Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_0cHAxJg8-ulSWQxSdByeT-D6e8.roa
File: _0cHAxJg8-ulSWQxSdByeT-D6e8.roa (raw, json)
Hash identifier: BDdc3akzdYOqwYRCtWX9xdgi8ig2Ir81ViYokCUTDH4=
Subject key identifier: FF:47:07:03:12:60:F3:EB:A5:49:64:31:49:D0:72:79:3F:83:E9:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01875DF704B5061A4E31E075A25B84423689
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_0cHAxJg8-ulSWQxSdByeT-D6e8.roa
Signing time: Fri 07 Apr 2023 23:04:42 +0000
ROA not before: Fri 07 Apr 2023 23:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:187:5df6:a080/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5d:f7:04:b5:06:1a:4e:31:e0:75:a2:5b:84:42:36:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 7 23:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff4707031260f3eba549643149d072793f83e9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:c2:d1:63:fe:f9:27:8f:84:f0:6d:ff:97:
b6:ab:c9:ae:0b:b2:45:c0:7e:cf:44:92:33:b4:cf:
3b:a9:6c:10:b7:3d:1f:43:65:c9:f7:65:73:cf:24:
36:22:0f:cd:d1:16:f8:db:71:b4:85:a7:55:3b:e4:
80:5d:84:5d:05:de:c3:0b:e2:8b:bd:45:e9:52:3f:
53:b8:ce:83:9f:e9:de:cb:bb:c0:6a:d2:d9:9c:83:
b7:bc:1e:5c:39:db:67:2d:09:d2:0c:9f:da:1e:7f:
fb:8e:ab:ba:f1:89:ae:b9:79:62:75:2a:78:ba:1d:
06:2c:9c:d3:e3:fd:d7:d8:91:8f:db:fb:d0:3e:66:
1e:04:74:eb:4e:12:ad:80:e8:fc:e2:a7:f2:ab:19:
56:3b:7c:21:a9:43:36:31:5e:8f:17:8b:cc:6b:ba:
7a:6a:53:69:29:15:73:ea:69:b5:51:e9:a2:65:c5:
01:a0:62:ef:80:7f:e3:cd:2f:7d:74:c6:d7:2e:f6:
e0:c2:42:9c:c2:b9:2e:da:8c:81:dd:58:bd:0e:81:
d1:95:ad:1b:1d:60:b4:ce:cc:97:41:15:6e:7e:77:
0a:8c:d4:19:bb:70:87:6b:c1:00:4d:4a:e6:2f:3b:
52:39:ec:86:52:f5:bb:51:ec:3c:0a:62:4b:8e:d7:
8f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:47:07:03:12:60:F3:EB:A5:49:64:31:49:D0:72:79:3F:83:E9:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_0cHAxJg8-ulSWQxSdByeT-D6e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:d2:11:ab:0f:54:f6:8e:90:30:54:d3:10:04:f8:5c:66:7f:
6c:6c:f8:4a:36:8c:3e:13:21:3e:64:84:39:7c:a7:97:db:54:
78:05:66:ec:18:b6:84:95:cf:1e:64:5b:ed:06:fd:4d:1e:eb:
d5:6c:c6:64:68:2f:02:4d:dd:cd:fa:2d:62:52:9f:17:4c:ca:
78:f2:4c:c8:5c:95:15:6b:f6:ca:b4:f3:c0:57:93:7e:57:1e:
2d:18:66:19:17:8e:65:b6:21:ac:5c:6f:56:80:82:60:8c:74:
87:ca:94:96:4f:ff:51:1c:d2:bf:b2:24:dc:90:cb:0d:34:67:
ec:fd:7a:fe:8d:4a:05:d8:e9:ed:b3:03:2c:22:a8:83:00:be:
48:96:0e:d0:0d:d4:5a:3a:bd:78:cb:b0:cb:39:b8:24:25:4a:
d1:36:ff:f5:03:3e:43:d7:fe:c5:42:2a:20:91:b7:11:39:fc:
13:cd:2b:4f:43:67:f3:42:86:2f:37:9b:78:24:66:59:e0:a2:
a6:aa:43:39:6a:03:b7:ab:a7:c5:4d:d6:ce:bd:08:05:84:d5:
9b:39:6f:94:55:f7:1e:a8:aa:d0:94:85:10:44:a1:68:c1:97:
cc:93:8c:1b:b9:22:37:16:74:19:57:8b:c6:6a:27:de:47:c5:
6f:7c:f4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:46:45 2025 by rpki-client