Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T8u4UtG7TLAt_EvwjKQgJ5VVZoA.roa
File: T8u4UtG7TLAt_EvwjKQgJ5VVZoA.roa (raw, json)
Hash identifier: sPIWKsS/pbJm5c3M3ww/y8LIcGtCSRV5DUjn1dmzRkw=
Subject key identifier: 4F:CB:B8:52:D1:BB:4C:B0:2D:FC:4B:F0:8C:A4:20:27:95:55:66:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018949CFCD8922EE421CA898210ECB79E20E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T8u4UtG7TLAt_EvwjKQgJ5VVZoA.roa
Signing time: Wed 12 Jul 2023 11:15:02 +0000
ROA not before: Wed 12 Jul 2023 11:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:cf:cd:89:22:ee:42:1c:a8:98:21:0e:cb:79:e2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 11:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fcbb852d1bb4cb02dfc4bf08ca4202795556680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:41:cd:31:2a:d1:93:22:d5:6d:ad:a5:4e:
66:c8:af:23:d7:9b:f5:08:ce:96:10:38:cc:68:8e:
ee:df:29:e7:5e:a8:9f:fb:c6:43:dd:22:49:59:17:
81:95:a3:56:ba:65:40:2d:64:63:2e:44:c8:e4:ba:
d4:ad:9a:45:54:14:ba:c6:f3:1d:1b:c0:da:65:e6:
de:8c:73:6f:63:5b:30:b2:9c:0f:dc:da:c8:d5:95:
56:43:d4:62:10:a1:15:ee:f3:96:59:e7:d8:56:25:
b2:69:a2:20:4b:a6:d6:a7:6e:90:6b:8a:f3:b6:38:
b7:50:63:ac:c7:b0:7f:56:06:f0:ac:e9:d1:6e:35:
c1:1f:0e:98:63:4e:f9:02:7a:2d:14:b7:d9:16:f6:
66:15:ca:75:34:d7:8e:38:49:89:49:2a:58:16:1a:
11:69:33:13:c5:96:57:81:1b:14:37:80:5c:ce:f0:
60:f1:fc:f0:e9:10:94:98:14:53:ba:af:2d:dd:d5:
1b:0a:5f:1d:a8:67:8b:e5:3c:a4:72:70:12:a1:a1:
22:a3:a7:bd:f1:73:57:25:9b:fc:65:80:05:cd:28:
26:b9:e1:79:64:c1:83:ef:ae:b3:c0:09:d2:71:b8:
8b:f4:54:1b:24:4a:29:b7:b6:13:1d:0d:57:01:ba:
ee:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CB:B8:52:D1:BB:4C:B0:2D:FC:4B:F0:8C:A4:20:27:95:55:66:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/T8u4UtG7TLAt_EvwjKQgJ5VVZoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:e4:b0:14:43:73:06:73:da:d0:32:34:17:2e:fe:af:9f:84:
09:70:74:b5:83:be:29:04:72:b1:3a:b5:87:4c:66:c7:3b:97:
17:26:da:86:93:eb:6e:a5:ba:39:f2:26:af:be:e6:e1:c8:da:
9e:13:56:0f:10:6f:c0:5f:ef:35:e5:91:7c:d5:61:7e:75:ca:
67:a0:7f:a0:6b:92:eb:18:14:63:a5:7e:ee:86:5e:6b:69:ac:
d3:0a:9b:52:42:2f:a8:b8:6b:b9:7b:1d:40:ee:a7:b7:a6:17:
91:92:b0:40:27:b1:19:0a:d3:bf:67:94:63:41:1c:1b:36:e7:
e2:71:d9:7f:34:ac:a1:0c:60:b3:1c:01:5a:ca:ad:c2:68:82:
4e:c4:87:95:5a:02:fb:76:93:d6:e2:de:a0:bc:64:77:cd:48:
7a:65:66:68:10:00:50:1c:76:aa:7b:09:83:ce:b3:b1:21:64:
23:d8:eb:e1:02:e7:0e:56:26:7c:d3:3e:88:97:ba:b4:5a:49:
37:7f:af:f2:22:c1:ac:e8:4d:f3:e0:46:65:d9:e3:a1:15:d0:
ce:c6:17:7f:ca:67:42:30:f8:2b:76:23:13:63:ac:91:af:a4:
74:c3:1d:bc:ec:30:65:65:99:30:b5:78:68:1d:94:ce:96:1f:
b3:dc:f1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:50:39 2025 by rpki-client