Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ThoLpoqk0uyZf_dxaez7rchG_IA.roa
File: ThoLpoqk0uyZf_dxaez7rchG_IA.roa (raw, json)
Hash identifier: V4RKw1nyzo2qFXMYaU2VFl2aEe+o0Vqef3Gpf4mnncE=
Subject key identifier: 4E:1A:0B:A6:8A:A4:D2:EC:99:7F:F7:71:69:EC:FB:AD:C8:46:FC:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018768E8D5518D0EF3A154E7D548D736C3E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ThoLpoqk0uyZf_dxaez7rchG_IA.roa
Signing time: Mon 10 Apr 2023 02:05:02 +0000
ROA not before: Mon 10 Apr 2023 02:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:68e8:8b14/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:68:e8:d5:51:8d:0e:f3:a1:54:e7:d5:48:d7:36:c3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 02:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e1a0ba68aa4d2ec997ff77169ecfbadc846fc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:b5:81:ed:6b:78:2e:e7:88:16:d0:d8:56:
b3:e5:55:7a:f2:65:de:aa:57:83:74:9e:f7:f7:c7:
9e:d1:b6:9b:a3:6e:75:fa:a5:0b:dd:e9:7c:a7:9c:
cd:2e:c3:05:de:5a:13:1f:92:91:47:72:83:76:58:
a8:b3:ff:ec:5b:7e:28:d3:7f:00:7d:d9:ea:09:59:
c6:b1:7b:fe:ba:94:a1:b5:77:82:fe:37:76:76:81:
ad:47:59:5e:d8:99:67:dc:49:11:b9:bb:81:8f:35:
68:0a:ea:cf:c8:39:b6:cd:90:8b:1a:a2:16:f0:5a:
1e:48:9d:ad:a3:8a:1a:8c:1c:c9:ef:f3:35:5e:01:
3f:b3:5d:82:6b:fc:72:89:97:63:75:7f:e9:31:31:
5b:c4:07:ac:97:b5:88:2b:a0:5d:7e:e8:f4:ad:64:
67:b8:b8:44:c4:bd:14:98:9e:1c:18:6f:62:74:f6:
92:94:77:c0:f2:f9:5e:26:57:ce:69:fa:fd:68:c7:
de:cb:e4:64:85:da:61:ff:e9:a9:04:47:7d:a4:29:
fa:56:30:ee:61:a0:d1:be:f6:a3:41:d1:b5:8d:54:
70:b1:24:e3:74:e7:e2:49:71:08:e9:c5:08:a8:50:
33:00:10:d5:e2:64:a1:1d:4a:bf:45:3e:5c:0e:6a:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1A:0B:A6:8A:A4:D2:EC:99:7F:F7:71:69:EC:FB:AD:C8:46:FC:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ThoLpoqk0uyZf_dxaez7rchG_IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:09:dd:d8:9b:eb:c6:be:bc:bc:4c:44:b3:73:e4:46:f0:25:
5c:9c:3e:b9:12:ca:14:7b:de:2d:85:3d:7f:4a:bc:01:99:2a:
c6:b4:35:94:42:d0:bf:77:00:03:81:b6:a6:92:f0:d3:37:a1:
1e:99:89:67:38:32:35:6d:3a:8d:e7:57:89:7d:b1:2f:a3:1d:
e2:26:7b:b9:34:d8:c0:09:8f:90:24:8d:66:e3:87:f2:bb:4f:
23:70:e6:15:d2:69:56:37:e9:eb:b8:9b:80:39:44:f4:13:3b:
68:35:bd:e6:40:ef:c4:ff:f2:73:74:25:8d:6c:0e:4d:4e:99:
90:74:ac:1c:7a:9f:19:1a:82:2a:6f:c2:bf:f1:77:77:cc:90:
c6:38:ac:b0:59:58:80:d6:50:b3:3d:7b:e4:73:cc:e5:4b:45:
3b:83:f8:22:de:01:7d:b7:5c:e8:18:71:c5:aa:a0:da:45:aa:
04:3d:97:03:06:c0:5b:da:29:ed:bd:e7:2f:7b:10:77:7c:32:
29:0e:5b:ff:1f:0b:e9:b5:d8:92:0c:22:04:02:dd:c8:9a:80:
18:8e:08:b4:b5:1f:61:10:9e:46:44:7e:b1:85:d7:68:14:e7:
8f:2d:df:93:5c:a8:15:8f:d5:c6:3f:d0:2f:91:3b:a7:05:89:
09:c6:45:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:03:25 2025 by rpki-client