Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c47sGuOUEC-e9FAbApmRKQ65peU.roa
File: c47sGuOUEC-e9FAbApmRKQ65peU.roa (raw, json)
Hash identifier: 09NQib4KVPCrPmMxmUmJfiU/ldhCqTsY4YpHI3BrRuk=
Subject key identifier: 73:8E:EC:1A:E3:94:10:2F:9E:F4:50:1B:02:99:91:29:0E:B9:A5:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01825010EF3B1BD8167A20D3FC747D8EA474
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c47sGuOUEC-e9FAbApmRKQ65peU.roa
Signing time: Sat 30 Jul 2022 17:04:23 +0000
ROA not before: Sat 30 Jul 2022 17:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:5010:e5b6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:50:10:ef:3b:1b:d8:16:7a:20:d3:fc:74:7d:8e:a4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 17:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=738eec1ae394102f9ef4501b029991290eb9a5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:2a:9a:04:1f:7e:8e:57:4d:b7:00:36:2f:
c6:24:43:b1:2e:5b:43:7c:2f:59:8f:85:5c:7e:a8:
b9:1f:94:2e:8b:ee:25:03:c2:27:14:b1:3d:ef:6e:
53:88:75:c1:55:41:f0:b4:8f:a8:e6:75:7a:81:6a:
c9:e3:ee:e2:02:06:c3:5a:2d:0e:78:33:42:5f:40:
54:4e:77:ea:4b:29:98:b9:38:96:2f:24:f3:64:1d:
24:7f:08:c6:d9:38:82:0f:30:46:57:8f:24:80:e1:
59:43:c3:05:e1:b9:03:d7:f9:c5:4c:0b:29:e0:5b:
8d:58:ea:6a:28:0a:bb:4a:99:15:3d:17:0c:3b:69:
da:e3:0a:3c:b6:ab:fd:6b:44:20:ee:7c:21:e0:75:
d6:7b:de:2c:74:ed:f0:11:9c:56:73:ea:30:6f:83:
e7:6c:0f:f3:df:87:af:8d:dc:cb:75:cf:00:b7:8f:
f2:e8:99:79:27:98:c2:45:45:6d:27:2f:1b:2a:b7:
31:21:5f:aa:42:da:89:c6:31:d9:68:3c:36:61:8d:
fe:bb:bf:0f:0b:d3:57:5f:4e:79:c9:8b:38:e4:63:
b5:13:74:36:c6:71:52:fb:18:bb:a5:78:94:09:79:
34:5d:ff:71:43:e4:b3:2b:80:b6:ca:b0:e4:0f:f1:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8E:EC:1A:E3:94:10:2F:9E:F4:50:1B:02:99:91:29:0E:B9:A5:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c47sGuOUEC-e9FAbApmRKQ65peU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:f7:0a:64:f3:4d:e0:a6:15:db:ee:ca:3f:27:da:70:5b:56:
94:6c:de:40:89:e1:e3:1c:4e:c9:4f:46:2b:cd:58:cf:c3:a0:
1a:f4:b8:b3:cb:8c:32:f3:dc:26:50:34:aa:1d:9b:32:4f:ba:
8c:39:2e:96:52:c3:f5:a8:34:c7:aa:05:2f:a1:45:f0:bf:bc:
49:95:73:34:da:a5:f8:68:6a:f5:d6:75:55:71:56:78:4e:be:
a5:86:b6:e5:c7:1e:5f:b0:91:db:fd:3a:d0:a6:6d:2c:43:13:
67:27:d7:d3:90:44:7a:8f:04:a6:bd:ac:84:40:64:41:4a:a3:
c2:9e:57:aa:86:7b:3b:eb:24:70:3a:26:b6:12:c9:f7:1f:f4:
91:41:61:42:e6:f2:f6:47:cf:66:8f:62:aa:85:62:42:62:7e:
3f:6d:82:af:55:cf:63:60:d6:f0:67:33:47:4b:74:03:5a:3c:
3e:f7:03:f6:73:d2:1f:9d:35:4d:8a:2d:01:7e:f3:93:f7:1f:
c0:28:3a:03:9e:cb:22:9d:24:8c:68:0a:da:51:95:c0:9a:49:
c0:0b:28:30:ef:0c:ba:8c:a3:60:d8:60:c7:bd:8b:ae:10:28:
e0:fe:db:ed:be:e5:19:5e:1c:d5:90:70:83:e9:01:eb:8a:22:
5b:d3:fd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:27 2025 by rpki-client