Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_wcZyr4eUeoxMJEZvpS0aikMFDI.roa
File: _wcZyr4eUeoxMJEZvpS0aikMFDI.roa (raw, json)
Hash identifier: o991p932xZcX6iJCoZpnCGHMD/7KSYtEFa+Ed2lik4M=
Subject key identifier: FF:07:19:CA:BE:1E:51:EA:31:30:91:19:BE:94:B4:6A:29:0C:14:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0399CACE163CE7ADC307DFB6D60B6E5F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_wcZyr4eUeoxMJEZvpS0aikMFDI.roa
Signing time: Thu 17 Aug 2023 13:05:25 +0000
ROA not before: Thu 17 Aug 2023 13:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:18a:398:f187/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:99:ca:ce:16:3c:e7:ad:c3:07:df:b6:d6:0b:6e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 13:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff0719cabe1e51ea31309119be94b46a290c1432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d7:49:8b:e2:0e:d2:5d:bd:52:b7:cf:49:26:
ca:42:42:79:1b:e0:d5:4c:c1:b9:ad:a5:17:61:79:
76:48:e7:4f:4b:aa:ef:e1:82:90:31:ef:0f:5e:71:
79:34:fa:21:dc:2a:69:5e:e1:ab:25:48:a3:e0:5f:
4d:43:1b:82:d3:1b:1a:0b:41:7e:2e:9b:d1:1c:a3:
8e:ba:de:be:91:2b:aa:2a:be:d6:be:6f:ec:b6:43:
af:80:1c:9d:a0:cc:d6:cc:7c:3c:c1:94:bb:90:e8:
17:42:28:15:7e:91:77:a0:43:9f:ab:38:fd:f8:d6:
28:79:50:eb:18:6e:b5:f3:44:40:e3:30:71:73:f3:
b9:00:fd:e1:9f:fd:40:8f:ae:e3:f9:8a:15:e7:6c:
c2:7c:0c:a2:74:d3:2c:86:56:53:85:72:ce:32:de:
27:86:48:68:84:72:8f:84:fa:cd:95:1f:54:84:f9:
7d:1a:eb:15:6f:22:ed:0f:d1:15:fd:d8:4d:d0:9f:
0a:f3:c8:17:8d:7d:51:ec:9d:8d:be:27:14:d7:63:
1b:ad:56:d9:0f:9c:f1:6a:f7:40:a5:28:c4:10:2d:
25:2b:c6:99:be:0c:55:6c:1f:69:58:bf:45:2a:a6:
f0:14:53:13:7f:04:d6:a9:83:cf:29:df:64:c1:27:
fc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:07:19:CA:BE:1E:51:EA:31:30:91:19:BE:94:B4:6A:29:0C:14:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_wcZyr4eUeoxMJEZvpS0aikMFDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:b9:87:b0:51:72:15:34:69:e8:a7:47:04:20:60:38:82:9d:
48:34:eb:79:dd:b4:b0:dc:d6:56:80:c5:6d:19:eb:65:42:c3:
a2:23:9f:b2:4c:89:ab:a2:51:e2:89:66:a7:51:96:45:86:32:
05:b5:72:35:2a:08:4b:72:bc:7e:3e:9d:8f:b6:b4:2f:1d:49:
ad:68:e2:b6:ed:54:be:8d:bf:0a:a2:65:b6:bc:ab:d5:fd:b4:
5b:bd:0b:ab:20:07:fb:c9:8c:1e:83:91:c1:c2:3d:70:ea:a0:
5b:90:d8:d3:57:fb:3b:fe:51:38:f0:ee:7b:62:23:41:31:31:
30:6a:3a:77:f5:50:5b:b7:df:3c:7e:58:cb:70:b5:52:96:43:
fe:e1:e7:38:bc:8f:eb:79:79:a8:10:61:fd:38:34:64:a3:7a:
6f:dc:24:b1:73:02:f4:e9:ec:2c:84:cf:aa:dd:5d:89:1f:2a:
2c:fb:00:06:d6:d9:10:11:07:c1:51:8b:2d:97:51:aa:a2:da:
27:d3:7d:ad:36:d5:13:14:50:30:90:bf:7e:1e:cc:fa:a4:a6:
ce:df:27:71:20:ca:9c:41:88:fe:22:b8:ca:b3:5d:74:89:5b:
74:a1:8a:59:ae:93:38:00:3b:38:26:a0:61:9d:59:d9:47:f1:
dc:dc:fe:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:49:59 2025 by rpki-client