Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_bZCjh0dwPE4z0DbKGKWIk_tf5s.roa
File: _bZCjh0dwPE4z0DbKGKWIk_tf5s.roa (raw, json)
Hash identifier: nIoVbfK4Ki3ITPNimHtDGjFpk4cf9CUzCFWc1ut6ZD0=
Subject key identifier: FD:B6:42:8E:1D:1D:C0:F1:38:CF:40:DB:28:62:96:22:4F:ED:7F:9B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888E094558776D99271CC2E10587EFA428
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_bZCjh0dwPE4z0DbKGKWIk_tf5s.roa
Signing time: Tue 06 Jun 2023 00:09:12 +0000
ROA not before: Tue 06 Jun 2023 00:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8e:09:45:58:77:6d:99:27:1c:c2:e1:05:87:ef:a4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 6 00:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdb6428e1d1dc0f138cf40db286296224fed7f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:a5:ba:a0:37:1e:fd:60:04:28:0b:47:f1:
e6:fd:b2:0f:1f:4d:b2:38:73:bb:9d:4c:34:67:18:
50:61:c0:41:87:4f:64:68:b5:13:a9:77:10:56:f0:
7a:fb:6d:07:34:e8:10:1f:15:d4:1b:2d:59:06:eb:
bc:e5:90:1a:40:b0:97:2d:a4:7e:b0:ba:bc:20:10:
2c:ec:d4:5b:2e:68:20:aa:c7:96:33:ba:01:49:ab:
64:e3:ed:66:72:3c:ad:3d:d6:45:da:fb:23:c5:23:
37:61:3c:0a:9a:e2:d9:51:87:ce:c4:a8:a0:2e:6a:
72:35:ca:90:7c:5c:72:cc:7b:54:db:f8:95:42:f5:
f1:d2:75:d9:f1:03:53:17:7d:da:1b:11:3e:a9:d1:
f9:06:e6:a1:b6:1e:a9:e4:ad:1f:67:4d:42:4f:d1:
a9:e1:ee:c7:f0:bb:1d:6d:d4:1a:5b:1d:7b:c7:0c:
a9:e5:2e:36:37:93:e8:3b:a3:69:2f:05:05:bd:77:
c6:0c:0e:8e:e5:78:64:a9:46:3b:5a:6e:3d:a0:06:
bd:dd:06:c6:6d:3f:ad:3a:10:1e:90:9a:3a:d4:c2:
bb:29:70:40:e7:fd:47:2d:5e:34:98:82:de:3a:86:
7b:42:8b:e9:3e:b9:cb:46:8f:a2:4b:f6:4d:08:aa:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B6:42:8E:1D:1D:C0:F1:38:CF:40:DB:28:62:96:22:4F:ED:7F:9B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_bZCjh0dwPE4z0DbKGKWIk_tf5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:07:78:4b:ae:34:1d:90:af:f0:58:64:e8:34:27:e3:11:9c:
35:d8:88:11:2b:52:00:9e:b1:46:68:33:65:03:6e:ad:90:fb:
34:3b:98:96:ee:c7:d6:82:df:ed:dc:a1:c7:b4:ce:c5:55:29:
d7:bb:cc:61:40:bf:03:e7:2d:b9:69:6b:e0:70:18:b0:b6:03:
b4:b7:e4:18:24:62:60:d0:d4:5f:fe:53:dd:c7:e8:45:32:b4:
86:80:0d:ef:d1:e5:ab:15:a1:7f:c0:ab:7c:f8:1b:71:a9:b5:
46:af:45:31:80:1b:fb:a5:5f:6b:80:a8:df:9f:92:2a:3e:bf:
ca:ca:be:8e:eb:d7:6d:9e:e5:75:10:e6:ad:a7:28:bb:57:1f:
6d:0a:26:ee:86:51:6e:2e:81:dd:21:24:c4:29:f6:7f:47:e6:
88:34:bc:da:c9:f3:9c:6b:68:bb:7c:55:c5:ea:cb:a5:6f:84:
f7:ba:69:dc:a3:f6:d4:a0:4c:be:af:1e:0e:3d:03:9c:63:15:
1e:86:11:04:95:52:97:06:ad:1a:13:09:7f:74:00:8d:cf:06:
7f:3d:ff:c3:f4:e6:51:2f:f7:c3:eb:01:ce:f0:81:87:ee:0a:
d4:00:32:ad:97:52:c8:a6:d1:98:94:fa:d1:39:e7:b8:46:4d:
07:78:4b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:23 2025 by rpki-client