Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d4VJ1iWeGar0sRqQzHGxdj75GsE.roa
File: d4VJ1iWeGar0sRqQzHGxdj75GsE.roa (raw, json)
Hash identifier: ypzgIjY+baeEmA6m9e4D9lf3tVwwxVp7ihFV+He7ZlA=
Subject key identifier: 77:85:49:D6:25:9E:19:AA:F4:B1:1A:90:CC:71:B1:76:3E:F9:1A:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E0DF9CF8D3A9F46E48ABB8EA891BB1B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d4VJ1iWeGar0sRqQzHGxdj75GsE.roa
Signing time: Thu 10 Aug 2023 19:14:58 +0000
ROA not before: Thu 10 Aug 2023 19:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e0:df:9c:f8:d3:a9:f4:6e:48:ab:b8:ea:89:1b:b1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 19:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=778549d6259e19aaf4b11a90cc71b1763ef91ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:3f:0e:2f:31:c0:ee:fe:b7:4f:bf:61:ff:
4e:f1:15:1f:0a:d3:b1:88:36:96:bd:ad:0d:7b:c9:
a7:6a:f9:90:f5:ad:7e:2a:30:7f:d2:3d:50:46:ae:
0d:b2:35:85:8a:45:bf:4b:6a:6f:b3:62:1f:52:d7:
e4:b1:fb:a7:bf:e0:0c:c6:5a:a0:c0:01:3a:e9:2d:
be:e4:2f:d6:6d:72:ea:5e:3f:75:fa:8e:eb:a6:49:
5b:fe:4c:68:6d:97:93:eb:a8:3c:4f:00:66:1c:a0:
a3:ed:34:a6:cf:fd:4f:12:4a:d9:44:b4:c9:6a:6c:
aa:75:f8:5f:60:6f:77:be:39:a4:c7:1c:e6:d1:cd:
00:7a:97:57:28:81:ad:52:68:a9:12:30:f3:e1:e4:
66:aa:54:4e:c4:07:1b:c7:90:5a:bf:14:1c:93:2a:
ee:9f:46:f6:dc:e5:a5:9f:dc:02:90:74:02:4b:5d:
33:06:31:9b:23:43:6f:fb:e0:79:17:c0:bb:f7:5c:
74:b3:19:dc:03:dc:a0:5e:8f:50:b5:48:a4:09:14:
b6:b6:02:1f:65:6d:d2:39:9a:eb:35:e9:b6:e9:c4:
35:c7:86:86:41:dc:d7:8e:ab:3f:38:3e:b9:f2:74:
b0:2a:02:5e:f6:a9:1d:eb:0a:cf:0f:8d:00:f7:4b:
33:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:85:49:D6:25:9E:19:AA:F4:B1:1A:90:CC:71:B1:76:3E:F9:1A:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d4VJ1iWeGar0sRqQzHGxdj75GsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:f2:70:fe:85:08:62:38:5f:d9:f2:f9:65:e0:b4:17:47:78:
ac:f0:68:33:ad:72:af:46:b9:c9:88:ae:18:f2:be:f1:8f:5f:
de:f6:6d:e0:ec:0b:2a:b8:74:07:6a:bd:02:51:68:be:1f:8b:
63:af:56:dd:f4:27:24:64:71:fa:7c:9e:6b:a3:6f:27:1e:43:
37:8a:9e:53:0b:6e:fb:1c:7e:8b:59:87:a7:ab:70:6a:37:da:
74:5f:15:28:ab:db:1d:21:fd:cf:74:8e:0e:90:0b:36:41:0d:
d2:70:54:71:7d:5e:65:40:72:d4:5c:7f:57:2d:64:2d:42:33:
64:69:06:db:70:7f:7d:49:4e:74:e8:40:43:51:57:8f:6e:01:
2f:fa:a1:b2:d6:38:56:8d:6a:04:e7:b7:11:14:eb:fe:3f:ec:
e7:c3:e5:09:7f:68:36:13:c7:a6:a7:85:9e:91:b5:c4:7c:14:
14:ac:3d:5b:52:76:9e:f4:66:c2:09:cb:ee:d8:f1:59:2b:41:
d9:60:44:45:04:f0:1e:19:0d:2e:3f:b5:09:27:1a:e3:02:02:
bc:a5:72:62:f2:ca:27:31:81:97:61:b2:00:1a:97:3b:e6:67:
41:43:67:17:68:d3:ca:2e:4a:e0:06:34:42:e2:50:0c:67:4b:
ef:21:78:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:01 2025 by rpki-client