Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eXTVmKiZXKvmxG2KZj469F-LADk.roa
File: eXTVmKiZXKvmxG2KZj469F-LADk.roa (raw, json)
Hash identifier: v+jQhzupALmDRksNhJDkyk3I/He75doanlh1yNIfkDk=
Subject key identifier: 79:74:D5:98:A8:99:5C:AB:E6:C4:6D:8A:66:3E:3A:F4:5F:8B:00:39
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BA18EBFE7B75EA621008DC73CF32BC28
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eXTVmKiZXKvmxG2KZj469F-LADk.roa
Signing time: Tue 07 Mar 2023 03:24:00 +0000
ROA not before: Tue 07 Mar 2023 03:24:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:18:eb:fe:7b:75:ea:62:10:08:dc:73:cf:32:bc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 03:24:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7974d598a8995cabe6c46d8a663e3af45f8b0039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:3a:9c:be:ab:5b:83:ab:35:bf:97:ae:35:
f9:ed:d6:84:f8:1f:8a:d5:51:5d:43:f9:eb:77:10:
cb:8c:b9:21:a4:87:43:45:04:23:aa:32:c2:fa:68:
b9:e6:1e:f5:36:d8:15:f9:64:ee:e5:09:84:db:de:
7f:b0:2a:76:6f:a8:4e:0b:4c:2a:df:d0:16:56:8f:
49:42:71:8a:9c:3d:5d:1c:95:5b:fc:19:f0:1f:79:
25:04:c9:f8:49:a0:ca:bc:aa:dd:6c:14:41:8e:46:
8b:a2:e0:58:57:27:08:c4:ea:30:75:2b:16:ed:66:
69:8e:c3:1b:d0:24:3f:26:47:48:1d:0a:92:c1:da:
2f:2c:f0:67:32:2b:09:34:da:48:62:b2:cf:bd:dc:
e3:f8:90:20:be:7b:cc:23:a6:02:8e:dd:b8:21:e8:
bd:30:3d:6e:50:01:a0:ea:6c:2b:24:c3:a0:9f:1b:
a4:0b:4e:b2:9a:9f:e5:58:d1:6d:0e:0e:ae:30:35:
b2:ee:6e:d7:a6:5c:f9:7b:8e:0c:2a:35:0c:5c:3b:
51:24:4c:8a:86:e1:32:53:52:02:a9:5f:b5:66:60:
54:d1:85:a3:7a:e8:33:ad:b5:77:e3:49:8a:70:46:
08:f5:25:c4:f0:a9:17:3a:15:ae:fe:83:72:cf:31:
e5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:74:D5:98:A8:99:5C:AB:E6:C4:6D:8A:66:3E:3A:F4:5F:8B:00:39
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eXTVmKiZXKvmxG2KZj469F-LADk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:fa:12:1d:63:3f:6c:71:b5:cb:64:ae:85:f0:78:f9:86:1b:
b1:81:60:f0:50:95:f9:12:1a:04:ff:84:7c:83:0f:eb:d0:d5:
c0:9e:c3:30:1d:6f:a1:50:60:a4:60:36:a9:4e:a6:c3:ee:0d:
6c:62:a4:51:dc:31:79:a3:7d:54:7a:fd:52:21:cb:bd:fd:1e:
38:8a:0d:c2:c2:6d:87:d3:59:d9:51:aa:ab:22:f8:f0:26:7a:
4a:86:cb:dd:e9:ad:8f:b2:43:57:ff:ff:5f:be:35:5a:f9:80:
56:2c:0a:d3:9b:48:27:6d:5d:04:d4:e2:4e:9f:00:02:27:69:
27:0c:9d:6f:d6:2a:3d:3b:43:98:37:46:21:f4:9d:c3:09:61:
3e:bc:82:45:5f:53:00:a2:7a:7f:e7:51:1a:9b:dd:09:fa:62:
af:10:fd:2d:0c:25:e7:dd:14:60:4f:07:9c:08:89:35:4c:67:
24:81:a7:9f:da:03:1f:f4:1f:c7:63:d6:27:e6:73:1b:3f:57:
c2:76:8a:7b:af:d8:da:59:3b:9e:38:03:66:45:7a:1c:2f:62:
ea:72:f5:33:ea:7a:46:df:30:21:f5:17:48:ee:4a:64:87:1e:
47:89:a7:93:05:e2:c7:1a:fb:a3:b5:89:7b:ca:7e:4d:91:f8:
e3:6c:f9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:56:23 2025 by rpki-client