Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SXc7d7U-mRtvtSzd-8r2Q0Qh1Oc.roa
File: SXc7d7U-mRtvtSzd-8r2Q0Qh1Oc.roa (raw, json)
Hash identifier: 8a1d8Ds70XpYAzTA/ICehAaraa87YwVPk4Q13MtBBXw=
Subject key identifier: 49:77:3B:77:B5:3E:99:1B:6F:B5:2C:DD:FB:CA:F6:43:44:21:D4:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A2EAE8D64931491E8E61DC99EBEB05C9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SXc7d7U-mRtvtSzd-8r2Q0Qh1Oc.roa
Signing time: Thu 02 Mar 2023 15:22:29 +0000
ROA not before: Thu 02 Mar 2023 15:22:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:ea:e8:d6:49:31:49:1e:8e:61:dc:99:eb:eb:05:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 15:22:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49773b77b53e991b6fb52cddfbcaf6434421d4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:3e:4d:bd:08:96:b7:9d:1f:1f:ca:d7:70:
c1:f1:c5:20:4d:66:77:f8:07:37:6d:c2:2f:79:76:
11:b8:3a:a2:0c:21:ed:71:01:79:8b:0d:a0:ac:77:
11:33:56:4a:13:a8:df:23:f9:2c:6e:bc:a0:e0:b6:
f7:29:b2:f6:8a:c9:6f:fb:69:6f:c0:23:9b:89:55:
42:06:b6:a5:2c:2d:ca:dd:10:8f:51:49:23:e8:7a:
3a:06:bc:e9:e6:a7:7e:4e:96:03:00:21:40:e2:87:
4f:61:a5:44:7d:b4:c4:89:7f:c1:b7:33:91:88:67:
75:a9:b0:db:52:bd:e8:32:67:ae:14:c0:4d:34:ed:
cf:2c:6f:d5:ec:1f:ec:65:e8:4c:7d:a3:18:93:20:
5c:52:18:8e:bc:fc:80:13:79:f8:ca:b1:dc:6c:1d:
c9:d2:c5:8c:64:15:4d:42:30:b7:68:f4:f2:82:0a:
88:e3:61:eb:13:5e:c0:c8:b9:26:66:56:d4:75:ce:
3d:f2:66:49:dd:78:8d:84:c3:84:2c:7e:00:ee:f3:
be:38:b8:a4:b7:5b:ad:f4:1e:ba:9d:7d:b3:90:a6:
07:b9:16:9a:fe:43:4c:25:b8:d6:eb:ef:d4:5f:eb:
b8:19:c7:02:4b:41:a9:b0:38:d1:dc:ce:f6:34:c8:
e4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:77:3B:77:B5:3E:99:1B:6F:B5:2C:DD:FB:CA:F6:43:44:21:D4:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SXc7d7U-mRtvtSzd-8r2Q0Qh1Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:7d:01:6d:29:d6:6b:92:fe:4f:9a:9b:03:14:a6:5e:a5:64:
d4:e5:54:ba:58:2a:b0:27:f6:21:c7:af:fb:e4:7c:0e:49:e6:
0e:0e:d3:85:5b:a1:67:e4:66:f8:4a:c5:c4:83:dc:d7:bb:02:
04:4c:11:5d:4c:62:88:4c:14:7b:e9:9e:da:eb:29:79:c0:23:
87:93:e3:24:23:a8:66:4a:1e:71:b1:17:47:dc:60:b5:eb:d6:
26:8e:00:50:e1:e6:33:f3:bd:34:d5:8d:68:72:23:b5:7a:99:
6c:82:9f:6b:32:15:b0:70:64:f9:53:1f:19:37:ec:c9:83:d6:
d6:cc:bb:93:92:8b:68:9f:85:99:30:63:67:17:47:41:29:52:
d3:e9:5e:0c:5f:83:f5:0c:84:59:9b:0b:32:71:9d:61:51:87:
7a:24:f9:0d:45:09:57:48:9c:43:2e:1c:95:f7:30:c3:ba:87:
a7:c3:f1:b9:cd:a9:b3:a1:3c:78:65:23:64:7e:23:b9:d0:96:
67:a5:25:6d:71:3f:1c:24:9c:ba:20:47:8f:70:b3:0a:27:9e:
a0:fb:bd:78:97:3a:11:89:b8:2e:17:04:06:db:39:32:36:97:
c9:a0:a1:ad:eb:df:4f:8e:ba:79:df:71:c3:6a:68:40:4c:1a:
0a:c3:57:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:59:30 2025 by rpki-client