Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d6TFwJUFQpm1nj8P8_PBrzwvOrY.roa
File: d6TFwJUFQpm1nj8P8_PBrzwvOrY.roa (raw, json)
Hash identifier: 5rG/7/LmNdbND8pBOrR31ROumdBpUV8qtzsqRIt9WDE=
Subject key identifier: 77:A4:C5:C0:95:05:42:99:B5:9E:3F:0F:F3:F3:C1:AF:3C:2F:3A:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018857F79A566D54D04AA2488059D2656814
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d6TFwJUFQpm1nj8P8_PBrzwvOrY.roa
Signing time: Fri 26 May 2023 12:10:24 +0000
ROA not before: Fri 26 May 2023 12:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:f7:9a:56:6d:54:d0:4a:a2:48:80:59:d2:65:68:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 12:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77a4c5c095054299b59e3f0ff3f3c1af3c2f3ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:5f:2e:ac:a7:51:45:37:f3:5e:30:b6:19:
db:cb:cd:20:5f:de:61:fd:53:ba:a9:1e:1a:db:5f:
bc:e3:49:2d:b7:e7:c9:f7:02:3b:e9:54:a2:28:c5:
f9:a7:05:d5:6d:c4:21:59:39:f6:75:6e:70:71:85:
88:5a:78:65:21:2f:a1:b7:5c:a3:f0:cd:db:60:e4:
4e:3c:6a:22:31:0e:d7:de:ba:69:a3:b7:d8:35:99:
df:94:52:26:5a:63:21:19:94:1c:ff:01:ad:a3:19:
49:ce:b4:ee:f7:ea:28:eb:86:70:dd:e9:7e:1c:93:
a1:8c:1d:d3:ac:a1:9f:de:8f:56:3b:19:28:42:b3:
57:38:cf:2b:a2:c2:55:36:37:90:27:b4:97:35:5e:
4d:ce:52:c4:46:3d:53:cc:41:a7:d9:94:57:a0:ac:
e7:0c:a4:79:78:c6:54:2a:96:ba:f0:f6:41:e3:ef:
bd:df:d1:aa:68:a3:e7:59:97:80:5b:14:d8:0a:8b:
6a:a3:91:6a:49:5a:1e:d3:dc:77:a2:04:df:e6:93:
b0:8c:94:ee:43:58:a4:66:8b:fd:4b:9c:db:49:b0:
1c:36:b9:49:24:fa:e3:50:3f:a3:e9:f0:a1:c0:3c:
fb:9e:9a:bc:d4:5b:f0:21:08:d5:f6:10:2e:52:2c:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A4:C5:C0:95:05:42:99:B5:9E:3F:0F:F3:F3:C1:AF:3C:2F:3A:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d6TFwJUFQpm1nj8P8_PBrzwvOrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:50:d9:f5:e3:72:d7:8a:30:12:ae:b2:bf:85:27:e2:dc:bb:
ba:41:d4:09:3a:74:75:98:51:79:65:7c:24:e4:a6:2f:5f:28:
7b:93:90:f2:bc:ba:0d:dc:d8:e8:15:1e:33:03:89:05:48:ce:
78:61:8e:23:f1:39:4e:24:24:47:e5:6a:a0:2e:2c:94:9f:6d:
f4:98:99:35:47:c0:55:3f:8e:ce:93:2d:67:a2:29:94:44:4c:
83:f7:b6:ee:18:0d:e1:26:af:63:43:bd:16:12:60:5f:f4:be:
19:ad:32:99:d0:fd:13:aa:71:0a:48:41:a2:55:9d:a1:b3:eb:
e2:65:59:a9:26:54:d1:3e:b8:31:a1:ff:5d:87:5f:7d:eb:50:
42:d8:b7:7a:d1:12:7b:90:a1:2e:2d:d1:2d:b6:fa:fb:22:db:
87:d6:24:d9:bf:4c:ba:e1:24:6c:90:23:2b:30:85:b0:e0:c5:
e1:a0:90:48:46:17:63:1e:2e:f6:2e:01:32:eb:79:ad:3a:56:
b2:d4:e8:9d:46:b2:5c:83:07:2d:b8:30:ca:0e:a8:45:ec:ae:
88:8c:82:d1:45:28:45:30:12:e2:75:5d:d7:45:f8:81:ed:69:
05:7f:20:e1:40:ae:88:9a:39:d2:79:8e:ac:2a:76:46:1a:86:
64:1b:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:20:54 2025 by rpki-client