Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fUIZKl5nnKrmrhoFhLHML10ahwQ.roa
File: fUIZKl5nnKrmrhoFhLHML10ahwQ.roa (raw, json)
Hash identifier: DIc70X97/w3q5a0YRw/ope+vdCIqCYa0Vf7KLjGAyNQ=
Subject key identifier: 7D:42:19:2A:5E:67:9C:AA:E6:AE:1A:05:84:B1:CC:2F:5D:1A:87:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A0B3D33F16897CE17C95AC3DBA41B4AE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fUIZKl5nnKrmrhoFhLHML10ahwQ.roa
Signing time: Sat 29 Jul 2023 08:11:26 +0000
ROA not before: Sat 29 Jul 2023 08:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a0:b3:d3:3f:16:89:7c:e1:7c:95:ac:3d:ba:41:b4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 08:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d42192a5e679caae6ae1a0584b1cc2f5d1a8704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:a8:b2:e0:f7:1c:25:55:f0:f7:3b:fa:40:
d7:5c:13:66:72:c3:c9:49:aa:d6:fb:87:3c:71:e4:
f5:a8:54:cb:89:c7:45:a5:b6:fd:0b:a3:53:4f:1b:
c2:fc:35:7d:9a:61:1a:fa:72:50:7a:e3:58:b9:46:
41:85:4f:97:19:db:80:32:88:c3:55:72:5e:31:33:
2a:e5:3a:ec:ff:65:54:e4:05:59:1a:fb:b3:e7:31:
d3:37:c8:5c:91:fb:67:48:cf:a7:d5:65:e1:16:91:
09:3f:2c:40:43:74:26:d9:38:ed:62:ea:7d:42:d9:
87:a5:f2:a6:22:f5:43:e1:98:5d:38:30:ff:71:3e:
1b:50:a4:0c:2a:20:84:6d:fc:87:0f:58:9a:e2:5c:
34:1f:ab:5d:26:9e:da:c4:a8:ea:d2:80:6c:bf:25:
88:1f:2e:2c:56:cf:68:8d:3a:37:81:de:b4:3b:81:
b8:15:55:f3:22:4f:d4:88:c6:61:93:f5:62:d0:61:
28:77:84:dc:04:ac:be:90:dd:06:aa:58:30:6f:cf:
c9:ec:c8:95:5b:b7:53:aa:56:16:db:c3:a2:f4:ef:
51:55:80:bd:d9:0e:e1:e0:06:0c:94:12:10:49:6e:
0a:5c:5b:40:fe:fc:16:d3:fb:c7:c6:50:bb:33:25:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:42:19:2A:5E:67:9C:AA:E6:AE:1A:05:84:B1:CC:2F:5D:1A:87:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/fUIZKl5nnKrmrhoFhLHML10ahwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:30:0a:76:ea:2c:a7:e3:b6:3d:e7:ff:5c:78:f0:45:49:9a:
13:92:1a:db:19:9b:4e:b1:c2:8c:27:54:b9:ea:7d:59:78:0e:
10:e2:d3:73:6e:b9:be:6f:a6:a7:2b:75:3c:65:94:e4:00:8a:
3a:73:bd:53:4f:c2:28:55:e9:95:0e:70:58:41:13:c2:dc:da:
7d:63:5f:5f:ae:9c:58:2f:f8:ce:5e:b6:6c:0d:27:d0:65:15:
62:2e:5f:53:f0:fb:2b:5c:44:c2:98:2a:8d:00:4c:81:9d:1d:
f2:93:be:c6:46:ae:8b:67:2f:11:6e:8f:7d:d4:97:6a:18:5b:
15:fc:ee:b9:59:d1:aa:36:a4:e0:f9:31:55:93:a9:32:fa:52:
8a:3b:b4:27:6e:74:07:8f:61:a6:b7:83:96:cb:c7:e8:c4:86:
71:a3:ba:bc:44:72:b3:9e:0b:4d:33:05:1e:01:04:93:f7:95:
41:d5:93:48:64:b4:f2:9a:42:1c:d4:46:7c:d1:95:96:40:54:
54:e1:04:9e:0d:3b:a8:18:37:cd:dd:4f:36:b4:7a:c2:dd:5f:
07:c8:ae:6d:ba:2d:cf:33:0b:e0:39:8c:8e:36:68:4f:6b:64:
b3:3a:a3:ff:2d:05:35:4a:21:7c:45:82:ac:6a:22:ed:9c:d8:
30:48:76:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:44 2025 by rpki-client