ad:f9:67:bb:da:12:8c:4b:0f:63:98:69:6f:94:
fb:33:3f:f2:e4:4e:8e:67:81:86:cd:46:7d:a8:af:
d7:91:ea:35:a3:95:44:93:02:44:ef:b7:a1:75:7c:
97:48:c8:9d:88:ed:04:d7:0d:a4:63:b8:ff:af:b2:
5e:7b:3d:cc:ee:51:cf:17:c9:10:3a:a4:35:ed:53:
35:c9:3f:c9:7a:6e:c4:8f:b6:8f:9f:d2:82:39:c2:
f8:2d:c1:cd:1f:f0:8e:38:70:f8:15:99:85:d5:ea:
c9:7d:2d:4f:c2:b6:7a:a9:e9:bc:be:c9:30:0d:72:
19:18:76:9b:79:67:a6:15:5a:3e:3d:e5:b3:1e:6c:
37:25:4e:28:04:1f:9a:6f:ac:5b:db:38:4d:c1:b8:
b3:4f:a0:d9:46:95:1f:a5:cc:67:56:83:ad:3d:63:
c9:af:84:2f:86:df:4f:ff:f4:39:88:e8:e4:f0:ee:
93:cd:c5:e7:c0:61:df:9c:89:60:6a:82:d5:8b:a2:
42:c2:94:3f:52:13:f8:49:d4:eb:8f:45:d9:e0:2b:
df:82:3f:fc:e0:f4:3e:54:7e:7d:9e:06:42:52:76:
3b:02:47:5c:78:6d:9b:ab:03:e0:d0:f4:4e:d4:e0:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DF:AF:A5:06:51:13:95:8D:BC:3E:A3:55:59:AD:16:C9:EB:BD:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Rt-vpQZRE5WNvD6jVVmtFsnrvcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:a0:4a:90:3a:09:0d:6a:0c:67:b0:14:b9:c8:7d:25:cc:fe:
85:d1:41:2a:d6:59:25:82:3b:83:c7:5e:19:7b:b4:c9:c0:2a:
d0:bc:7a:59:14:7c:f4:2f:32:3e:4e:e7:83:d4:c2:32:08:6f:
06:5f:7b:99:70:01:90:5a:66:5f:0d:65:68:9a:2e:4f:e7:bc:
80:bf:61:5c:d5:72:ca:20:99:ca:fd:31:10:bd:8b:dc:03:d3:
91:34:b5:ac:7e:a1:c6:de:da:bd:08:87:ee:77:29:f7:63:4b:
2c:88:1a:c8:62:8b:1b:55:aa:b9:81:59:9d:1b:7f:6f:87:3b:
5d:ed:fb:97:a5:a3:76:e6:14:09:ee:5e:b5:c5:23:e7:3c:c5:
e2:ff:50:41:c7:bb:c4:6a:60:aa:aa:37:e6:cf:99:13:0e:ad:
1a:7d:5a:80:c2:4d:8b:eb:fe:47:fd:61:95:27:0d:88:bc:2d:
04:8f:b6:32:7c:23:e6:f3:86:12:fc:f9:9e:83:71:91:b3:7d:
66:69:3e:99:10:a8:3f:04:2e:d9:d5:b1:8e:ad:56:98:87:3f:
c1:0b:b6:75:9b:b1:b4:d7:17:8e:ae:65:e0:62:8a:5e:f4:6a:
05:3b:4d:d1:35:24:e2:a4:9d:74:22:9a:be:ee:c4:40:16:d2:
2d:ed:4e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:42 2025 by rpki-client