Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RwUhXshY7kNuSjhftoiREGBMieI.roa
File: RwUhXshY7kNuSjhftoiREGBMieI.roa (raw, json)
Hash identifier: eF0RBugvKnCy6g+AZ6XNPXlaUFAPfjBGNCcUl2ogUA4=
Subject key identifier: 47:05:21:5E:C8:58:EE:43:6E:4A:38:5F:B6:88:91:10:60:4C:89:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887E23C17B922436FBAF7D775EFE5B8297
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RwUhXshY7kNuSjhftoiREGBMieI.roa
Signing time: Fri 02 Jun 2023 22:04:12 +0000
ROA not before: Fri 02 Jun 2023 22:04:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:7e23:bb21/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7e:23:c1:7b:92:24:36:fb:af:7d:77:5e:fe:5b:82:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 22:04:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4705215ec858ee436e4a385fb6889110604c89e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d7:7d:e2:99:84:45:86:91:97:35:bb:85:1e:
35:ba:fe:b8:0a:31:17:95:e8:d5:02:a9:9d:23:70:
45:cc:8a:a4:dd:2c:87:39:f5:9f:79:a7:43:f9:0b:
e6:c6:55:c4:fc:be:cf:72:08:b4:7f:3d:04:b1:b1:
bc:48:b2:98:80:ad:04:44:64:6f:f6:2c:96:b2:16:
b8:64:d8:bf:6d:2d:fa:f3:3d:ca:6a:b6:5b:39:97:
28:34:ec:d1:2e:00:01:61:10:ef:61:25:09:0d:54:
a2:d3:d6:a7:44:0c:62:9b:1d:f1:c0:a1:75:c5:2b:
66:af:85:f0:1f:cf:6a:f7:9e:26:9e:2a:f6:20:72:
29:6e:37:ac:e5:38:3b:1c:cd:49:94:c7:50:51:df:
85:41:83:f2:f9:bd:20:84:fa:ed:6b:94:17:07:2b:
1c:98:7e:d4:ab:43:b0:a6:28:9b:35:bf:b2:bb:e1:
3d:a2:f6:c1:d6:92:59:0b:23:7f:4d:c8:7d:5b:32:
0b:c4:0a:bd:0d:8d:a1:4d:54:e2:a5:46:c1:70:2f:
69:d3:20:cc:b2:4a:98:28:47:72:ed:39:00:26:61:
1c:c5:9a:01:93:f1:6a:bc:68:83:f6:a1:71:29:8c:
7a:1d:5e:d1:59:37:58:83:e3:3b:f0:36:c6:89:03:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:05:21:5E:C8:58:EE:43:6E:4A:38:5F:B6:88:91:10:60:4C:89:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RwUhXshY7kNuSjhftoiREGBMieI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:48:e7:ac:82:1f:91:47:56:c9:e8:9c:f0:1c:0c:93:2d:4b:
11:a0:e5:84:5e:be:48:08:de:7a:82:22:1b:08:dd:a2:9b:bc:
82:30:7f:e6:0c:98:a3:c2:21:3d:2f:e4:73:74:15:9f:78:17:
1c:c4:d6:76:62:69:a4:21:77:94:21:ef:e0:9c:fb:8c:76:78:
3b:72:b1:2f:b0:6b:07:4d:ec:aa:d9:8b:6b:88:01:c9:7b:52:
03:db:c0:6b:7a:fa:1d:cf:10:22:a3:e3:52:9f:18:ce:cb:d2:
19:0c:f8:1b:69:02:ca:14:2f:5e:f0:c4:72:b2:52:94:24:54:
23:51:d0:fa:ee:86:47:b1:40:14:30:2d:2c:c9:78:bd:f6:dc:
dc:6a:e0:c0:ae:38:c9:c7:85:7c:64:60:9d:a7:9e:eb:9e:f1:
2b:2f:af:bf:be:95:07:ec:ea:10:51:8d:19:c8:ad:dc:ec:82:
ff:ac:5a:68:1f:f8:62:b9:c8:d3:98:61:b8:2e:42:7c:21:ba:
4a:f9:0f:e0:df:1c:3b:e6:ef:68:7c:98:28:89:f3:49:4f:30:
17:8d:9d:fd:19:2e:9c:02:5f:55:fb:dc:76:78:42:12:bb:ad:
67:ba:6c:d0:92:35:ca:1c:52:6c:a7:82:5f:2c:21:05:88:4b:
93:fe:ba:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:12:02 2025 by rpki-client