Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/crHGjje7pz7_bF2AvnaBYHKZ5zQ.roa
File: crHGjje7pz7_bF2AvnaBYHKZ5zQ.roa (raw, json)
Hash identifier: cZzK3McywALaPr9bScqHBAeBviMZECv8apeIQhNiiuw=
Subject key identifier: 72:B1:C6:8E:37:BB:A7:3E:FF:6C:5D:80:BE:76:81:60:72:99:E7:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A19164A82DFD7CCA281341D3A207D9D6E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/crHGjje7pz7_bF2AvnaBYHKZ5zQ.roa
Signing time: Mon 21 Aug 2023 17:13:25 +0000
ROA not before: Mon 21 Aug 2023 17:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:19:16:4a:82:df:d7:cc:a2:81:34:1d:3a:20:7d:9d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 17:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72b1c68e37bba73eff6c5d80be7681607299e734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:9d:4b:98:de:58:4a:90:b7:dc:ad:79:5a:
03:d2:aa:ad:b6:48:2d:9c:2c:f6:09:0f:8f:04:42:
4e:96:7e:4a:33:1e:0f:03:f6:63:8e:82:3f:37:3b:
a8:42:f0:76:16:cf:48:eb:7a:36:89:06:34:5e:c1:
88:ed:ef:d9:55:68:e8:04:f9:5c:86:2c:7e:d1:9c:
a4:a5:3c:b1:66:10:ee:60:00:86:bf:44:67:e4:73:
d3:44:c4:e4:40:73:e2:16:31:60:dd:fc:a7:0d:cb:
47:15:a7:39:57:9b:31:c1:57:35:77:4b:c7:12:e9:
26:21:41:ba:43:e3:82:c0:20:33:7d:b2:f6:6a:64:
9c:cd:d2:67:b8:42:59:5f:f2:30:55:71:a4:0d:ae:
e9:cd:41:9b:af:ec:42:c3:8f:85:4b:c9:bd:cf:13:
d5:b1:ef:18:3a:d7:df:0f:1b:e9:01:d9:e8:6b:c6:
76:95:db:f9:5a:b8:01:c7:59:1f:4f:41:c0:5f:b6:
ec:fd:ac:25:c0:2c:e6:d5:43:a8:4b:f6:12:7d:a5:
95:7f:a8:b9:75:ad:3c:21:b8:4d:2a:ed:12:ea:d0:
35:56:0c:47:b5:26:67:fd:56:32:b8:f3:6c:c8:3d:
a7:85:ff:5e:c2:e1:07:4e:5d:45:6e:40:fd:dd:11:
b5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B1:C6:8E:37:BB:A7:3E:FF:6C:5D:80:BE:76:81:60:72:99:E7:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/crHGjje7pz7_bF2AvnaBYHKZ5zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:e3:45:51:51:4d:9b:27:0f:e1:36:01:8d:9a:eb:f1:74:5a:
43:1a:c7:38:1a:fa:31:2f:32:c7:68:ea:f9:05:74:52:6f:03:
42:b5:1e:f5:f1:20:7f:e4:a6:b2:59:cd:b4:4e:e4:3e:3c:53:
a8:db:c9:ba:ec:16:40:c1:28:da:92:32:53:f3:e8:19:9e:59:
ce:2d:b4:a7:59:c9:d8:64:a5:dc:26:92:8a:6f:1a:d4:9c:6f:
b9:58:cb:4e:13:79:b6:7c:de:19:71:30:b8:d4:54:1a:fc:dd:
c1:73:19:d3:22:b5:2c:41:d0:f4:34:47:2e:eb:bd:73:1f:49:
c5:13:b0:c7:84:b5:91:a1:d8:58:01:d8:db:3f:b2:7e:42:98:
15:0b:ed:c6:e8:fd:87:ad:21:0e:64:38:77:ea:e7:af:53:4a:
b5:58:92:ec:e0:06:df:17:fa:ef:a2:62:61:a1:b4:4d:47:be:
59:e0:a1:5d:d4:74:cd:1e:7a:e8:d0:bd:b2:7e:4d:a8:1b:6d:
a3:36:70:af:8e:d3:b0:75:22:6d:2c:b1:86:d6:8e:36:b1:73:
e5:f4:cf:4b:59:33:3c:96:05:bb:a1:f9:de:2c:6e:df:d2:8e:
8e:12:c7:84:be:de:ab:98:62:9e:fb:19:d5:9d:26:33:cd:89:
0e:76:87:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 22:41:12 2025 by rpki-client