Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b50ayMlqoBT76jJfrGh8scHl4zE.roa
File: b50ayMlqoBT76jJfrGh8scHl4zE.roa (raw, json)
Hash identifier: aBCuvzbiyQkkXNfdV9wpzeo87f10e/Zg/gSek6A6NTA=
Subject key identifier: 6F:9D:1A:C8:C9:6A:A0:14:FB:EA:32:5F:AC:68:7C:B1:C1:E5:E3:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F42B845E1F314C55AF678EA06DDCA30C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b50ayMlqoBT76jJfrGh8scHl4zE.roa
Signing time: Sun 07 May 2023 03:05:05 +0000
ROA not before: Sun 07 May 2023 03:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:187:f42a:ef9f/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f4:2b:84:5e:1f:31:4c:55:af:67:8e:a0:6d:dc:a3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 03:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f9d1ac8c96aa014fbea325fac687cb1c1e5e331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:77:0f:c5:4d:03:80:17:50:49:0f:68:cb:81:
51:c5:91:4d:00:d7:f9:83:d8:4f:59:ab:3f:36:82:
24:a7:14:9e:95:97:70:d7:fc:66:59:6d:9d:cf:ea:
39:67:a8:bc:78:4f:62:a1:7a:c8:96:3c:e8:3f:3e:
4c:d6:50:b9:c8:da:03:2d:ea:09:16:78:85:9f:77:
bb:a5:e3:0e:67:5f:be:77:54:87:8d:32:ed:69:fd:
ff:83:85:31:b0:e7:a5:a0:ff:0a:e3:eb:4b:ad:18:
b5:1a:85:89:ce:bc:5b:60:d8:1a:23:9c:e2:66:aa:
bd:83:b6:f4:76:13:c4:eb:3d:42:cf:ff:ec:72:4e:
63:5b:43:ee:a0:b0:f1:4e:f0:40:03:4c:6c:57:5a:
4a:d8:25:a1:0a:c9:2d:19:53:e1:2a:b2:0a:74:91:
0e:4b:ba:79:16:5d:96:e5:eb:57:40:2b:32:af:3f:
4a:48:2a:9c:91:f9:c8:ed:b5:04:bb:4e:c8:3a:6f:
c1:33:73:cd:c8:fb:62:60:b2:1c:5d:c9:95:53:a7:
e1:89:af:c9:d7:1a:b4:66:9a:65:4a:0d:3e:13:88:
51:52:7f:20:bd:55:00:ae:86:98:08:23:84:29:08:
c8:ad:e0:44:43:6f:e7:f7:b9:73:06:14:f2:93:93:
4c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9D:1A:C8:C9:6A:A0:14:FB:EA:32:5F:AC:68:7C:B1:C1:E5:E3:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b50ayMlqoBT76jJfrGh8scHl4zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:e0:75:71:48:9d:f8:28:b7:d9:14:cb:0d:af:6d:14:fc:ec:
02:12:07:d3:1a:13:8d:71:5f:66:a1:ea:d1:1a:df:f1:53:51:
68:85:59:fa:23:cb:3c:3e:c2:9f:f2:95:49:9a:29:fa:0f:b7:
1d:a7:e2:5b:9a:08:0b:f7:c7:35:ba:e0:b3:b6:7a:30:32:50:
55:ce:87:53:d9:1f:a4:16:dc:cb:0a:7e:7e:e3:b7:a0:ce:25:
a8:aa:a9:23:f4:6f:de:61:c1:2b:b6:44:34:df:d7:2b:15:f0:
9a:02:2a:d6:3c:f4:87:dc:0f:24:da:b5:d9:a9:00:18:c4:99:
9c:28:39:35:ee:69:57:bd:a5:1f:5d:ad:4e:7d:9e:99:00:9b:
98:23:0d:da:12:65:3b:32:c3:e6:0f:bd:53:27:52:fe:6f:e4:
cc:4c:a2:ff:56:65:09:92:53:66:89:e0:81:02:c5:1e:e2:5f:
fb:8a:27:4e:bf:15:35:9a:ef:3e:0f:f9:1d:e2:52:9b:e7:b4:
45:4a:06:c2:6e:f9:1d:b5:54:8a:e1:a8:4c:18:57:28:7f:05:
a2:4d:73:0b:49:1a:16:c3:9f:a2:4d:0b:f5:3d:07:51:fe:9e:
cc:0c:25:c7:52:3c:e5:4a:c4:da:87:4a:01:52:39:e1:4b:ca:
95:3e:1a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:22 2025 by rpki-client