Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a2kWGfVk_4vE_bD8JQwNteYNVRQ.roa
File: a2kWGfVk_4vE_bD8JQwNteYNVRQ.roa (raw, json)
Hash identifier: 4A+8jpPjyGDHOCOPAa+KMtgOFwAe72sQe4yPi3ElXDs=
Subject key identifier: 6B:69:16:19:F5:64:FF:8B:C4:FD:B0:FC:25:0C:0D:B5:E6:0D:55:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018866580640F2F152FF205D0B3B888228A8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a2kWGfVk_4vE_bD8JQwNteYNVRQ.roa
Signing time: Mon 29 May 2023 07:10:24 +0000
ROA not before: Mon 29 May 2023 07:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:66:58:06:40:f2:f1:52:ff:20:5d:0b:3b:88:82:28:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 29 07:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b691619f564ff8bc4fdb0fc250c0db5e60d5514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:b5:26:f8:8e:84:d9:e9:fa:55:3c:91:7a:
c0:c4:3b:f2:97:c4:2a:45:26:7c:a0:7e:65:a0:5e:
56:e1:52:50:c9:54:0d:32:89:9e:38:01:c5:64:57:
a4:1c:64:83:b6:c7:e6:2d:74:b6:d0:fb:74:e7:f1:
6f:54:df:81:3a:f8:10:87:32:de:25:98:b1:ce:18:
e8:a9:7a:2d:14:32:1b:20:eb:c9:ca:78:1c:9e:b5:
5c:70:fe:c7:26:56:50:6f:d2:ed:16:f7:f7:86:ad:
f2:59:b7:d5:f3:1c:5a:34:3e:c3:7e:85:37:1c:cc:
d5:4c:df:7f:f4:21:3f:78:35:c9:ae:3a:ef:5d:fd:
8e:e5:4a:3c:cc:e4:ea:ca:35:0c:82:28:05:49:fa:
8c:32:1b:2a:93:04:d3:83:4d:fe:73:9b:c5:4c:e4:
bb:2d:37:23:0d:c8:ad:5e:2f:9e:32:64:37:e4:bd:
a7:77:60:dd:df:b8:e6:1a:22:51:54:86:92:52:b0:
88:be:95:fc:4a:15:80:a7:1b:33:42:40:5e:55:55:
eb:ba:7c:fd:68:84:39:5e:13:8a:d2:fe:f6:81:eb:
20:68:77:94:85:84:14:a2:2d:af:25:ad:12:90:dd:
89:e0:f2:4a:eb:70:95:57:b4:a4:b5:35:55:c7:df:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:69:16:19:F5:64:FF:8B:C4:FD:B0:FC:25:0C:0D:B5:E6:0D:55:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/a2kWGfVk_4vE_bD8JQwNteYNVRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:63:78:df:c9:64:76:59:e8:5b:cc:36:b7:38:e0:f5:22:c1:
77:bc:79:f9:cc:5b:45:16:f2:f1:fa:e1:da:db:65:61:93:c2:
1c:e6:d1:d7:07:1d:8e:29:4c:92:8f:15:be:b1:f5:06:71:b4:
a8:86:b4:03:a9:fb:ef:ea:5f:9d:66:b6:44:fc:da:b5:7d:05:
1b:32:e8:61:4d:93:2f:55:bb:04:7a:d3:2e:e9:97:92:06:4d:
0c:42:5b:4b:6d:e1:9a:1d:40:d7:25:e6:bb:54:62:87:20:6e:
7e:ec:6b:5c:5a:58:fb:67:8c:88:85:f9:e2:76:a8:70:60:19:
6c:9f:8a:99:1b:ad:45:e8:e4:5d:d0:4b:04:12:85:2b:05:fd:
bc:86:9b:16:0b:38:d4:62:4c:e4:a7:73:93:84:16:d8:a0:85:
be:36:eb:b1:15:b0:b7:c9:cd:6a:2c:ea:df:51:ea:23:04:c6:
2c:7e:aa:99:f0:4e:41:10:a6:99:a8:53:87:16:27:7d:85:2e:
05:81:fa:cb:32:f9:cc:ac:ad:7e:7c:c4:8a:59:0e:8e:b4:61:
70:06:91:7f:6b:de:37:6a:2f:5b:9d:14:d9:b8:f5:8b:fd:83:
21:30:09:c6:8a:84:ec:42:8b:fe:47:3d:1b:4a:01:27:9a:c7:
d0:aa:3f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:36:35 2025 by rpki-client