Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bIef0UaFZLPTaQuwYdD5DyUzyv0.roa
File: bIef0UaFZLPTaQuwYdD5DyUzyv0.roa (raw, json)
Hash identifier: GqMq3Wj7SmHEeOCqOcdPev3qMzF0fM2MVFK9+uvdyRQ=
Subject key identifier: 6C:87:9F:D1:46:85:64:B3:D3:69:0B:B0:61:D0:F9:0F:25:33:CA:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870ED36148E58EAEDCD11A461BF7A5F6BC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bIef0UaFZLPTaQuwYdD5DyUzyv0.roa
Signing time: Thu 23 Mar 2023 14:15:46 +0000
ROA not before: Thu 23 Mar 2023 14:15:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:d3:61:48:e5:8e:ae:dc:d1:1a:46:1b:f7:a5:f6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 14:15:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c879fd1468564b3d3690bb061d0f90f2533cafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:27:5a:f2:72:90:8d:bf:81:90:da:d5:42:
0f:52:16:4f:5c:3e:50:4a:fa:6e:07:4e:ea:b1:50:
b3:2e:9b:84:e1:40:04:d2:19:f3:3b:f9:e5:3f:fd:
0c:3d:f1:dd:2e:61:e1:6d:78:28:1a:03:5b:14:18:
9b:5a:8c:3e:8a:05:b6:ae:db:7a:ce:de:87:fb:dd:
e8:07:e5:c7:d9:7c:42:d6:3c:15:4f:6b:3a:3e:d8:
38:56:bb:1c:cf:79:d5:60:f2:1c:b0:32:65:ff:72:
d2:10:16:be:9e:6b:bc:c1:e2:e1:8b:94:98:c0:12:
04:09:87:e4:ca:2e:79:b0:37:44:f0:85:57:87:c2:
bc:38:83:4f:65:2e:7b:c6:c6:16:b6:97:e8:5c:cd:
11:e1:0b:6c:56:97:bf:97:08:e4:96:7a:60:d7:81:
a4:01:b6:30:4a:75:e8:66:0e:45:39:d1:45:ce:9d:
09:3d:26:07:f0:13:fc:35:bd:02:19:e3:a8:57:f0:
49:10:fc:78:11:90:a6:2c:a1:c2:04:b8:28:70:8c:
49:cb:26:98:48:03:41:bc:2d:a6:44:9b:8a:c7:9d:
b4:a6:5c:92:16:af:e1:50:6d:d0:c3:be:e5:4c:2b:
f5:a7:3c:ee:a8:20:3d:92:6d:37:16:5a:8a:9a:56:
df:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:87:9F:D1:46:85:64:B3:D3:69:0B:B0:61:D0:F9:0F:25:33:CA:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bIef0UaFZLPTaQuwYdD5DyUzyv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:38:88:47:58:bf:68:db:90:40:27:48:48:45:4a:3d:9e:0c:
ef:27:55:4f:5a:24:1e:aa:13:ef:30:90:76:c9:3f:77:f4:51:
9b:22:3c:6b:5c:28:ac:3c:1e:3a:c3:ca:9e:ca:cb:fb:7b:2d:
4f:db:b9:49:14:84:0c:30:43:51:76:79:e2:f7:27:6a:b6:4b:
92:f2:26:e7:4b:1f:ac:29:3e:fb:85:6a:e1:b8:13:da:60:f7:
75:e0:80:25:88:a1:5c:94:99:a0:22:f5:be:26:18:59:82:59:
8a:c8:b9:30:fc:85:d2:20:9c:3b:46:36:29:f7:83:75:4e:ab:
ec:cc:25:ed:84:44:c2:cd:d9:dd:3a:f3:6c:9a:81:8f:8a:da:
05:cc:a9:99:d6:47:a2:27:a4:4d:bc:af:12:28:6c:47:ab:11:
c8:77:aa:36:94:6f:19:a4:a2:91:e6:2b:0e:aa:17:a3:ad:63:
27:d6:83:2d:ea:56:8a:df:85:43:5e:dd:65:89:4c:6c:ed:31:
00:8d:fd:50:37:62:95:3e:ed:c2:18:0f:db:23:5c:0b:8d:72:
a7:70:74:f6:f4:9c:41:9b:fa:18:cc:e3:66:33:0d:57:06:94:
6d:05:38:b9:95:27:b9:e0:a0:a5:1a:a8:4e:fe:75:e6:58:65:
98:c4:4a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:29:21 2025 by rpki-client