Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/abb3r_6rlfufpO0m9CXNvqVbeDQ.roa
File: abb3r_6rlfufpO0m9CXNvqVbeDQ.roa (raw, json)
Hash identifier: vDVw0zqI8a2kgnmtvb9HPIDA5YrurPVtBTXkc0Y3G+c=
Subject key identifier: 69:B6:F7:AF:FE:AB:95:FB:9F:A4:ED:26:F4:25:CD:BE:A5:5B:78:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01881E426CFEFCE3D2294475AE35750DE072
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/abb3r_6rlfufpO0m9CXNvqVbeDQ.roa
Signing time: Mon 15 May 2023 07:14:09 +0000
ROA not before: Mon 15 May 2023 07:14:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:42:6c:fe:fc:e3:d2:29:44:75:ae:35:75:0d:e0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 15 07:14:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69b6f7affeab95fb9fa4ed26f425cdbea55b7834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:fe:ea:7c:11:c2:61:bc:21:a9:0f:5c:67:
46:74:e3:3c:55:4d:6b:29:0b:7a:f3:e9:69:fe:bf:
25:6f:78:ec:5f:3b:81:d8:96:a7:fc:cf:67:84:dd:
be:78:32:de:d6:d0:db:d4:e9:2e:7b:48:5c:e4:4e:
23:d4:89:fc:81:a8:b5:cd:5a:36:5b:b7:3a:43:95:
f7:11:89:6b:bc:8b:c8:56:b9:d9:3a:67:18:81:59:
e3:a0:28:ac:64:59:f5:95:5f:80:5a:61:a9:06:d2:
d6:d3:a2:44:84:66:de:9b:e1:ac:3d:8a:48:ec:31:
99:e1:4f:56:f4:49:51:f5:c7:ca:7c:e1:28:08:28:
79:98:03:c6:2f:10:a2:29:c5:e3:f7:86:aa:ed:11:
11:94:55:de:f0:85:9a:77:09:33:0c:dd:d9:6d:e8:
f0:0e:0f:14:43:82:65:9f:79:80:83:df:d0:c1:71:
a7:0d:60:65:af:a0:33:84:77:de:4e:04:93:64:17:
1a:4c:da:b7:8d:86:3e:65:89:56:de:5c:23:0a:e1:
a3:01:4b:0f:c8:06:ef:1d:d4:7f:dd:5b:67:dd:a3:
d5:46:c1:59:bd:a3:70:b5:1c:77:ac:0f:7f:32:2e:
cd:c7:b3:f2:ec:1f:69:d7:d1:67:35:c1:0f:2a:ac:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B6:F7:AF:FE:AB:95:FB:9F:A4:ED:26:F4:25:CD:BE:A5:5B:78:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/abb3r_6rlfufpO0m9CXNvqVbeDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:2b:ba:a3:a7:33:37:e2:4a:e5:9d:ed:ab:ea:ad:e8:54:3e:
e7:7c:8f:a5:7a:f0:b0:4e:77:90:4f:39:b9:0e:18:e4:80:c1:
ee:a5:a8:1c:bc:cf:d1:ee:89:8d:67:dd:4e:4c:c8:f4:5f:28:
24:3c:51:e9:d6:9e:03:e7:3c:f7:e6:3a:cf:00:7a:32:74:70:
11:ed:fe:77:35:7d:70:49:92:29:67:a5:d3:85:0f:e9:9a:44:
ea:de:53:e4:6b:cd:19:9d:c6:6e:8c:e5:30:eb:83:05:dd:0c:
25:07:19:f8:23:d4:43:aa:c6:f0:d9:68:ee:c4:02:78:67:a4:
29:e1:37:b0:a9:08:14:38:f4:b8:8e:3b:d7:76:79:58:79:8d:
06:1a:31:88:b8:00:39:96:05:0f:a1:ac:67:b4:7d:be:99:14:
a7:b9:da:b1:ca:d4:b7:e9:4c:d9:3e:80:99:66:80:1b:fb:0f:
bc:3c:df:11:90:7f:e0:5d:93:37:79:21:0f:78:80:ca:19:d8:
88:bd:08:17:70:3f:2a:36:7b:7d:26:c7:f2:40:dc:e0:07:a8:
0d:de:bf:34:ef:3b:c2:b5:d8:4b:4f:ad:b7:79:34:86:ed:c9:
ff:89:03:ce:6e:12:82:2b:c4:c9:ab:c4:3a:1b:f5:d4:3b:77:
fb:24:75:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:08:08 2025 by rpki-client