Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dU20VGEMTlbHn4L3DguZ41EnwYw.roa
File: dU20VGEMTlbHn4L3DguZ41EnwYw.roa (raw, json)
Hash identifier: e0rw6kLIEUpVBlwM31ngBigpWxQrvFzLkPH3EVuQ0Z4=
Subject key identifier: 75:4D:B4:54:61:0C:4E:56:C7:9F:82:F7:0E:0B:99:E3:51:27:C1:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018338459EB9983F39BF7A74DF6282EC34C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dU20VGEMTlbHn4L3DguZ41EnwYw.roa
Signing time: Tue 13 Sep 2022 19:13:50 +0000
ROA not before: Tue 13 Sep 2022 19:13:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:38:45:9e:b9:98:3f:39:bf:7a:74:df:62:82:ec:34:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 13 19:13:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=754db454610c4e56c79f82f70e0b99e35127c18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:51:28:62:bf:81:c3:55:74:9d:a0:d9:57:66:
7d:2e:85:6a:be:bf:54:79:e0:6f:e6:31:63:12:1e:
29:e5:f5:5e:f4:7b:6c:70:7f:f5:a5:c1:98:ff:6c:
73:0c:0e:5b:f3:13:34:b3:b4:53:bd:cd:fb:13:e9:
fe:53:5e:75:be:40:4a:db:e0:3d:c4:aa:00:4c:9d:
ec:44:21:68:ae:d1:d0:2b:5c:0f:8a:4d:13:78:c4:
bd:e9:19:73:fe:b7:b1:4d:a1:97:46:d0:99:14:12:
c6:e8:6c:09:18:27:0e:8b:a8:1b:65:f1:54:e9:48:
da:53:0b:84:3d:17:9e:e2:be:29:9e:e2:79:0e:5f:
c3:e6:b8:3b:92:7f:70:e6:08:f2:69:9d:44:e0:5f:
91:20:7b:06:cf:38:d0:d0:72:02:52:af:43:d5:de:
3e:b6:02:c2:7e:23:fd:a0:cd:49:b1:67:22:98:07:
63:e5:cb:37:24:16:26:96:a1:20:e3:4f:3d:64:5d:
ed:b9:9f:c7:cc:20:e1:1e:e7:69:f9:5d:80:40:a4:
ba:5e:47:6d:93:4d:aa:c9:89:e1:9f:cb:7c:cb:00:
d1:a5:85:5b:08:d1:d3:22:b5:bc:ad:9e:39:1c:db:
85:89:5d:93:3d:bd:0d:c0:b1:be:45:70:a0:c8:68:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4D:B4:54:61:0C:4E:56:C7:9F:82:F7:0E:0B:99:E3:51:27:C1:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dU20VGEMTlbHn4L3DguZ41EnwYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:16:7b:3e:40:53:f9:df:dc:72:d4:a7:b9:08:36:83:8f:8f:
62:dc:59:26:d5:7f:92:18:93:a5:3a:f3:65:d6:ef:f6:cc:4f:
9d:82:19:27:23:9b:cb:73:0c:b2:e0:a0:5a:66:4f:3f:df:c9:
b6:b3:62:74:5e:98:b9:91:06:68:4b:a1:e5:97:ca:76:1a:27:
35:00:aa:29:34:f7:d9:95:bf:f0:20:a8:96:e1:c1:25:4e:1d:
7a:e7:63:0a:71:a1:88:62:e4:a8:f5:2c:30:03:2a:b9:72:be:
5a:29:96:4b:5a:44:37:96:80:fe:31:a9:77:9a:0d:a5:9b:52:
be:72:b6:65:05:96:f0:74:af:82:75:07:81:f7:2a:91:79:68:
58:cc:52:e8:e6:b2:b1:05:55:29:7c:92:d9:e0:2b:1c:f4:b5:
7f:f9:54:55:18:0c:44:fa:78:5c:c0:fa:1e:88:97:0e:54:76:
a7:03:e6:8d:f6:17:bb:a5:76:35:d2:cb:14:fb:c3:29:e1:ab:
a4:df:00:be:d9:33:90:53:e7:3e:b3:ad:db:01:52:47:84:10:
3e:63:e2:5e:88:a4:ac:7d:3c:f5:54:5d:ff:72:91:66:27:6a:
a3:3b:19:ea:33:aa:c6:dc:db:d8:bb:f9:c7:8e:33:e6:06:fc:
09:9c:af:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:44 2025 by rpki-client