Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cIeWdevf8WfGiD9hqKSVG_EfrO8.roa
File: cIeWdevf8WfGiD9hqKSVG_EfrO8.roa (raw, json)
Hash identifier: Ae+qiiVcUHPErhKd89dWcG3XFuEttkxIq2HT3unAxOA=
Subject key identifier: 70:87:96:75:EB:DF:F1:67:C6:88:3F:61:A8:A4:95:1B:F1:1F:AC:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DD3AAE695F62CD2C4AB2480380DFAC11
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cIeWdevf8WfGiD9hqKSVG_EfrO8.roa
Signing time: Tue 02 May 2023 16:10:23 +0000
ROA not before: Tue 02 May 2023 16:10:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dd:3a:ae:69:5f:62:cd:2c:4a:b2:48:03:80:df:ac:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 16:10:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70879675ebdff167c6883f61a8a4951bf11facef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:88:24:60:84:13:f8:87:e7:da:5d:e6:a1:
93:86:69:cc:d9:6d:c8:33:22:14:8e:1b:10:0f:72:
76:60:89:23:13:b2:8b:4d:9e:4e:9d:69:46:51:0e:
8b:bd:8c:e8:03:b7:3d:76:bc:ff:1c:4b:f3:a2:58:
1f:79:a7:9d:56:8a:97:c7:8d:fd:f3:90:55:94:17:
64:23:03:59:62:74:44:5d:83:d8:83:eb:ff:83:c2:
6d:df:fa:3d:b8:62:43:18:9d:2c:11:a3:45:d2:f6:
a6:c1:6c:a0:97:54:ce:34:1d:89:5a:f0:17:8c:30:
5e:c1:47:2b:e2:a4:75:30:a7:49:d9:9f:72:05:a6:
3e:de:3b:2d:72:8b:47:c8:d7:5c:4b:bf:fc:b4:40:
4a:49:85:19:8e:1e:1e:f2:bc:5f:93:c5:d7:c4:b3:
9f:cf:b0:2e:61:d0:07:3a:ef:e0:cc:4a:80:17:22:
db:d7:59:e0:30:ac:88:70:a2:11:23:21:47:db:9e:
3d:ab:62:b4:c1:df:5b:14:1d:0c:8f:43:37:8c:0f:
4a:11:5c:95:7d:41:46:31:33:d3:27:7d:93:e4:e0:
08:40:af:39:0b:0c:57:a3:9e:33:73:ed:a2:85:4e:
91:1b:00:0f:d3:e9:17:ab:1d:ab:0d:fe:77:a6:79:
bb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:87:96:75:EB:DF:F1:67:C6:88:3F:61:A8:A4:95:1B:F1:1F:AC:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cIeWdevf8WfGiD9hqKSVG_EfrO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:39:06:f1:2d:2b:b4:b0:8f:dd:57:c8:16:36:19:df:dd:da:
44:e5:31:98:f7:fb:2c:7c:01:b8:12:75:e9:e7:d6:57:66:f3:
67:4c:51:fb:a6:c2:42:5c:f5:7b:38:e0:f7:2e:a8:da:51:27:
46:d9:0c:fe:96:59:0b:a8:f7:0e:ec:39:35:1b:b5:be:f6:71:
0c:46:6d:50:70:41:5a:0b:30:e6:25:31:33:63:ab:e8:b1:6a:
80:44:db:16:df:4c:14:a5:13:4d:55:ac:62:9f:0b:f1:c4:1b:
31:6a:9c:b4:cc:f6:f3:ed:ce:df:c8:e8:46:66:80:93:90:93:
1b:c5:a4:57:d6:14:a4:ce:c5:3e:77:0e:f5:70:3a:73:61:96:
58:a1:a2:8e:9f:12:09:f3:9b:fc:15:ce:c0:42:35:87:dc:50:
75:ab:48:dd:de:08:d3:c2:be:af:4b:38:9e:0f:7b:17:a3:2e:
04:40:f2:02:03:79:b5:40:da:e8:cc:d0:9a:72:49:93:f8:88:
eb:b9:f9:10:df:30:df:fe:9b:ba:3a:ad:39:7f:4e:a8:ba:f5:
58:e7:b0:66:eb:c2:09:03:ee:32:f8:19:b6:88:df:6c:9c:e1:
6f:2a:e1:f0:ff:34:7f:39:f5:30:20:d3:32:24:af:e4:02:1d:
da:02:9f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:36:51 2025 by rpki-client