Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T0M5ZwY5-iUJiGuhAkmvJ3RZcgo.roa
File: T0M5ZwY5-iUJiGuhAkmvJ3RZcgo.roa (raw, json)
Hash identifier: BIQ8RJbXqw1oOWPNvJaSAQMOs+3/H46EWO9ti3iEE7M=
Subject key identifier: 4F:43:39:67:06:39:FA:25:09:88:6B:A1:02:49:AF:27:74:59:72:0A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A45A9520EBF5764F368FE573E9A20CDF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T0M5ZwY5-iUJiGuhAkmvJ3RZcgo.roa
Signing time: Sun 30 Jul 2023 01:12:27 +0000
ROA not before: Sun 30 Jul 2023 01:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a4:5a:95:20:eb:f5:76:4f:36:8f:e5:73:e9:a2:0c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 01:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f4339670639fa2509886ba10249af277459720a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:2d:7a:47:8e:6d:d3:89:69:76:79:e3:6b:
fc:cb:2e:72:54:04:3d:c7:5b:d3:84:f4:03:8f:c1:
9e:1a:31:ea:7b:c5:3a:94:41:52:ca:2b:75:19:05:
23:8f:f8:69:c5:cb:04:c1:c3:30:ba:6a:df:41:4f:
d3:0c:17:72:91:3d:90:28:e4:89:d3:0d:0e:37:c2:
74:5b:60:48:16:c7:99:22:b4:e3:cb:e5:9c:55:da:
df:c5:65:14:d3:ff:02:31:d5:8d:71:aa:ed:ca:a0:
0d:ad:18:d6:48:d5:52:1c:eb:2f:a3:00:de:ab:16:
93:a1:2e:60:17:f3:ff:6c:87:59:82:5f:bb:ea:fa:
fd:ed:e8:24:2c:23:bd:8d:35:d7:91:68:b4:c1:53:
4e:83:f8:0e:88:a7:3c:fa:ff:38:de:17:f9:be:39:
5a:57:45:f9:eb:65:32:c2:34:42:cc:bc:f7:ca:07:
68:19:07:26:7e:3a:09:57:ba:26:b6:09:aa:a3:79:
37:3d:ab:99:9e:7d:e4:57:78:10:15:19:19:e3:1e:
3f:30:42:0e:d1:df:08:32:75:2d:64:ba:1c:cc:a8:
02:fb:a5:19:bd:09:8e:41:c0:21:d9:e8:fa:3a:62:
18:fd:a8:bc:9e:67:5f:47:ea:d7:25:7c:1d:64:61:
ca:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:43:39:67:06:39:FA:25:09:88:6B:A1:02:49:AF:27:74:59:72:0A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T0M5ZwY5-iUJiGuhAkmvJ3RZcgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:27:55:20:08:01:59:de:f4:bf:a7:dd:25:83:59:29:b1:b1:
bf:74:30:5e:52:ba:eb:e6:31:04:59:28:d8:8c:d9:17:65:e5:
5f:4a:e0:24:d0:2d:6d:ea:a0:ba:8a:79:ff:9d:4b:ea:17:01:
47:e2:40:e0:f2:d7:89:68:00:22:fd:f5:d5:6c:11:d0:5d:69:
5d:00:77:87:1d:a6:f9:ae:46:71:86:46:86:4b:bf:92:99:3f:
bb:5d:f6:ec:d0:e4:6f:54:d0:39:6d:eb:f7:39:db:7c:fb:8e:
01:2a:92:26:1a:a4:70:42:4b:e8:7c:6d:c1:55:de:2c:48:39:
6d:e2:06:f5:b0:02:90:a5:10:4a:55:b8:fe:eb:0a:ed:05:cb:
e1:bb:75:35:46:8f:9e:11:7b:2c:c0:7f:8f:f4:44:28:c7:94:
0b:49:19:05:cc:b4:ef:fc:c0:17:f2:0f:b9:a1:f4:38:92:0a:
f1:7d:cc:83:36:43:09:77:79:38:ff:e2:a2:74:e0:d9:b5:ab:
e2:68:0e:6b:43:71:e4:2c:b4:ae:30:f0:e1:ac:ce:40:9f:1f:
19:57:f3:28:3f:b5:39:31:41:97:a8:a7:4a:7e:ac:60:d3:63:
3c:4c:e6:7b:d1:18:38:b7:1d:fc:68:e8:2a:f3:04:35:be:19:
c3:ca:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:13:36 2025 by rpki-client