Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TS0d566UcdYyPVLf6wZvph-aF68.roa
File: TS0d566UcdYyPVLf6wZvph-aF68.roa (raw, json)
Hash identifier: JPUjZbmeRZjGJ2qzn0ZhVrusLR5TVasCIV9F8QQEEzQ=
Subject key identifier: 4D:2D:1D:E7:AE:94:71:D6:32:3D:52:DF:EB:06:6F:A6:1F:9A:17:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187EC07C76A188FA2FB9BDC9222E78EE862
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TS0d566UcdYyPVLf6wZvph-aF68.roa
Signing time: Fri 05 May 2023 13:09:05 +0000
ROA not before: Fri 05 May 2023 13:09:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:07:c7:6a:18:8f:a2:fb:9b:dc:92:22:e7:8e:e8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 13:09:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d2d1de7ae9471d6323d52dfeb066fa61f9a17af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d0:4c:8e:f8:12:cf:90:52:f0:f8:33:bc:11:
ce:23:6a:d9:32:3c:67:1e:6e:95:5b:ab:60:ef:4d:
4a:1c:5c:50:03:5a:84:b6:47:cd:34:66:ea:da:f8:
30:95:46:b7:4e:de:d6:07:91:32:cf:cd:96:82:37:
2c:5b:4b:3a:96:71:fc:25:a9:7d:7e:27:00:ff:f9:
7b:fb:e1:05:22:b4:e4:99:dc:2f:b2:0d:1e:6c:2c:
4f:65:ba:d9:16:9d:c7:04:a6:aa:de:95:ad:e9:e1:
ca:55:1b:b8:57:67:29:02:c0:ed:5b:6c:a2:3b:7d:
4d:ca:ec:a6:82:e6:26:38:a1:7b:6b:c8:b6:25:1b:
b6:53:62:6e:2a:ec:f7:7d:ae:83:0a:2f:2e:ec:7f:
49:7c:49:86:14:db:ca:a8:bf:22:88:65:18:1b:c5:
1c:d3:dd:89:66:22:c3:06:7c:f6:32:a7:52:89:2c:
6e:c6:8c:be:ae:46:54:c3:d1:15:b5:06:81:0a:83:
fc:ed:eb:e6:1f:be:52:c4:3d:6b:32:54:ed:99:59:
35:31:22:f8:cc:64:c1:58:29:a0:98:3d:29:a4:34:
1d:c3:3a:5d:24:c3:43:6c:81:63:5d:ad:ba:43:73:
6a:ce:e4:1f:c7:14:e4:6e:cf:80:56:36:aa:e0:66:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2D:1D:E7:AE:94:71:D6:32:3D:52:DF:EB:06:6F:A6:1F:9A:17:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/TS0d566UcdYyPVLf6wZvph-aF68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:38:95:c7:ed:05:89:b7:c6:b7:ff:31:20:db:db:14:0e:1e:
5d:b2:bd:98:b5:a1:49:65:a3:1e:49:98:5a:8c:95:9b:0e:76:
9b:f6:63:4f:53:2e:79:85:07:2e:44:6e:dc:3c:42:65:a0:7d:
58:cb:6a:ae:f0:bc:34:62:a8:26:e6:c7:f8:01:1c:9c:16:77:
9c:e2:f5:0c:05:c0:aa:b7:ca:3a:7f:1e:88:cd:f0:1a:7c:ec:
6c:0a:7e:db:cc:ea:05:19:f3:48:b3:39:77:eb:7a:25:78:1f:
49:c2:06:91:f2:fa:2d:99:22:b7:2e:51:48:79:95:e1:03:c3:
68:b2:e6:c6:57:a9:09:6d:3e:08:ca:03:fb:e5:59:c9:2f:a5:
29:98:5f:dd:28:20:72:c7:81:68:5f:b9:e3:c9:c8:43:4e:36:
a4:12:bb:d8:cc:41:7d:26:a2:51:fb:56:23:70:c9:0e:43:cd:
8f:bd:72:36:af:13:79:07:24:4a:29:4f:b0:3e:ce:01:34:3d:
d9:b6:a5:55:43:43:04:20:36:cb:67:07:04:46:01:1c:61:0f:
2a:70:ed:5b:b8:bf:ab:06:92:5c:25:18:33:de:5e:53:8e:f0:
b2:41:76:3a:a7:30:1c:94:67:7d:85:c4:f7:74:ac:49:0b:08:
e4:70:f5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:12 2025 by rpki-client