Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V0ZGxH5haySLHvUF4oBTLYpaVjs.roa
File: V0ZGxH5haySLHvUF4oBTLYpaVjs.roa (raw, json)
Hash identifier: Wp1chEzRNFNc1C/VRqo3AmG5E6Jzy7/eh+dHFaCtLTU=
Subject key identifier: 57:46:46:C4:7E:61:6B:24:8B:1E:F5:05:E2:80:53:2D:8A:5A:56:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880B5DB210404E75DCA8B8B815413E1950
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V0ZGxH5haySLHvUF4oBTLYpaVjs.roa
Signing time: Thu 11 May 2023 15:11:09 +0000
ROA not before: Thu 11 May 2023 15:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:5d:b2:10:40:4e:75:dc:a8:b8:b8:15:41:3e:19:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 15:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=574646c47e616b248b1ef505e280532d8a5a563b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:48:fd:52:5b:38:02:f5:9d:ac:94:55:24:b0:
c9:5a:7a:fb:41:8d:c6:9c:7b:28:13:98:aa:d9:b3:
41:16:2d:9d:ae:ad:39:9a:15:92:d7:f7:ef:8f:02:
6b:e0:66:c4:97:cc:73:8e:47:0a:1f:56:53:2b:4a:
ab:7b:4c:88:55:8c:19:83:7d:29:2a:c5:9d:60:74:
d8:39:df:d7:33:39:10:c3:3f:31:e8:c5:07:8c:64:
4c:0a:f5:ea:6f:7d:85:3a:99:25:a5:70:12:ad:5b:
52:1d:60:6d:9a:2a:94:73:c2:37:b6:05:b6:c9:4f:
e2:48:bd:9c:dc:4c:23:39:fc:9c:8a:0a:ed:01:99:
92:4e:3a:18:bb:90:5c:ab:61:44:5c:c6:14:c3:e6:
40:23:43:5d:a4:c2:80:a5:63:35:a9:38:c6:c2:e5:
a1:ca:7f:6a:56:c7:98:f3:49:ad:41:4b:0a:5f:9b:
36:28:e0:c6:48:1b:b3:ab:77:6a:0a:ec:4a:ee:d6:
7a:8e:25:db:9d:84:95:3d:ea:f2:2c:ce:7c:3a:69:
53:38:5e:00:00:53:55:63:05:5a:3c:98:d5:66:d5:
f8:50:ab:fe:40:a1:5d:3e:fd:74:40:39:ca:f0:57:
31:ae:6e:a7:38:cd:7e:bf:de:b4:9d:10:03:27:d4:
69:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:46:46:C4:7E:61:6B:24:8B:1E:F5:05:E2:80:53:2D:8A:5A:56:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V0ZGxH5haySLHvUF4oBTLYpaVjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:fc:35:11:3e:40:f5:6e:1f:9f:af:3b:b5:c0:b2:05:ae:e0:
20:d1:4c:7a:28:f2:da:2e:07:0d:57:7c:e8:ac:59:41:fa:dc:
d8:c5:a5:1c:1e:30:fb:5a:94:fa:13:46:4f:b7:1d:34:a9:fe:
58:50:bb:88:a0:07:75:03:f1:bf:c2:bd:e0:85:d7:20:8f:bb:
ab:8c:24:0b:50:d0:ab:a7:e3:cd:0c:c6:1f:15:97:db:78:19:
3f:e7:d9:2d:76:58:56:6d:3e:bf:3f:be:84:32:4b:cc:95:75:
55:c1:43:c9:98:05:76:09:4c:fe:46:1c:ca:01:f1:44:23:8f:
4c:c9:de:49:2b:40:fc:b2:a9:a3:3b:5a:65:73:0c:bf:dd:a8:
36:e1:88:ca:96:97:86:56:06:40:14:d4:2c:9c:be:da:41:e2:
88:6a:c7:bb:11:b0:bd:8c:56:4d:b4:c2:97:ef:53:83:6f:50:
11:cf:b7:b3:a2:28:45:12:cf:11:57:db:72:08:dc:09:b8:c3:
89:3b:1d:19:7c:ba:30:f0:e4:f9:26:82:24:ab:64:30:7d:5c:
b9:1d:dd:f4:d3:ff:a2:dd:4c:5b:d1:be:2d:83:7f:07:94:17:
c8:19:12:2b:6f:b7:38:f3:78:3c:cf:22:11:a9:fe:66:15:b9:
73:16:40:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:16 2025 by rpki-client