Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e4kVLXErWXstuf6CyD60jAM-FYU.roa
File: e4kVLXErWXstuf6CyD60jAM-FYU.roa (raw, json)
Hash identifier: CnGWdsUCSEHMKiwjuDeNmI1tctlr+nKdw2fXpQVhwjA=
Subject key identifier: 7B:89:15:2D:71:2B:59:7B:2D:B9:FE:82:C8:3E:B4:8C:03:3E:15:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018938D9453BE975C08A72470C1EC48EC82B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e4kVLXErWXstuf6CyD60jAM-FYU.roa
Signing time: Sun 09 Jul 2023 04:11:50 +0000
ROA not before: Sun 09 Jul 2023 04:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:38:d9:45:3b:e9:75:c0:8a:72:47:0c:1e:c4:8e:c8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 04:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b89152d712b597b2db9fe82c83eb48c033e1585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:0e:3b:fa:d3:5f:de:4c:e1:74:c9:b1:7d:
d7:3b:c7:ca:fd:7d:e3:cf:25:21:e5:f0:50:f2:4b:
32:d2:7c:da:f7:ac:0d:dd:f3:24:27:d9:27:d1:e2:
d8:c7:86:12:5b:51:9c:f8:bc:96:3b:29:83:e2:e1:
0e:0f:70:0a:27:4b:27:24:7f:3b:93:16:89:d7:ff:
a6:a0:a2:b3:63:41:2e:30:6c:9d:5c:3e:c3:2d:dd:
81:3c:0e:0f:dd:66:a5:2b:e6:4b:6c:d5:ca:cf:c3:
ce:bb:3d:49:47:6a:b4:c8:ed:40:e1:a4:7d:1d:7d:
43:3e:29:4d:ca:28:89:09:36:b2:a6:ad:94:be:de:
4c:4e:20:94:79:13:18:48:c9:bb:b1:6f:cf:dd:79:
18:9e:a8:b7:3a:b8:23:bf:78:47:cd:6d:43:13:bd:
42:7d:09:d6:70:62:2d:d8:7e:d5:02:63:f9:82:21:
c1:60:63:b1:91:ce:cc:2a:ef:9d:5d:fc:14:4a:bf:
15:5e:c1:e7:3c:e9:c7:27:d3:89:ad:89:f0:9d:c5:
65:31:6a:d2:f9:96:3c:f4:92:e3:79:f8:af:42:c6:
f3:2c:c1:c3:44:f1:11:6e:05:c3:b6:ab:17:6c:eb:
b4:a4:3f:31:e3:12:cb:9f:e0:3a:8c:18:90:5b:2d:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:89:15:2D:71:2B:59:7B:2D:B9:FE:82:C8:3E:B4:8C:03:3E:15:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e4kVLXErWXstuf6CyD60jAM-FYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:c6:b6:55:3a:a3:52:ea:6e:b0:2a:2c:68:d4:22:34:1b:c4:
45:81:87:ac:4b:55:9b:56:7d:ce:12:5c:4c:3f:55:0c:96:9b:
49:b7:e4:64:d5:73:ef:b3:42:c3:58:ae:ff:13:03:14:b1:09:
a7:cc:8a:ac:61:65:6a:2c:ba:4f:fa:39:a1:b2:92:9b:4f:a2:
50:2b:4e:79:78:23:97:51:3b:99:c6:d4:9f:b2:37:4f:89:bc:
6b:07:73:67:78:7b:e0:ab:33:1b:46:c1:18:4c:30:c2:94:9c:
17:1e:3f:a6:ef:11:5d:34:d3:19:7c:d2:97:eb:21:07:29:9e:
1a:e6:14:43:97:54:62:19:e3:c1:ba:05:03:45:a4:94:5a:16:
26:b8:7a:29:cd:a1:da:4d:bc:53:75:56:0b:a3:7d:f7:6d:61:
f7:a4:98:1d:d5:10:64:18:a7:b1:7f:04:cb:39:88:ef:f7:50:
b7:d3:13:7b:fa:98:36:ec:20:cd:3e:ef:81:e4:4c:04:83:0d:
d8:09:70:f7:a1:92:4c:82:5d:39:74:79:93:14:67:3d:b7:bb:
d7:e2:0a:cf:db:ec:a2:61:9c:89:68:38:cf:81:60:47:39:0e:
b1:e2:aa:ab:c1:7c:a4:9b:4a:77:c5:dd:c9:31:90:1d:b7:3d:
9f:af:cb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:26:55 2025 by rpki-client