Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c8DLMOVe44_nPCrAlvxBUVivIGg.roa
File: c8DLMOVe44_nPCrAlvxBUVivIGg.roa (raw, json)
Hash identifier: VeNyQeRl705N3LpQXonI4aJeUGSo+CbHw/oHIuKXAYw=
Subject key identifier: 73:C0:CB:30:E5:5E:E3:8F:E7:3C:2A:C0:96:FC:41:51:58:AF:20:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871E0BDD776462CE193F21085C0386942E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c8DLMOVe44_nPCrAlvxBUVivIGg.roa
Signing time: Sun 26 Mar 2023 13:11:46 +0000
ROA not before: Sun 26 Mar 2023 13:11:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1e:0b:dd:77:64:62:ce:19:3f:21:08:5c:03:86:94:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 13:11:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73c0cb30e55ee38fe73c2ac096fc415158af2068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fd:dd:aa:00:74:5b:9e:15:48:3c:82:14:c2:
c5:4b:a2:f0:6e:2f:a5:7e:e5:83:8f:a1:f1:16:a4:
f2:07:de:ba:8c:40:9c:aa:1a:69:62:69:c8:9e:99:
72:ae:5f:f9:99:13:f6:e9:f6:35:84:38:13:cb:78:
be:dd:b3:ab:08:59:aa:74:77:b6:59:6f:3e:6d:eb:
f6:6a:ce:ee:87:b8:c2:c1:d3:67:d4:ed:c1:8c:0f:
6e:ec:82:26:98:d2:90:f5:d8:e5:e2:a9:08:29:bb:
01:a7:6d:9d:e4:3a:66:35:84:b7:3e:3b:58:e7:af:
70:86:4e:f8:8d:55:4a:ff:ee:0c:ad:33:da:9a:35:
21:0b:99:83:c7:07:cd:fc:e6:08:81:97:75:66:30:
13:53:25:82:23:26:bb:1a:ef:0a:b8:80:26:27:68:
f6:52:eb:64:7d:5f:3e:98:87:0d:20:cc:1f:da:3d:
3a:0d:e7:0f:5a:e6:c3:29:ad:53:45:ef:6f:f5:35:
c9:83:3e:0c:4c:ca:ef:2c:d4:22:70:88:45:ca:8c:
34:2e:98:f4:9d:b2:02:60:f3:46:7d:67:de:50:0d:
78:93:4e:55:60:96:10:d9:7d:14:78:dc:8d:cf:ca:
1c:10:97:c0:34:f6:af:bc:f7:56:fa:14:14:42:2c:
47:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C0:CB:30:E5:5E:E3:8F:E7:3C:2A:C0:96:FC:41:51:58:AF:20:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/c8DLMOVe44_nPCrAlvxBUVivIGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:c9:14:cd:a0:ea:20:99:c3:a6:78:ba:95:03:3c:a6:5e:e0:
87:f3:a4:c0:c5:2e:56:23:2d:7b:92:a4:b1:29:41:34:d9:53:
c8:1a:ef:43:fc:83:1c:8a:3f:0d:59:d8:ee:8c:15:99:ee:14:
43:51:71:2a:50:07:7e:5a:93:30:6a:79:1a:3c:08:e7:f9:42:
aa:ab:1d:e0:5f:b4:d1:ac:25:9a:ef:74:b1:8d:1c:0c:a5:c3:
2b:28:eb:10:80:4f:8d:c8:b6:5e:79:6d:75:d4:d7:fb:dc:20:
e4:51:c5:1c:df:a6:5d:80:05:c8:7e:07:99:82:57:4a:e7:65:
a2:77:07:cc:93:62:31:0e:e3:6d:a8:61:d7:74:1a:e4:98:bf:
d0:66:7e:b6:27:2d:ca:1a:c5:3b:1a:62:b0:51:43:90:77:7d:
08:f6:dc:2e:2b:c0:08:a3:bb:32:7c:7f:31:34:fb:11:23:d9:
4b:59:a1:bd:b0:b4:80:b0:7f:d0:57:92:d0:82:42:b3:65:8d:
95:7f:ae:e7:69:ee:72:12:3a:73:4a:80:9a:94:d8:68:09:b7:
fe:a0:e4:6d:c4:93:a0:ef:35:03:99:b8:e5:33:7f:9e:18:98:
78:39:16:09:a3:34:6b:2c:a7:78:32:6f:4f:6d:b2:02:a9:c0:
df:be:33:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:07 2025 by rpki-client