Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Rtu6EmgvEM90Z-oKuQgQryru7Y.roa
File: _Rtu6EmgvEM90Z-oKuQgQryru7Y.roa (raw, json)
Hash identifier: yTu/B17KS/h8ENnEox9UILctbzeYQvk8cm/YlcPRJyc=
Subject key identifier: FD:1B:6E:E8:49:A0:BC:43:3D:D1:9F:A8:2A:E4:20:42:BC:AB:BB:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FC5D210B0B44F5C12B92C278468846DD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Rtu6EmgvEM90Z-oKuQgQryru7Y.roa
Signing time: Mon 20 Mar 2023 00:13:27 +0000
ROA not before: Mon 20 Mar 2023 00:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fc:5d:21:0b:0b:44:f5:c1:2b:92:c2:78:46:88:46:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 00:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd1b6ee849a0bc433dd19fa82ae42042bcabbbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:06:c0:6b:ea:81:f2:70:b8:e6:18:8c:97:
68:4f:a8:80:90:15:d3:64:56:da:81:dc:f4:ed:ab:
3e:7b:7e:a4:70:e7:9b:01:6f:95:f4:9d:fb:fc:ea:
5e:d9:bc:82:83:91:69:54:3e:ff:82:ae:ff:13:f7:
e6:76:49:6a:53:9d:b4:a8:6b:b4:28:44:93:6e:57:
7a:73:05:35:24:3d:8c:95:da:e9:df:16:66:40:5a:
81:d3:4b:8f:04:3b:b6:70:e5:15:1d:47:b6:89:f0:
66:ab:c9:bc:2f:75:59:10:c9:9c:77:78:7e:22:68:
18:81:83:17:e1:f8:af:c2:4f:7e:6b:10:2c:a4:0c:
a0:15:4f:95:05:0e:f9:ae:93:2e:89:6f:b4:2d:1f:
b6:0b:df:4f:ce:b1:8c:3d:fa:11:7e:4a:4b:2a:49:
f6:27:d0:6e:9e:a6:8e:73:42:e3:7f:10:79:6f:90:
71:4f:eb:0c:58:d1:fc:2b:48:ac:0b:1c:ac:e9:9d:
cd:af:a1:ac:47:43:f9:20:bb:46:da:f3:ca:3b:6f:
d4:fc:4b:68:d8:8e:99:3e:c4:a3:0d:e1:53:e8:1c:
4c:0a:1e:ad:4f:41:0a:c4:73:e6:84:5f:2a:27:e9:
cd:42:43:a9:f3:e7:10:45:10:c1:3e:c8:ef:08:85:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1B:6E:E8:49:A0:BC:43:3D:D1:9F:A8:2A:E4:20:42:BC:AB:BB:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_Rtu6EmgvEM90Z-oKuQgQryru7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:4e:f1:64:6c:8c:0c:3d:36:5a:a5:a8:b5:59:81:35:87:fb:
ff:d6:44:e6:16:43:26:31:72:1a:aa:76:a5:a9:7f:3e:5c:e2:
2b:da:4e:b9:74:54:fa:c0:50:af:e9:80:3f:5c:4d:a3:93:56:
6c:fa:49:67:0a:09:0c:77:df:02:68:d8:3e:33:25:ec:32:02:
bc:4c:5b:b3:71:71:47:7e:2a:40:ca:8b:fe:88:73:65:39:82:
77:65:33:9e:cd:b2:b9:73:bb:ce:c9:cd:a5:85:b9:b9:20:cd:
be:a7:c9:f1:05:9c:16:14:29:37:bc:3e:5f:09:be:0c:6e:bb:
79:7a:ff:ae:c2:81:6e:f2:ca:f1:df:4e:e0:43:72:d1:78:e7:
be:95:f3:b7:c9:bb:e3:8b:18:34:c9:bb:b9:a9:94:8d:06:6c:
ff:e0:cc:38:75:cb:46:7a:87:7d:d4:5e:7e:8c:d7:19:bb:1b:
3c:83:de:f4:57:ae:5f:00:5f:44:c8:de:aa:ab:70:db:ed:69:
71:43:bb:97:92:d5:c5:b5:7a:cb:45:a0:10:80:ff:07:5b:53:
cd:ad:ac:f1:c0:08:70:2d:bb:c0:3a:c7:5a:6d:ab:4c:24:ed:
9f:a6:53:7f:ae:95:2f:97:05:a3:21:df:57:10:6b:19:d2:89:
5c:5a:02:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:13:09 2025 by rpki-client