Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d1A9qYWlIv5P5hrwG2lX7pj6W5g.roa
File: d1A9qYWlIv5P5hrwG2lX7pj6W5g.roa (raw, json)
Hash identifier: 3ZC05zkGPPzvrTC/GSlSlJnZTfFlzLHmwVOK2Q2Key8=
Subject key identifier: 77:50:3D:A9:85:A5:22:FE:4F:E6:1A:F0:1B:69:57:EE:98:FA:5B:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F8B091BE30E11481AB44DFC9C2A12E92
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d1A9qYWlIv5P5hrwG2lX7pj6W5g.roa
Signing time: Tue 15 Aug 2023 10:14:28 +0000
ROA not before: Tue 15 Aug 2023 10:14:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:b0:91:be:30:e1:14:81:ab:44:df:c9:c2:a1:2e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 10:14:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77503da985a522fe4fe61af01b6957ee98fa5b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:cc:09:49:fb:28:38:a2:c2:8b:9f:0b:a3:
8d:da:bc:54:96:86:9e:6c:84:94:7c:6b:fb:8d:a4:
8f:47:d1:fe:5e:fc:fe:31:56:4a:08:3b:fb:82:2b:
ac:4c:4c:ab:42:93:94:a5:d4:ec:e0:67:c4:0f:6f:
a2:77:2e:24:11:d0:51:b3:d2:75:50:19:64:3e:f9:
9b:88:7f:2e:fd:6a:99:1a:82:43:d3:1b:cb:a2:92:
f5:7d:80:79:f1:9e:a6:ab:07:63:1c:8f:db:58:d9:
bb:04:b1:70:df:84:97:1e:54:58:76:92:b3:a7:68:
80:5e:e6:7e:c9:65:56:3f:af:43:0d:1b:92:6b:d2:
01:00:d5:6d:52:82:77:63:4b:45:be:60:9a:52:99:
ee:07:b1:ff:e6:2c:8c:e7:df:f5:52:06:b8:5c:88:
cf:51:2a:52:87:62:04:21:ca:98:ce:ba:63:c6:16:
46:d6:42:9f:4a:87:2b:0c:58:89:d1:8d:c1:41:c8:
99:79:30:49:df:a8:28:67:bf:03:10:28:d0:b7:78:
06:f9:46:b2:26:a9:e5:ed:56:50:a7:25:c5:b1:e6:
81:40:b6:c3:a1:f5:47:cd:23:8a:bc:f6:8b:df:a4:
df:57:e8:71:f6:49:14:24:a3:52:cf:a9:f6:88:21:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:50:3D:A9:85:A5:22:FE:4F:E6:1A:F0:1B:69:57:EE:98:FA:5B:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d1A9qYWlIv5P5hrwG2lX7pj6W5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:51:a9:07:4d:d4:b5:3f:fa:7e:94:af:5a:6d:59:bd:81:8e:
1b:ab:92:e0:14:61:ce:59:99:e3:bb:39:37:4d:53:1d:50:15:
80:f3:2c:41:e3:c2:9f:b3:01:b0:83:65:57:d8:6b:26:12:f5:
1a:95:a1:1d:32:03:3a:ad:dd:98:cd:0f:fd:fd:ce:be:4e:9f:
a8:17:22:96:87:2b:9d:56:56:b6:7e:c6:2a:12:ab:3a:f9:6f:
bd:6c:a2:43:ff:8e:5e:31:21:b0:56:84:37:5e:ae:5f:e1:95:
53:13:38:e4:9e:fd:46:14:90:97:40:47:13:48:f7:99:2d:0b:
60:32:68:5f:bf:da:1e:9f:d8:38:94:9f:3c:84:73:9a:03:4a:
df:31:5e:a6:d7:6d:f6:56:6e:2b:c1:c8:b7:e6:d5:6b:99:13:
08:b8:b1:97:fb:ac:e2:a8:44:b1:24:fe:c0:55:a5:27:ed:ec:
cd:0a:0a:77:ed:0f:91:f0:36:22:e2:32:a6:18:ea:be:2e:9d:
b8:f3:84:ae:5d:46:71:df:59:4d:a3:79:b1:e3:0b:4b:90:47:
5f:97:32:c0:90:66:c1:90:34:8d:c1:9a:18:a4:94:0e:e5:b9:
6d:ff:f7:ef:82:ec:6f:e2:4f:07:f5:94:4d:b1:ac:07:3b:34:
01:b5:b5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:16:46 2025 by rpki-client