Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dJVE8c0i5QlyP-Os4QHwfq-JwqY.roa
File: dJVE8c0i5QlyP-Os4QHwfq-JwqY.roa (raw, json)
Hash identifier: 3Q2imeberOQ35aF0SkNEVLUAZ8O3aBVGGeS97eGvWHA=
Subject key identifier: 74:95:44:F1:CD:22:E5:09:72:3F:E3:AC:E1:01:F0:7E:AF:89:C2:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182DE5FB11A454F42A17888A6255D72EB1D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dJVE8c0i5QlyP-Os4QHwfq-JwqY.roa
Signing time: Sat 27 Aug 2022 08:16:29 +0000
ROA not before: Sat 27 Aug 2022 08:16:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:de:5f:b1:1a:45:4f:42:a1:78:88:a6:25:5d:72:eb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 08:16:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=749544f1cd22e509723fe3ace101f07eaf89c2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:98:79:83:9b:1b:86:4d:55:e9:04:12:60:4e:
e2:b7:26:5a:b5:5e:0e:eb:02:e7:b8:6b:19:25:90:
dc:ee:19:fd:56:fd:23:95:c7:fa:cf:21:5e:87:ed:
41:4a:5f:ba:73:ae:fc:46:16:08:26:03:bd:c1:1a:
d3:f7:a9:30:73:bc:5a:e0:82:71:86:46:01:ea:c3:
8f:76:5a:07:d6:bf:fb:b9:f7:6e:29:e9:27:c5:77:
7a:08:0d:2b:1f:ed:a8:81:1b:b9:fc:20:a8:4b:ec:
d4:aa:3a:01:25:68:3e:ee:e6:49:28:38:68:27:7e:
8d:44:97:04:37:d1:e2:f3:8a:e3:8d:9e:57:7c:17:
6f:1b:b4:19:04:b7:93:a1:72:23:ce:3b:6c:6b:89:
fb:70:ab:93:d7:8f:c0:ad:5a:43:10:4a:fe:3a:c1:
4d:c4:6b:a3:77:ea:5b:4d:3f:0b:c1:f5:21:97:f2:
bc:4a:c8:7f:e5:88:98:99:40:dc:db:2e:44:c0:33:
ab:b6:f2:cb:5b:4d:c1:d9:f4:24:99:e3:df:7b:3f:
23:47:d2:5d:b7:53:97:8f:6c:68:d1:bf:d3:b5:86:
16:85:6c:3d:10:e9:d7:6a:86:aa:e9:61:87:8e:79:
cc:cc:22:05:e4:0b:db:c0:1a:f7:4f:42:12:91:fc:
ab:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:95:44:F1:CD:22:E5:09:72:3F:E3:AC:E1:01:F0:7E:AF:89:C2:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dJVE8c0i5QlyP-Os4QHwfq-JwqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:90:c6:fb:d6:9b:1b:34:58:d4:44:7f:c7:ff:30:1d:c6:f3:
d9:c8:bd:28:77:c0:15:af:4d:a6:70:b4:70:81:a5:a2:11:40:
11:14:d4:d2:4a:6e:b7:37:a1:26:fd:04:0c:39:28:3e:20:91:
7c:2f:8c:3e:cb:35:ef:0a:59:e5:d5:c7:5b:48:79:bc:71:25:
4d:48:99:8d:d8:2c:86:91:ec:e9:d1:a1:73:62:4d:ee:32:0b:
b4:3a:1b:59:d1:b8:19:01:ad:b5:a6:06:49:95:9e:c3:38:ed:
fb:ad:04:cd:e0:0e:a1:be:92:28:f0:58:5e:2e:e1:57:71:78:
7d:30:5b:67:35:87:a5:61:fa:71:36:99:2b:39:02:58:81:74:
96:96:ff:3d:5d:8d:b3:ca:d5:db:4b:c1:24:0a:82:ce:7d:16:
e7:38:7f:f5:4c:09:c5:59:43:f8:29:e2:59:85:27:b6:3d:1e:
3b:e1:3e:04:b8:17:8d:2f:98:be:f7:f6:e8:85:94:34:d3:a2:
25:53:3e:5b:68:30:1d:86:ab:2d:63:7a:fa:68:73:74:81:64:
41:96:84:e3:8e:1b:b5:75:d3:db:e4:fb:7b:af:27:8f:1c:7c:
dd:eb:ab:85:7e:f1:75:69:3e:de:e5:94:ab:37:1b:7f:49:a6:
15:9e:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:14:46 2025 by rpki-client