Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_0iysdf-4LC1kBLimRQe0yXhkwY.roa
File: _0iysdf-4LC1kBLimRQe0yXhkwY.roa (raw, json)
Hash identifier: JqVBxYVGbB7V6/nhkzcUPu0E+GI0csUqAYX79dKGdT8=
Subject key identifier: FF:48:B2:B1:D7:FE:E0:B0:B5:90:12:E2:99:14:1E:D3:25:E1:93:06
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BF001CF673AE50AD12AA425CA64ECB8D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_0iysdf-4LC1kBLimRQe0yXhkwY.roa
Signing time: Wed 08 Mar 2023 02:15:00 +0000
ROA not before: Wed 08 Mar 2023 02:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bf:00:1c:f6:73:ae:50:ad:12:aa:42:5c:a6:4e:cb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 02:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff48b2b1d7fee0b0b59012e299141ed325e19306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7e:85:fc:76:7e:ee:d9:de:25:64:15:5b:fd:
d0:a7:8e:c8:ba:07:d0:11:4e:cf:fa:e8:72:86:97:
28:3d:71:ee:3a:0c:db:96:2a:e7:45:bb:cf:1c:cd:
92:77:c6:72:ef:89:f9:16:b8:26:24:b8:10:d0:15:
ae:53:58:b9:1d:5d:01:ce:45:6e:fe:04:60:da:8b:
10:9a:e5:f9:ea:7e:1e:03:70:ba:f5:e9:21:4c:71:
38:bf:b1:f0:51:d0:ef:57:c8:cc:3f:70:87:9b:82:
b8:74:e9:49:1e:b2:88:06:1b:de:31:6e:99:5b:a4:
57:b7:3e:b5:1d:f4:b7:23:b7:30:b1:35:0d:2c:0e:
39:44:89:ae:2f:7e:43:04:c2:12:b3:02:93:0c:68:
9a:5f:0b:fe:33:a8:e0:d3:c5:82:89:70:85:c6:52:
9b:8f:7a:20:86:56:4d:8b:1e:57:fb:62:59:1b:04:
06:bf:68:85:4e:cc:cb:b7:73:eb:bb:38:c6:6d:35:
c9:d7:9e:bd:25:39:f3:ed:70:a1:89:8f:d9:01:09:
c4:92:d9:7d:9e:1f:ed:05:1a:0c:64:7f:09:ad:aa:
46:78:96:55:a0:af:05:a3:17:9c:f4:28:06:77:4c:
31:38:cb:e4:a5:45:f2:7c:de:1c:44:9c:2a:b3:05:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:48:B2:B1:D7:FE:E0:B0:B5:90:12:E2:99:14:1E:D3:25:E1:93:06
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_0iysdf-4LC1kBLimRQe0yXhkwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:6c:0a:43:c1:30:13:25:4f:08:fb:d1:7b:06:f0:70:03:07:
52:aa:d9:08:96:fa:12:f5:34:c2:ad:07:5d:af:4f:23:6c:09:
4b:1c:28:ec:85:f3:38:0e:6c:88:69:1b:9a:43:11:e6:9a:a9:
7b:ee:a6:f0:b0:b6:9c:4f:42:07:0a:71:4d:9a:e2:e8:2b:7b:
34:ea:7a:d9:28:41:e0:01:e8:5f:74:1b:b0:bc:a8:1a:07:44:
72:ed:9c:a0:00:a3:04:75:f5:5d:75:59:86:ee:8c:51:63:f1:
1b:9d:76:ed:34:68:3f:ba:cc:79:64:fd:df:ff:46:b2:f8:05:
82:e2:7d:e2:62:97:f7:0e:ca:d8:b9:78:b9:e9:31:cb:b5:5b:
16:ec:b4:4b:f6:70:97:ac:15:59:28:ba:fa:9f:eb:e8:6b:4f:
ee:62:68:f1:a4:b6:80:ac:13:26:31:2d:86:8d:a8:01:83:f5:
0b:2c:46:a0:00:c8:e2:37:a8:97:73:bd:59:33:d0:d5:ca:a5:
c8:ea:a3:3a:31:ac:08:f4:9d:5e:c9:cd:d6:53:4a:7a:62:77:
0f:c9:ef:72:72:d6:2f:fc:cd:51:1d:b1:d9:79:0b:0a:47:60:
21:09:64:25:88:24:76:9b:8d:fc:5a:11:df:cf:2e:c1:a7:5f:
13:a7:21:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:32:20 2025 by rpki-client