Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sct-rtU4TDuYjlF0Mvi7U1Yp70M.roa
File: Sct-rtU4TDuYjlF0Mvi7U1Yp70M.roa (raw, json)
Hash identifier: mH1p3MDsFLjRAHnVW5LZwXq3czEpFrehP5rBK2J89LU=
Subject key identifier: 49:CB:7E:AE:D5:38:4C:3B:98:8E:51:74:32:F8:BB:53:56:29:EF:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889B5748CE49ABF1D5BEB845EF81F139C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sct-rtU4TDuYjlF0Mvi7U1Yp70M.roa
Signing time: Thu 08 Jun 2023 14:09:28 +0000
ROA not before: Thu 08 Jun 2023 14:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9b:57:48:ce:49:ab:f1:d5:be:b8:45:ef:81:f1:39:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 14:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49cb7eaed5384c3b988e517432f8bb535629ef43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:4b:d1:51:94:b6:c6:b8:5c:4e:88:6d:2d:
f5:d9:d1:21:08:5e:85:80:6c:bb:13:35:72:d9:35:
b7:22:0b:cd:4b:17:de:c0:22:f3:1c:a7:c5:63:b0:
5f:34:d8:43:50:c4:61:b6:dc:c9:24:d6:f5:a6:85:
dc:09:b2:9f:93:2a:b4:dd:7d:21:7d:61:03:8e:ca:
c4:67:b6:f4:29:85:28:6f:20:e0:c9:3c:67:ab:f0:
ef:26:e4:42:30:2f:18:9a:5b:20:9d:0b:c2:1b:80:
85:c6:77:85:5b:76:95:02:2d:04:87:b2:7c:fe:2b:
3d:10:ff:31:b2:34:1b:74:52:13:36:db:7a:8b:01:
96:c8:7f:2a:fa:49:c9:d5:66:6f:03:0f:b4:7c:6d:
74:c1:47:24:e4:be:27:96:c6:bc:e3:f2:1d:6e:04:
a9:24:06:f5:43:92:1b:2c:ae:e2:2a:55:a6:67:d3:
df:02:9a:4d:c8:c3:85:42:79:08:10:75:51:80:0f:
2a:cb:91:1a:21:b2:2d:71:74:b2:22:82:b8:58:ca:
16:00:85:2a:e0:d3:ed:f0:a9:d1:e2:55:bf:2e:db:
da:e9:6d:46:49:47:cd:ef:d7:1f:aa:09:c4:92:a5:
7d:37:f4:9a:ed:f8:12:72:82:50:ff:b1:bd:1f:a5:
a3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CB:7E:AE:D5:38:4C:3B:98:8E:51:74:32:F8:BB:53:56:29:EF:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sct-rtU4TDuYjlF0Mvi7U1Yp70M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:bf:30:33:e0:94:de:b0:44:88:d4:27:c6:d7:14:38:e4:98:
af:10:af:b7:d5:a6:bc:3c:1c:71:1d:ba:a9:7e:45:f9:30:25:
de:e3:71:46:36:37:83:fd:da:0a:b9:0d:fc:e3:75:56:09:d8:
c4:3b:af:5d:37:02:7f:c5:41:bd:3e:58:22:6c:f1:87:7f:7d:
2f:c9:8b:4b:41:75:27:6b:9f:24:13:c8:97:bb:f8:a6:97:1a:
e0:85:2f:a8:e8:23:42:ee:a7:9d:1f:11:02:3c:ca:b7:32:e6:
60:9c:56:94:68:2d:44:af:29:70:01:6c:2c:ae:b5:37:07:6f:
3b:d5:98:79:2d:6b:46:7c:80:e5:6c:f0:82:e9:e1:88:ff:94:
47:cc:1a:d8:68:eb:97:a6:f4:c5:c9:ae:88:a1:e4:45:b6:6f:
d8:93:34:b1:4d:26:98:ac:c0:72:02:a4:be:1b:74:91:50:b9:
f1:ab:a0:22:35:8f:08:15:1f:f2:c2:92:d9:83:b4:a1:71:48:
c0:29:22:ef:eb:68:a5:20:46:39:eb:60:69:1c:43:3d:fc:d8:
0e:57:a7:f5:6a:fc:a7:ca:c5:da:22:a9:b7:e2:15:2d:3c:61:
58:1b:98:b7:42:2f:64:ad:61:f9:01:5d:cc:e3:98:a8:de:75:
5d:3b:5b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:36:17 2025 by rpki-client