Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SLC3zAonF4FySDtZM6FRKGNb-Ew.roa
File: SLC3zAonF4FySDtZM6FRKGNb-Ew.roa (raw, json)
Hash identifier: a854F115tkj8wkzVQBgnQ8qXGjNjjkVjvwEHrgMuzRE=
Subject key identifier: 48:B0:B7:CC:0A:27:17:81:72:48:3B:59:33:A1:51:28:63:5B:F8:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894E4E73EFD1F0F015B3DD5314017B9050
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SLC3zAonF4FySDtZM6FRKGNb-Ew.roa
Signing time: Thu 13 Jul 2023 08:11:51 +0000
ROA not before: Thu 13 Jul 2023 08:11:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:4e:73:ef:d1:f0:f0:15:b3:dd:53:14:01:7b:90:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 08:11:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48b0b7cc0a27178172483b5933a15128635bf84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:05:65:11:33:0f:ad:b1:91:ef:95:60:df:a6:
2d:ec:60:e2:64:8c:1a:db:37:90:7f:99:50:7f:79:
09:2c:4b:85:f3:6a:e6:b5:1e:85:43:5a:34:92:7d:
42:83:9b:63:f5:29:92:f9:97:19:49:67:94:03:b5:
d2:fd:33:15:5c:52:d7:e6:eb:63:2b:5b:a6:8a:2b:
92:e9:99:0c:75:12:71:34:af:67:e5:23:79:71:17:
8e:87:d4:f8:8a:1f:8e:3c:3d:60:68:dd:19:f5:d2:
82:3e:72:19:66:7d:11:22:d8:e8:0a:e8:c2:6d:44:
84:b9:bf:be:b0:44:b5:71:f1:1e:84:ba:3f:22:e3:
79:0a:93:fb:d2:23:33:f7:7e:db:4e:a2:71:e7:f5:
ac:00:ff:f2:b6:20:fa:5b:9d:df:4d:af:99:b1:b9:
9d:24:4c:62:5b:fa:3f:a8:e6:21:1c:ef:6e:10:c2:
b2:4c:b6:8c:7b:c8:de:9e:e4:11:fb:1c:2f:c6:66:
37:48:b0:40:79:0b:86:3a:54:b2:7e:6b:28:d6:61:
a0:12:51:0d:77:bb:9e:a3:6c:75:d5:c6:a0:70:bf:
56:84:6b:9c:80:fd:68:cd:9a:bb:b4:b5:bd:6b:18:
30:89:c1:4d:47:93:d6:f8:e7:c8:3a:ce:a7:59:81:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B0:B7:CC:0A:27:17:81:72:48:3B:59:33:A1:51:28:63:5B:F8:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SLC3zAonF4FySDtZM6FRKGNb-Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:86:d3:e2:54:73:b9:4f:3a:dd:31:43:07:58:ba:10:3c:56:
1d:0d:5a:36:93:57:31:7d:de:85:27:9d:16:61:75:b6:31:33:
41:fa:45:cc:9c:f3:cf:10:cd:e1:0c:b0:c2:73:0f:de:ed:ad:
eb:a1:41:72:18:70:f8:e8:17:f8:32:74:6f:5f:aa:8a:dd:a5:
91:e9:f2:64:d7:87:48:74:3d:c2:ad:b1:53:e3:10:02:b4:5d:
c1:96:f7:c7:09:ee:0b:03:34:38:19:cf:8d:e8:52:f9:bf:f2:
d9:96:58:20:d0:49:f9:97:72:43:68:c8:33:59:e2:f5:c6:f0:
a1:83:f5:eb:db:16:bc:4f:50:b2:8c:72:04:10:4f:49:1b:41:
29:1b:53:25:16:67:24:58:db:4e:80:57:28:ee:c4:52:80:43:
6d:75:47:cb:b8:8e:52:a6:34:9a:46:4e:99:18:a2:4a:7d:1b:
8f:2a:08:6f:12:32:52:86:d7:1f:54:9d:01:15:b6:a0:a7:27:
c9:51:11:24:08:7d:55:e7:30:97:a8:47:14:ed:79:ad:7a:5e:
d2:b0:ed:be:ab:99:0c:39:64:85:e8:9e:71:fc:69:a8:f6:c4:
35:5e:e9:01:9d:af:84:c5:ac:8a:57:b8:0a:57:14:17:d3:06:
e4:7d:0d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:24:33 2025 by rpki-client