Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b_1qI2k6iONBe-D8gDd-jEFRrjE.roa
File: b_1qI2k6iONBe-D8gDd-jEFRrjE.roa (raw, json)
Hash identifier: 9q7EYH8F5Q3pMwJzTE3dkdtHlUlQyK4WcoU0lP5mZ2Q=
Subject key identifier: 6F:FD:6A:23:69:3A:88:E3:41:7B:E0:FC:80:37:7E:8C:41:51:AE:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CC84FD5C98FF629E324E64AF09AAAB0F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b_1qI2k6iONBe-D8gDd-jEFRrjE.roa
Signing time: Fri 10 Mar 2023 17:15:13 +0000
ROA not before: Fri 10 Mar 2023 17:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:84:fd:5c:98:ff:62:9e:32:4e:64:af:09:aa:ab:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 17:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ffd6a23693a88e3417be0fc80377e8c4151ae31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:90:40:be:6b:4e:8e:24:3f:58:2c:5e:c8:81:
ae:08:07:b9:34:87:65:f1:4e:e5:84:24:29:d8:ab:
6c:55:5e:82:14:32:80:6f:56:9d:3b:12:96:1b:60:
34:fb:44:b0:0b:e3:b0:52:8c:9e:89:fb:47:cf:24:
62:34:af:0f:79:6e:f0:80:3a:c7:9d:3c:d0:36:5e:
9c:3e:22:05:e4:57:07:82:e7:8d:69:92:48:2e:f5:
eb:79:f1:7c:e4:a4:50:7a:3f:6b:ea:9f:2a:92:f2:
75:c1:2e:7d:c0:8f:fd:7c:b1:20:18:5f:13:03:f4:
33:d4:c6:d1:68:6b:91:c6:ac:84:1c:ee:1a:d7:7c:
5a:be:8e:cc:36:07:0e:88:77:88:64:b4:ea:2a:cd:
8f:19:be:21:fc:37:14:25:0a:4b:6e:80:d9:af:a5:
57:89:c0:99:04:6d:7a:9d:25:76:8a:02:95:65:e7:
16:e3:91:c8:97:c3:e6:f4:12:66:06:7e:dd:20:36:
f4:d4:e2:40:c1:be:ec:ba:57:10:30:b0:32:d3:c0:
67:99:3f:b4:1d:e9:b2:15:c8:a7:b1:44:e7:21:b1:
37:9e:14:15:3a:ed:4f:ed:05:b7:07:85:86:6d:52:
ef:42:33:f3:bf:90:78:7f:14:8a:53:38:fa:5f:dd:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FD:6A:23:69:3A:88:E3:41:7B:E0:FC:80:37:7E:8C:41:51:AE:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b_1qI2k6iONBe-D8gDd-jEFRrjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:12:4d:49:41:d3:7a:4d:29:20:f1:91:bf:f4:a4:d0:37:53:
4e:da:e2:d5:7c:08:5a:90:59:bd:c9:03:39:bf:fc:23:4c:4b:
06:a0:eb:bb:32:4d:57:c4:52:cf:30:6a:42:56:58:77:87:85:
83:e3:b8:72:a2:4a:be:19:a3:b0:b5:73:64:10:58:b2:f1:5f:
98:bd:40:c7:35:19:71:62:9c:4f:06:b7:43:92:07:f9:29:24:
b8:1b:da:e3:06:b4:29:ed:64:8f:a5:d5:c7:af:45:06:4c:d0:
8c:42:f5:fe:05:83:22:f4:2b:25:7f:db:95:01:b5:3f:ed:70:
7e:ec:76:d4:b2:d2:3e:8b:9e:d5:64:9a:d5:1a:e7:d0:84:39:
ee:71:cb:a8:b0:18:24:62:92:2b:d8:f4:94:b5:0e:3c:a0:ae:
b6:8b:25:30:c3:e6:7c:43:b7:89:20:a4:b3:fb:63:db:31:fa:
60:5f:2c:20:97:01:5f:e9:be:bb:83:b4:a4:b1:0d:9f:af:11:
35:09:18:87:52:44:aa:e9:b3:6f:6f:e9:74:08:c3:ef:6b:e3:
b9:df:94:a7:74:48:b3:6a:2a:5c:92:df:33:20:2a:ad:13:c9:
aa:58:01:00:81:c7:48:c1:7c:fc:77:b0:fd:9c:2c:a4:9b:b9:
04:56:9e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:05 2025 by rpki-client