Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e4Y8P2IYzy0vK_nmEEgM_j-hsLw.roa
File: e4Y8P2IYzy0vK_nmEEgM_j-hsLw.roa (raw, json)
Hash identifier: vhGbq0hWh/z2wN0QLRwV+LJXPegdvQY7BivM8bXVoaM=
Subject key identifier: 7B:86:3C:3F:62:18:CF:2D:2F:2B:F9:E6:10:48:0C:FE:3F:A1:B0:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018777F24F49421371C089503936A697EA73
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e4Y8P2IYzy0vK_nmEEgM_j-hsLw.roa
Signing time: Thu 13 Apr 2023 00:09:41 +0000
ROA not before: Thu 13 Apr 2023 00:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:77:f2:4f:49:42:13:71:c0:89:50:39:36:a6:97:ea:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 00:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b863c3f6218cf2d2f2bf9e610480cfe3fa1b0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f2:4c:21:a9:51:09:08:7a:ba:46:02:3f:53:
47:fe:c2:97:12:f5:c6:d5:ef:e1:2e:b4:88:73:bc:
a6:ee:22:ef:ec:eb:c6:cb:34:8a:34:20:1c:1a:8c:
e2:74:41:24:c4:42:22:45:a8:b3:e6:04:a0:4f:54:
e4:20:36:fc:65:00:ed:ca:25:c8:b4:4d:1d:2d:1f:
83:62:fc:3a:d7:a5:98:06:08:ba:9c:6a:82:15:d5:
4e:1b:f0:1d:07:59:c8:96:da:be:3a:03:d5:3f:cb:
a4:39:8f:3b:58:b8:5d:28:a2:01:7c:a8:bf:f3:c8:
24:a2:71:46:a9:53:8f:9b:e6:9a:21:c5:c4:a1:d1:
5c:f9:74:96:d6:c1:e0:5a:f7:a3:e0:e2:92:38:b8:
b1:a4:c8:c3:c2:50:b6:fa:2c:97:f6:e3:e3:bb:8b:
8e:72:ab:c7:a5:1c:bc:d4:0d:e2:d3:8f:9b:db:70:
2d:7d:60:97:66:3b:a0:a8:23:c0:3d:45:7e:9b:8f:
00:94:84:6b:0a:b7:80:ef:f3:5d:c3:5f:ef:14:c9:
2e:9b:a7:ca:cb:16:4b:0d:aa:5d:9f:75:5d:71:66:
dc:f1:48:7c:4a:4a:e8:41:29:22:5a:7b:0d:6f:8d:
fc:b9:ce:d4:ca:ae:77:ba:fd:17:a5:69:2b:ec:3b:
f9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:86:3C:3F:62:18:CF:2D:2F:2B:F9:E6:10:48:0C:FE:3F:A1:B0:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e4Y8P2IYzy0vK_nmEEgM_j-hsLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:40:95:dc:28:7c:6b:b2:b8:61:7e:8b:2b:60:70:24:df:51:
11:71:9b:49:03:c8:7f:29:8a:1b:63:b5:aa:24:e2:e8:bd:86:
79:c1:9a:b4:23:c3:34:ae:ff:25:64:23:ae:44:32:4d:b2:c7:
9c:16:6f:73:92:0d:cb:27:cd:e5:ab:7e:d7:24:39:a2:f1:62:
bd:fa:b8:50:70:f8:45:3d:fc:fb:2d:86:bb:f4:97:c0:ce:23:
79:75:96:7d:6f:40:48:aa:66:a4:12:b8:57:d4:5e:4b:e6:ee:
1e:df:1d:8a:64:ca:7b:5e:ed:29:25:37:ea:fd:b8:5b:21:8c:
c5:4e:6c:22:f9:61:56:01:c8:fe:e6:b6:af:45:34:16:aa:bb:
45:eb:3c:8a:b7:66:b2:6d:21:19:2e:6d:d5:b6:cb:c6:19:05:
ee:a9:f6:e9:a9:f4:b6:76:a1:65:8e:63:37:9c:a3:ab:e4:25:
88:a0:1c:53:05:59:a1:ec:cf:77:36:d9:3c:62:25:c1:44:5c:
de:16:e4:c2:72:05:c8:06:69:77:c7:fa:e5:ed:3c:1f:d5:9d:
c2:37:2b:80:8e:a0:02:02:95:de:ea:73:fa:b7:8a:eb:63:34:
f0:c2:69:6e:16:51:ba:56:a6:48:73:30:e1:11:8b:e6:39:c8:
f7:d2:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:45:00 2025 by rpki-client