Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SLPQflpAfFlTJG3IVWub3pxW7mI.roa
File: SLPQflpAfFlTJG3IVWub3pxW7mI.roa (raw, json)
Hash identifier: T1heITUSPHMi0MrZxwgndUdiiEW1dHCTNRllWpfTNT4=
Subject key identifier: 48:B3:D0:7E:5A:40:7C:59:53:24:6D:C8:55:6B:9B:DE:9C:56:EE:62
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874930E7B56D85F1DB4D605B2E7EC9B57B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SLPQflpAfFlTJG3IVWub3pxW7mI.roa
Signing time: Mon 03 Apr 2023 22:15:54 +0000
ROA not before: Mon 03 Apr 2023 22:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:49:30:e7:b5:6d:85:f1:db:4d:60:5b:2e:7e:c9:b5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 22:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48b3d07e5a407c5953246dc8556b9bde9c56ee62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:39:1e:93:f4:44:83:56:59:da:af:c0:62:88:
cc:6d:2d:3a:80:1f:7d:28:8b:fe:83:48:14:92:34:
6b:53:a3:30:28:15:2f:9b:03:69:06:c5:c3:f2:03:
6f:ca:79:06:fd:bb:fd:84:9d:ae:b3:99:4b:d4:ac:
a7:a8:9e:cd:9a:48:d1:f9:66:30:8a:ea:5e:41:12:
46:4d:da:55:23:2d:8a:bc:48:b1:4d:de:87:22:b7:
f0:c0:89:82:58:13:41:4d:42:3a:e7:a2:73:03:33:
94:94:3f:75:59:ff:76:72:5f:0e:e9:e4:ba:9f:0b:
37:18:89:53:40:b1:a5:fb:fd:06:61:4d:30:94:21:
20:8c:f8:88:10:bc:30:4c:31:c2:e0:39:d5:07:4b:
b3:59:a4:60:2a:da:63:bc:13:6d:aa:54:7c:7e:56:
39:ee:13:e1:76:f8:fb:84:23:1b:94:5a:38:dd:73:
df:28:40:49:4e:89:93:30:74:9e:dc:b3:da:19:e6:
31:31:db:22:e2:3e:4f:8f:a6:2d:76:39:11:ee:c0:
a7:80:84:ef:ac:86:bf:45:3f:8f:bf:7a:07:2a:8c:
4c:1f:33:05:d8:c3:8a:8d:94:12:cf:92:b9:39:97:
5a:52:b3:0c:a9:49:39:6f:fb:04:ce:6f:b2:57:4c:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B3:D0:7E:5A:40:7C:59:53:24:6D:C8:55:6B:9B:DE:9C:56:EE:62
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SLPQflpAfFlTJG3IVWub3pxW7mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:34:bf:c3:2f:cf:d8:fc:bb:75:47:f5:c8:ec:84:ba:bc:a6:
85:97:61:de:74:01:61:f2:3f:69:d5:fc:8e:0e:88:4b:b1:92:
29:71:73:03:07:0d:98:50:43:83:2e:23:8d:22:70:4b:c0:83:
27:e6:1c:3c:c1:03:e0:6d:b4:15:84:ab:5f:03:f3:59:72:59:
6c:7b:38:a2:40:d7:90:4e:ad:4b:61:6e:23:3f:5f:21:6a:34:
58:c1:65:8f:02:3e:28:4c:bd:b8:c8:32:ec:52:98:66:fd:7e:
ab:6f:3c:81:90:3d:f4:fc:1f:dc:d5:74:f9:07:9d:14:83:45:
0d:67:2e:59:c5:a5:4d:a5:7b:8f:84:6d:a1:58:a9:04:eb:34:
6e:ba:67:e5:5a:0a:aa:89:de:7b:b6:5f:96:05:3d:5d:be:8f:
5c:7c:00:03:e6:81:ee:22:4e:4c:a4:e6:46:42:ef:ae:eb:1e:
76:c4:8c:35:d4:5f:89:00:57:7e:11:2b:1d:33:76:df:1b:20:
e0:4b:8b:37:a1:d1:ea:7c:cf:6d:f2:08:41:56:34:12:18:96:
a1:d8:b4:82:34:e5:24:a2:00:45:69:64:8c:b7:a8:3a:e8:9d:
66:eb:1b:84:44:85:f9:a4:df:22:5d:31:fa:39:cd:1e:11:90:
fd:19:b9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:58 2025 by rpki-client