Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bEwAs0YIICUm2TmSCvkKaCeOQh4.roa
File: bEwAs0YIICUm2TmSCvkKaCeOQh4.roa (raw, json)
Hash identifier: dSIo9NYqqv4QwSoktiL6VoYSU76lj/+r0GVKExej1k4=
Subject key identifier: 6C:4C:00:B3:46:08:20:25:26:D9:39:92:0A:F9:0A:68:27:8E:42:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2068E6C4AEC762015409A3A64DE0EAA5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bEwAs0YIICUm2TmSCvkKaCeOQh4.roa
Signing time: Wed 23 Aug 2023 03:21:00 +0000
ROA not before: Wed 23 Aug 2023 03:21:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:20:68:e6:c4:ae:c7:62:01:54:09:a3:a6:4d:e0:ea:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 03:21:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c4c00b34608202526d939920af90a68278e421e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:41:70:04:50:99:6b:8e:f7:f5:9f:64:75:
f0:de:4d:a0:dd:bc:c5:8d:2a:90:ad:0d:69:7a:dd:
e9:c2:bd:07:b9:16:9c:ab:7f:fd:ac:1d:a3:a9:0c:
9b:45:da:45:39:b4:f1:44:ca:cb:77:b1:78:e2:03:
5c:75:f5:c6:7d:2a:c6:f2:11:16:a4:c9:48:59:28:
87:c0:8f:3a:f4:88:1a:8c:a8:3a:c5:df:64:9b:35:
40:c4:5a:06:b6:09:23:f6:da:76:f1:43:15:88:85:
1d:af:58:b2:2f:ae:0a:38:91:8d:99:43:fe:19:9d:
69:a2:b9:67:60:92:47:cd:6c:19:23:58:bf:b1:61:
c9:46:bd:f8:00:7f:ab:35:fd:f8:74:d4:56:67:a4:
27:27:9d:39:5e:63:1e:2e:86:b7:48:b3:c4:0e:ec:
49:e0:0b:1c:c2:c8:e4:18:54:bc:3d:13:6d:72:0c:
ed:b5:0c:72:91:8c:93:54:98:e0:b9:29:38:56:1c:
8e:b5:c3:a9:4e:24:39:ff:d9:e7:31:e1:ee:38:e0:
c7:3b:96:ba:d1:75:4f:01:48:e7:b6:34:ca:fa:5e:
28:98:fd:a5:10:be:a9:b3:33:ef:9e:99:0e:55:18:
00:96:89:b0:74:21:6a:87:d2:e5:50:5f:4c:04:08:
a9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4C:00:B3:46:08:20:25:26:D9:39:92:0A:F9:0A:68:27:8E:42:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bEwAs0YIICUm2TmSCvkKaCeOQh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:b1:54:f3:57:48:de:45:5b:7e:01:cd:24:fa:39:f2:66:bc:
32:2d:f4:2b:96:27:9c:50:5c:e2:18:89:c9:3f:be:9a:ea:6e:
b1:5e:e3:e9:03:ce:9f:22:19:77:5d:c2:ed:bc:b7:38:b9:2b:
ae:d7:07:11:c3:d5:94:79:b6:a6:ab:c9:09:0c:19:2c:b8:7a:
ff:0b:a7:48:67:19:f1:f7:19:a4:2a:1e:d4:1b:59:2d:4c:97:
b6:4d:07:00:e8:b0:35:fc:b0:e8:8d:5d:d5:3b:69:41:8d:6b:
6d:c7:8d:73:8e:e6:5d:ca:2f:cf:ef:d8:9c:bf:6e:fa:b7:3c:
29:1a:e4:db:50:96:1f:73:f8:42:46:27:40:01:ed:03:16:96:
81:0e:f1:29:e6:d0:8e:b9:62:b7:05:ff:46:12:eb:ce:c1:42:
86:d0:fb:c9:61:01:c8:4b:9f:82:a5:87:b3:d5:e6:04:98:76:
35:78:85:a4:19:dc:a9:49:df:69:03:a3:6a:e4:e0:f6:24:cc:
e9:1d:79:ad:aa:09:c9:19:3f:dd:9c:7f:ae:55:4f:e6:8d:e5:
4b:dd:09:c5:66:9f:22:0e:88:cc:10:73:26:6d:b5:7c:fa:af:
2b:61:0d:eb:f4:b8:7f:bb:e3:fe:3c:e4:87:cb:a9:50:37:49:
f2:fd:cb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:44:05 2025 by rpki-client