Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b4VkYQPmUE5J9v0Ay5QLgCJEdpk.roa
File: b4VkYQPmUE5J9v0Ay5QLgCJEdpk.roa (raw, json)
Hash identifier: 3nay1Kj3wfuw3JbjKoj+KxH3jJhybrlnn2CswzU9w5c=
Subject key identifier: 6F:85:64:61:03:E6:50:4E:49:F6:FD:00:CB:94:0B:80:22:44:76:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018882E110ED1FAABD03404A8AE19CF45DA1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b4VkYQPmUE5J9v0Ay5QLgCJEdpk.roa
Signing time: Sat 03 Jun 2023 20:09:27 +0000
ROA not before: Sat 03 Jun 2023 20:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:82:e1:10:ed:1f:aa:bd:03:40:4a:8a:e1:9c:f4:5d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 20:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f85646103e6504e49f6fd00cb940b8022447699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:db:51:b5:ac:a7:c3:77:9b:23:31:82:0d:6b:
63:ce:0c:48:04:e1:84:43:37:cb:f3:e8:d2:12:58:
66:95:a1:c1:e9:64:24:f5:6e:1d:5e:07:93:29:c3:
8d:c6:18:e0:97:17:32:4c:58:6f:30:45:2f:2f:d7:
35:02:c1:8b:7c:3d:d0:d5:50:94:a3:d2:d9:43:11:
27:ee:3a:3a:ff:34:a4:74:c3:b9:08:29:d9:01:52:
76:ac:90:72:0e:7c:2b:09:b8:75:51:4d:b8:91:73:
1a:09:4d:34:5a:6c:66:b1:7e:f6:ad:00:ad:10:49:
52:a6:04:6c:3d:23:ad:59:56:b5:db:b3:a2:db:2a:
f5:d9:a9:60:0e:40:9c:f6:20:26:5f:09:15:f5:b3:
b0:5f:97:ac:2c:a6:97:cb:83:88:11:bd:16:d3:6f:
8d:62:07:ec:e9:3e:28:7c:e4:d3:f4:5c:c4:10:a9:
31:e0:4b:24:d6:6b:ac:0b:d9:9b:da:d4:f6:78:f2:
8d:13:26:05:cd:49:58:8a:d2:7d:3a:f9:ac:d3:c6:
7a:57:0c:5f:f0:8e:c7:c7:d5:03:8f:8e:2e:b1:7d:
5f:4c:98:3d:99:0c:45:dc:de:ac:01:9a:c2:af:b1:
80:80:06:a6:34:3a:a6:b1:92:b2:d2:97:c9:cd:a3:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:85:64:61:03:E6:50:4E:49:F6:FD:00:CB:94:0B:80:22:44:76:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b4VkYQPmUE5J9v0Ay5QLgCJEdpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:ba:9d:c9:94:c8:c0:0d:db:98:57:84:bc:1d:ba:7f:48:81:
86:1e:6b:d3:25:84:ea:d7:df:0f:33:fc:9a:4a:6c:e4:db:26:
d3:7b:1f:56:dc:e7:ad:9d:d4:96:be:89:9e:9c:d1:99:41:0c:
ad:a4:68:b7:e8:6c:52:63:33:23:f8:c5:15:b7:64:80:13:de:
7a:87:84:6d:9e:76:59:28:d2:42:25:83:2f:4a:b5:26:10:58:
ff:49:51:99:df:ec:8f:07:30:e6:51:a9:e4:64:57:82:20:b0:
57:1f:26:a8:01:40:cb:22:b4:ba:92:ee:c5:b3:dd:63:4f:c6:
13:44:72:da:ae:cf:5b:27:d2:3c:9e:e4:47:84:b2:5c:86:be:
b6:46:c3:7e:c8:90:d4:ea:94:11:a2:e1:92:d3:51:9f:6c:1f:
fb:41:36:a6:60:3d:77:87:e3:18:b6:1a:ce:4d:4c:37:2e:a9:
2f:03:c7:ab:85:b6:e1:81:3a:52:07:3e:43:81:14:80:2b:e6:
40:48:a7:0b:38:e9:88:7d:51:f0:eb:bc:70:5e:34:45:b9:c4:
74:9a:57:c3:ec:35:1c:b1:52:88:d1:42:56:8c:79:fd:cf:69:
b6:b9:c1:89:b1:fa:e8:a3:28:7e:4f:d0:d3:73:6d:0a:49:08:
16:35:61:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:04 2025 by rpki-client