Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SVKDM7FBZIlyUq6YbZhyEGk3fXI.roa
File: SVKDM7FBZIlyUq6YbZhyEGk3fXI.roa (raw, json)
Hash identifier: vaqQOPT0/m7g5cqt0gXoq7zFfjiMa6XsIOtCtgSS9F8=
Subject key identifier: 49:52:83:33:B1:41:64:89:72:52:AE:98:6D:98:72:10:69:37:7D:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188183E819DD3FED2893B29CB77F3D6F96F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SVKDM7FBZIlyUq6YbZhyEGk3fXI.roa
Signing time: Sun 14 May 2023 03:12:09 +0000
ROA not before: Sun 14 May 2023 03:12:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:18:3e:81:9d:d3:fe:d2:89:3b:29:cb:77:f3:d6:f9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 14 03:12:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49528333b14164897252ae986d98721069377d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:9f:3e:ad:37:3e:b8:8c:0a:41:20:62:6b:
6f:43:66:4c:6a:b3:37:57:58:62:d3:ff:1e:32:fb:
6a:01:09:24:61:bc:e7:49:11:7a:e2:21:e4:c9:a7:
22:4e:28:9d:c7:db:18:69:c9:b0:ef:7c:fa:7d:0b:
2e:6c:3e:6e:29:60:e9:ff:f5:b5:09:4e:2e:fe:36:
d1:dc:8a:4e:89:41:e4:e3:bb:5b:d1:f4:1c:dc:91:
ed:d1:5c:82:96:4d:25:94:5b:ee:22:7c:c2:30:21:
ca:dc:aa:cb:ed:75:ae:81:cb:fb:32:01:e6:e3:4f:
54:56:16:37:71:d9:00:25:fb:25:41:32:6b:45:ea:
f9:c0:96:3e:e2:8c:e9:dd:0a:08:ce:1b:51:86:9c:
a1:a7:5e:9e:c4:c8:33:e1:f3:a2:71:ec:94:12:d3:
1b:22:3e:8d:63:84:11:aa:19:bf:62:c3:0f:e7:71:
b7:a5:be:0f:a1:ca:42:d8:b2:e9:db:73:9f:0c:b3:
fa:d3:43:51:60:a4:2c:d9:6b:ed:7e:76:3c:10:96:
e6:d3:fa:68:c9:9b:e8:60:5b:da:1b:73:a8:44:21:
a2:9a:56:73:ad:03:f6:fe:3b:89:10:81:47:9f:77:
18:f9:ec:03:53:71:49:07:bd:bd:61:d5:ac:38:d0:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:52:83:33:B1:41:64:89:72:52:AE:98:6D:98:72:10:69:37:7D:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SVKDM7FBZIlyUq6YbZhyEGk3fXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:92:9f:8c:3e:0f:8e:21:00:32:da:6e:9d:ca:cd:97:16:82:
00:f0:5c:25:48:77:b9:71:7d:a0:76:39:d7:b9:ab:61:61:99:
97:cd:03:2e:8b:f4:99:39:03:b5:dc:23:dd:c5:e6:9c:b1:b8:
be:40:b8:95:df:1e:cd:76:ea:5e:63:d8:00:97:4e:f2:51:52:
28:a6:9e:c9:23:02:b1:78:0e:5d:af:4f:23:a5:16:25:6e:4d:
81:24:d5:14:f8:f2:9a:08:61:84:a8:16:be:b9:7c:dc:ae:ea:
37:a6:25:5d:68:19:78:36:84:28:0c:b0:3f:2a:5b:2a:26:6d:
da:5d:7b:15:c3:f7:9c:64:ef:81:1c:f1:19:da:ae:8f:a6:61:
24:0a:82:fa:27:b9:3c:a2:26:be:1b:39:4d:1f:2e:06:c4:cd:
a4:43:0f:e2:55:29:a5:71:83:51:ee:46:cc:d3:45:00:18:e8:
33:16:f0:74:eb:ff:a5:5a:7d:d7:37:cd:91:6b:b3:9b:90:62:
d9:21:07:60:0e:35:84:3b:0c:1b:d7:59:aa:ed:57:82:83:27:
7f:3c:12:da:c9:e9:3f:b6:59:cd:4b:d3:3f:f2:de:b2:16:18:
32:7c:d0:48:e8:41:cd:a9:db:b7:32:a9:88:53:6a:44:47:ab:
1a:2e:c0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:35 2025 by rpki-client