Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_ViH5Oqu4UWLQEb3wh4jVXWEdLo.roa
File: _ViH5Oqu4UWLQEb3wh4jVXWEdLo.roa (raw, json)
Hash identifier: GB4WbdD28JqitAy0rFx4dFDQLx+Tmk4sK6HEmsDt0a4=
Subject key identifier: FD:58:87:E4:EA:AE:E1:45:8B:40:46:F7:C2:1E:23:55:75:84:74:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A67E11C0FD0A7CF3D7ED812D1650C751
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_ViH5Oqu4UWLQEb3wh4jVXWEdLo.roa
Signing time: Sun 30 Jul 2023 11:10:27 +0000
ROA not before: Sun 30 Jul 2023 11:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a6:7e:11:c0:fd:0a:7c:f3:d7:ed:81:2d:16:50:c7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 11:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd5887e4eaaee1458b4046f7c21e2355758474ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b9:74:cd:18:e6:5d:4f:b7:43:2b:aa:30:d0:
34:ce:6c:96:0e:66:55:92:ef:9e:bd:08:96:1e:6e:
73:3b:84:50:cf:4e:34:19:f5:af:f2:01:49:2d:ab:
9a:5a:14:76:9d:77:44:d6:db:da:cb:dc:54:e2:b1:
7d:12:ea:b9:f2:15:85:63:a2:1d:82:e3:ef:4d:59:
6d:34:d5:d7:94:19:5c:b8:9b:10:43:26:0b:a0:fe:
5b:44:f4:9d:a1:6a:d2:b2:fb:5b:cb:6c:a1:85:81:
af:6a:f9:33:cd:04:f2:0a:59:b9:ba:1b:5d:69:3f:
c3:36:aa:33:60:fd:a8:d1:1d:0e:15:d7:30:5a:dd:
ea:83:ca:4c:20:54:cf:68:1a:b9:ea:60:39:31:43:
c4:f9:cc:0f:3e:ea:b9:16:53:6f:75:85:48:b2:c2:
f8:61:86:5e:6e:eb:01:15:ad:bd:32:63:a2:36:a2:
6d:35:6d:00:57:15:1c:54:53:c7:30:7d:9e:69:11:
1c:d5:62:43:f7:aa:9b:32:22:a6:51:d9:6c:ba:b5:
09:60:7f:85:e4:b5:5a:8f:c8:5c:cb:b4:86:37:a3:
2f:16:43:a2:41:ec:90:32:7f:5c:97:79:b5:0e:de:
78:05:e8:1d:91:bf:74:38:12:89:06:c4:96:e4:40:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:58:87:E4:EA:AE:E1:45:8B:40:46:F7:C2:1E:23:55:75:84:74:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_ViH5Oqu4UWLQEb3wh4jVXWEdLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:4e:32:28:bb:e0:c4:6c:01:e0:36:4e:94:13:50:d2:77:b7:
72:6b:62:63:a3:20:c4:62:b2:2f:10:cb:50:52:29:dd:83:7b:
5f:b7:e6:69:a1:05:dd:f5:99:c9:45:42:84:a8:8f:63:fe:2c:
3e:73:a2:80:72:92:d7:f4:97:12:93:d9:10:74:f3:48:89:39:
11:88:59:c9:ed:59:7e:77:16:b3:33:70:13:37:4c:70:f6:b4:
fa:90:31:b9:72:b6:f1:1b:6c:94:b7:4a:e5:c7:cd:3a:dd:43:
29:99:87:11:ce:fb:25:b2:2a:ab:88:99:b3:5a:11:93:95:4c:
c1:0a:ba:33:cb:01:72:25:6a:25:d0:ed:e4:81:3a:83:b8:3e:
20:9a:17:50:f1:77:70:9a:d3:b4:43:f9:2e:89:15:d0:96:94:
1a:65:b9:c9:93:16:d4:92:f1:ad:75:0e:10:97:86:76:1a:e0:
be:38:5f:2b:76:b3:df:b5:f6:cf:33:a7:e1:08:bd:6d:f9:fc:
a8:84:26:49:36:d7:4d:75:0b:4d:bb:4d:da:66:09:54:0d:91:
d1:52:fb:65:06:72:4c:0d:12:43:e8:bd:69:d4:f5:9e:99:da:
5c:2a:7f:2c:6d:24:83:83:97:52:db:d5:8f:d8:04:48:17:e6:
29:a3:97:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:26 2025 by rpki-client