Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dK2mSDH7ng1RdDewbFcwb-4G4UE.roa
File: dK2mSDH7ng1RdDewbFcwb-4G4UE.roa (raw, json)
Hash identifier: R/0TE31UhN0Q14mTHWKZFOSxR2wnGRleyPqftEvMPWA=
Subject key identifier: 74:AD:A6:48:31:FB:9E:0D:51:74:37:B0:6C:57:30:6F:EE:06:E1:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885A1C029F2716E76319B60C7AFF89B44D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dK2mSDH7ng1RdDewbFcwb-4G4UE.roa
Signing time: Fri 26 May 2023 22:09:25 +0000
ROA not before: Fri 26 May 2023 22:09:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5a:1c:02:9f:27:16:e7:63:19:b6:0c:7a:ff:89:b4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 22:09:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74ada64831fb9e0d517437b06c57306fee06e141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:cb:af:38:10:3b:15:5a:ac:f1:51:05:08:
86:ed:6a:24:14:3f:ea:6d:28:7e:f1:03:d3:4c:02:
18:7c:50:64:75:b6:35:c6:f1:94:c6:63:08:31:0a:
50:71:94:39:1f:ed:ee:ed:b0:bc:81:19:b2:26:ab:
62:6c:a0:ca:96:df:1d:6d:0f:f7:68:f6:fd:2f:fa:
18:12:de:36:f4:09:27:e7:85:2b:9e:b4:9d:7b:7a:
ae:50:07:74:31:a8:93:2b:39:82:75:5d:90:ce:57:
16:e0:b8:44:39:f8:66:e3:0f:48:ef:91:a0:71:2d:
cb:68:b1:cf:7c:de:f4:69:40:68:3c:51:c3:cd:e8:
c0:37:31:75:61:f7:1e:50:fc:2b:ca:c5:89:e5:8b:
0f:ba:03:4c:be:c3:a0:df:fe:e8:3f:e2:52:fe:fe:
22:c0:fb:ad:60:75:f6:64:5f:b3:3b:8d:d0:0a:c3:
81:fa:a5:13:11:66:8f:5a:d8:68:31:86:da:09:10:
43:75:4b:e9:55:69:9d:bf:b7:ff:d0:b0:b8:a7:f1:
b2:e9:cf:ff:48:ac:f4:12:0a:e0:d3:d9:60:25:14:
38:bc:fa:bc:47:ed:50:24:73:8c:1b:32:d9:8e:cb:
7a:ff:50:78:10:19:a2:63:72:b3:1d:59:f3:d1:67:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AD:A6:48:31:FB:9E:0D:51:74:37:B0:6C:57:30:6F:EE:06:E1:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dK2mSDH7ng1RdDewbFcwb-4G4UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:c2:82:76:fa:60:f8:b5:75:ce:de:b5:5c:17:cf:42:a5:64:
7d:79:1b:db:da:c4:20:60:75:c2:4e:d6:b3:06:b2:13:f2:26:
45:13:05:03:f9:ef:e8:a7:04:a0:7e:ae:a1:58:cb:4d:c8:46:
54:34:75:4c:17:40:a2:90:c4:7d:51:0e:75:79:10:8b:52:92:
0a:c3:cd:c4:94:d4:32:64:19:9d:f0:5e:0b:7f:7c:4a:74:95:
86:96:6e:ab:a9:52:b4:bc:83:fe:a2:da:63:7f:c4:e7:45:68:
1a:71:f2:6f:a5:8b:4e:ef:e6:e2:05:81:fe:20:3a:bc:58:e5:
45:6d:56:24:b0:ad:7c:02:dd:01:8c:b4:ef:b4:59:0c:51:f8:
2f:72:cd:d4:34:b7:c5:b5:99:99:c2:a2:96:d2:11:cf:9c:56:
79:94:7d:02:6e:7a:cc:fc:ac:78:d9:3e:6b:78:9a:5c:8a:c9:
6c:e4:2f:38:01:7d:3d:80:32:fa:00:e3:6d:8b:d4:42:02:6b:
a0:3e:0c:3a:2b:a3:4a:e8:ff:13:18:18:f1:80:65:01:75:9f:
af:35:34:f6:1c:39:8e:32:3e:63:bd:35:4d:51:68:0b:af:be:
8b:2c:2d:d0:cf:a6:c2:ea:21:3b:0a:24:95:03:4e:4a:ed:12:
ff:3d:e3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:45 2025 by rpki-client