Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sl-B4_cHPs3Ntq_N6iUxswUgNGQ.roa
File: Sl-B4_cHPs3Ntq_N6iUxswUgNGQ.roa (raw, json)
Hash identifier: vAcVd2rKJALZb/9rkCnkybdO7ereB0PSqwNiv2+OkZ8=
Subject key identifier: 4A:5F:81:E3:F7:07:3E:CD:CD:B6:AF:CD:EA:25:31:B3:05:20:34:64
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886058B0AC5F326AE0906E6684983FA944
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sl-B4_cHPs3Ntq_N6iUxswUgNGQ.roa
Signing time: Sun 28 May 2023 03:13:25 +0000
ROA not before: Sun 28 May 2023 03:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:60:58:b0:ac:5f:32:6a:e0:90:6e:66:84:98:3f:a9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 03:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a5f81e3f7073ecdcdb6afcdea2531b305203464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7e:89:9a:6b:2e:55:cf:06:de:e8:54:93:fe:
a7:94:67:e0:d7:27:fb:42:9e:58:bb:6b:3d:5e:b0:
54:3e:cd:38:1c:3e:77:4b:1f:b1:25:0e:1f:50:44:
dd:fd:1f:e7:7d:8e:c0:d3:18:d3:be:d2:91:34:44:
ab:c6:d9:b2:aa:22:a2:70:d7:33:8c:f8:aa:7c:80:
3b:80:62:a8:c2:54:21:5e:91:5e:e3:cd:28:11:2a:
e3:5a:6f:01:75:f0:61:72:75:d8:5e:f9:e5:8f:aa:
7e:4d:39:9c:18:ca:5b:2f:03:13:b6:d9:3a:7d:56:
81:99:c6:c8:66:b3:62:f6:84:ed:fc:b0:e1:44:ef:
75:52:d6:da:f2:da:4a:3b:64:73:d7:48:dc:f9:6a:
e4:96:95:ac:d9:ec:c7:ae:d8:cd:3e:ef:be:83:98:
99:ce:4a:aa:d9:c7:b3:07:49:7a:05:89:43:19:32:
76:65:dc:bd:bf:59:a9:73:31:b7:56:43:43:3c:6c:
11:d7:c8:48:e2:37:f9:20:95:a7:2e:b9:6c:96:60:
51:e8:29:52:28:75:aa:d7:a5:d5:e2:b7:9c:15:d6:
5e:34:4b:36:5a:04:4c:8a:ed:8e:aa:d7:ea:0f:d6:
53:6e:62:18:44:85:ac:7e:5a:0c:28:4b:0f:8a:3b:
31:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5F:81:E3:F7:07:3E:CD:CD:B6:AF:CD:EA:25:31:B3:05:20:34:64
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Sl-B4_cHPs3Ntq_N6iUxswUgNGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:58:03:78:78:2f:62:06:b7:da:21:42:78:d7:04:73:3e:2a:
cf:fc:03:04:78:46:e0:c5:93:b8:d0:59:09:ff:5c:38:3c:cc:
1d:cd:15:c9:15:ba:15:d7:2b:1a:98:ca:bc:df:50:51:b6:73:
76:99:42:83:34:91:11:b4:08:ea:1a:33:d4:2a:69:03:8f:d5:
93:bc:41:2e:ad:bc:f7:9c:f9:c6:87:6f:18:65:40:b6:b4:d8:
5d:3d:ab:cf:6f:91:21:2a:7f:f4:18:37:75:aa:0c:31:74:61:
bb:e1:1a:b2:d8:ef:68:ad:a3:9e:90:30:e4:7f:b8:37:c6:4d:
c1:e4:7f:b7:a4:53:d3:50:65:79:d1:05:9a:50:f0:95:5a:b6:
62:6f:77:76:ad:a9:23:e2:ba:66:59:a7:d3:1b:37:b5:cd:72:
ca:87:9b:da:f0:47:43:9b:97:a5:e7:8e:52:b6:2e:c1:8e:1f:
b4:d0:46:21:1c:1d:82:0b:4e:fd:d4:c4:f1:02:63:a4:3d:77:
0a:0e:ea:bd:ba:53:b0:62:1b:e6:ea:22:03:97:f2:eb:49:b4:
7a:bf:e4:5d:7c:ec:e5:58:2d:40:3b:2d:c5:19:65:26:eb:0a:
46:4b:49:42:dc:dc:8a:60:b2:4c:38:2e:c2:07:15:cf:2a:31:
f8:5c:c4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:31:43 2025 by rpki-client