Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SeiCpypTNvp2DMsemulb_TQLhhI.roa
File: SeiCpypTNvp2DMsemulb_TQLhhI.roa (raw, json)
Hash identifier: 64Y0SH4OdVbYowYnys9L7vxrGAN+gMLzeC02n1rhu0c=
Subject key identifier: 49:E8:82:A7:2A:53:36:FA:76:0C:CB:1E:9A:E9:5B:FD:34:0B:86:12
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EFE2149B3607C04A81253CA7640A263C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SeiCpypTNvp2DMsemulb_TQLhhI.roa
Signing time: Sun 13 Aug 2023 17:11:58 +0000
ROA not before: Sun 13 Aug 2023 17:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ef:e2:14:9b:36:07:c0:4a:81:25:3c:a7:64:0a:26:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 17:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49e882a72a5336fa760ccb1e9ae95bfd340b8612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c8:ee:a3:c0:35:7d:97:79:29:18:6b:a4:c6:
33:5f:da:e5:6c:ed:28:e1:2e:34:24:b3:46:02:84:
5e:c1:72:83:e2:6d:83:81:07:01:1c:2b:11:0a:6c:
32:8d:3f:d3:f0:96:15:47:37:30:9f:c9:05:f5:2b:
3e:d2:e4:16:e4:e5:1b:b5:68:2b:81:71:59:d1:35:
3a:57:f9:06:3f:66:6d:ca:fe:86:87:d1:bc:72:fc:
28:92:18:0b:d0:12:7f:9a:8e:1e:54:f3:ca:57:83:
65:40:8a:f2:4f:22:bf:a1:ca:77:6e:0f:c8:86:4e:
5c:a5:e1:27:0b:e6:52:6f:f8:2b:4d:9d:e5:5f:a9:
3b:09:94:23:47:dc:c8:f1:8b:55:9f:74:dc:3f:6a:
3e:dc:57:4c:c7:9e:fa:9e:ab:5f:92:e1:c1:f7:cb:
e9:87:1f:6e:1f:be:3c:35:a2:e7:05:83:ce:7d:e0:
74:b7:5d:ea:97:37:53:ee:09:4e:3b:39:a6:c9:70:
2b:26:3b:a0:3e:46:62:9a:c5:d3:5c:ec:8b:99:27:
35:2d:36:18:57:ee:f6:e2:4b:ab:fe:7f:b1:b6:dd:
1d:a0:ec:2e:26:3d:59:c2:5a:06:71:9e:0c:a5:17:
5e:d3:f7:06:0e:41:92:69:d4:76:0c:f9:dc:0b:9e:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E8:82:A7:2A:53:36:FA:76:0C:CB:1E:9A:E9:5B:FD:34:0B:86:12
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SeiCpypTNvp2DMsemulb_TQLhhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:e5:4d:e5:25:1a:59:24:4e:70:e1:8f:21:f4:b0:07:05:46:
2f:fb:5e:10:f2:87:03:df:2d:d0:1b:6e:e2:b1:33:ef:7f:83:
01:a3:6b:56:7a:06:4f:af:ac:6d:3c:09:e0:d1:25:f6:ae:c5:
7f:f1:97:05:ea:3b:fd:22:aa:68:88:26:e9:14:ca:8d:9d:36:
54:e7:61:ed:75:e4:ca:1e:ad:2b:52:80:17:f9:3a:10:53:1e:
b0:fa:35:36:39:6c:65:97:ad:e3:fa:f2:05:55:53:43:60:c8:
57:a0:b1:86:4d:fd:f8:45:4d:71:25:30:46:ce:95:da:cc:b3:
0d:d8:25:66:53:2c:39:82:88:ad:0b:cb:37:d0:c5:6b:44:f4:
9c:b2:ea:f8:25:70:43:e8:63:43:1a:76:ad:74:f0:b8:56:f8:
c5:d5:01:81:80:8c:fc:dc:08:d2:65:b9:69:4a:d3:61:0e:98:
5b:fe:06:54:30:83:05:8e:20:59:67:1c:80:52:b7:34:f6:e1:
d9:01:5f:20:4e:26:20:cf:53:25:c0:9c:d3:da:a4:c7:c1:34:
73:ae:bd:6c:43:73:5d:a2:d3:a9:b9:d9:ab:90:87:db:4b:7e:
4b:ae:db:ff:ee:98:87:8e:4e:cc:48:f9:a0:49:92:32:bc:05:
f6:51:54:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:30:09 2025 by rpki-client