Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SpS0i1gSMcpCiYCAt0RwUCvl8iA.roa
File: SpS0i1gSMcpCiYCAt0RwUCvl8iA.roa (raw, json)
Hash identifier: QjIyr87OgiULmRDHa3cEPJE0jTU8jqs7YxF1tIEdPVk=
Subject key identifier: 4A:94:B4:8B:58:12:31:CA:42:89:80:80:B7:44:70:50:2B:E5:F2:20
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185909FFEB93DFF98784C16BF44D1103FCE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SpS0i1gSMcpCiYCAt0RwUCvl8iA.roa
Signing time: Sun 08 Jan 2023 09:04:42 +0000
ROA not before: Sun 08 Jan 2023 09:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:909f:959c/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:90:9f:fe:b9:3d:ff:98:78:4c:16:bf:44:d1:10:3f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 8 09:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a94b48b581231ca42898080b74470502be5f220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:63:e8:ba:a9:c5:e2:19:de:ba:bf:5d:e6:91:
44:31:41:54:66:12:38:1b:d6:19:2d:0c:45:c4:56:
ab:a4:7f:42:60:66:f1:10:11:09:d3:25:95:c4:26:
9b:0e:df:50:2d:9b:65:f6:a5:f4:a0:8d:48:6a:5e:
db:53:58:13:56:57:c6:ce:0f:34:7e:9f:63:34:73:
a9:a1:05:91:a0:11:e2:64:1a:96:71:28:00:8d:16:
5d:23:b0:8f:a0:27:5d:99:0a:65:34:36:70:91:ae:
94:96:f4:b0:6e:2f:da:8f:18:de:7b:be:c0:4e:9d:
92:59:66:ab:7b:04:13:a0:ff:a2:4b:1b:ba:8f:eb:
bd:38:d1:0b:23:71:c3:c0:bf:36:7c:7d:30:0e:57:
8b:6d:e2:b6:11:86:af:5f:12:0e:03:8b:b8:bc:c8:
86:4c:2f:6e:df:7c:a4:41:b9:73:e8:c4:6d:06:af:
3b:b0:39:41:d7:fe:f7:ab:03:86:a9:81:56:af:b4:
e1:d4:56:53:63:85:3d:9d:e6:5e:2e:a2:ec:20:62:
4d:7d:bf:8c:1f:f8:64:26:14:d4:6d:9f:7e:b9:dd:
bd:d8:37:0d:af:1c:0f:b5:9d:b4:97:ac:27:18:e6:
b0:53:60:db:f7:c4:d1:28:cc:6e:f2:8b:a0:9a:8b:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:B4:8B:58:12:31:CA:42:89:80:80:B7:44:70:50:2B:E5:F2:20
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SpS0i1gSMcpCiYCAt0RwUCvl8iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:da:2e:99:f7:68:a6:c8:20:6e:92:fd:86:36:f0:a8:b8:f9:
71:9d:4b:4b:03:13:7b:12:84:cb:22:e8:ea:d0:71:c8:47:0a:
d1:36:ee:40:37:ce:9e:49:ae:39:24:b7:f0:00:86:74:fe:90:
cc:d1:66:24:33:2e:86:40:56:17:7b:2a:f2:68:c7:bd:11:c3:
2b:91:19:b7:18:a3:3e:70:6d:e8:64:6c:56:ed:12:1b:99:6e:
b5:12:bf:b7:71:c6:c4:8f:43:16:77:3c:15:e3:10:c0:5e:8b:
69:67:e3:0a:fd:3c:12:69:d7:ab:ea:39:9e:d9:90:77:54:e7:
57:4b:d5:f7:22:52:9b:c9:ba:1c:ce:98:71:81:3d:62:0e:f7:
20:95:07:6a:19:a6:8b:4a:3d:49:2c:da:c8:84:93:79:e7:9c:
a0:2c:97:e6:21:cc:66:e8:a9:d5:99:bd:26:0e:ae:29:fc:46:
28:2a:bb:cd:fd:54:a7:c8:18:fc:4e:bc:7e:59:d3:6d:ca:69:
72:a8:e8:af:82:14:1a:d3:8f:b3:29:21:21:42:48:fe:c5:9c:
d1:ee:be:7c:2b:97:76:2f:54:0a:db:d1:ab:7d:35:75:90:13:
f1:05:23:9f:dd:35:87:df:44:e5:b4:c4:42:1b:ab:7f:82:03:
5b:f6:e0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:49:34 2025 by rpki-client