Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hNO9vSDBlctAl5WdvUNmyzeLVOI.roa
File: hNO9vSDBlctAl5WdvUNmyzeLVOI.roa (raw, json)
Hash identifier: dJE/ouqOjytPFrAObExX136Gs3fevnF6bPuckmEbFzs=
Subject key identifier: 84:D3:BD:BD:20:C1:95:CB:40:97:95:9D:BD:43:66:CB:37:8B:54:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188977A82CD277FBBA31DD2C5460472A358
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hNO9vSDBlctAl5WdvUNmyzeLVOI.roa
Signing time: Wed 07 Jun 2023 20:09:28 +0000
ROA not before: Wed 07 Jun 2023 20:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:97:7a:82:cd:27:7f:bb:a3:1d:d2:c5:46:04:72:a3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 20:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84d3bdbd20c195cb4097959dbd4366cb378b54e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:73:63:e9:00:d0:9b:da:9b:cb:66:0d:41:
23:68:10:72:36:41:32:96:f9:2b:55:7f:00:32:72:
7b:68:d9:87:f0:ab:af:e5:38:a8:ca:cd:c5:94:bd:
c4:54:f3:18:3c:76:f6:a4:bd:b0:ad:09:aa:ac:6e:
9d:17:5d:05:87:78:de:e5:c4:bd:18:10:11:9f:07:
cd:ef:b8:f8:04:fd:e8:17:21:80:60:95:62:f6:61:
63:f7:57:3e:15:21:7a:e6:e3:06:ec:d4:7b:7d:f7:
2c:25:9c:aa:4e:c5:a7:72:5a:7f:24:9f:62:1a:34:
ba:a9:6e:1b:85:f8:2e:5f:1b:55:c2:12:a1:75:ba:
53:05:59:53:09:66:52:cf:e6:61:8c:0a:59:b3:14:
60:aa:22:85:eb:62:c8:f2:ba:28:6a:f7:c6:12:b8:
ed:9f:4d:3b:a4:08:cb:99:d6:c1:2c:e4:3f:3b:14:
2c:45:66:df:f6:e1:0d:c0:20:68:5c:7b:54:7b:0f:
b2:2c:d6:a5:84:77:69:7a:f1:56:ec:5f:08:ae:40:
90:b0:6e:cf:32:2a:e5:28:32:b1:4c:39:89:32:20:
13:12:07:c0:ac:70:d7:43:ec:b9:72:b7:19:ff:72:
17:ec:b4:5a:ed:ed:09:38:a8:aa:a7:42:a6:f0:bc:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D3:BD:BD:20:C1:95:CB:40:97:95:9D:BD:43:66:CB:37:8B:54:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hNO9vSDBlctAl5WdvUNmyzeLVOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:70:d9:85:b6:91:a1:35:6d:92:29:1c:01:71:fd:8e:c4:fa:
0c:f3:a9:db:4d:49:1e:a1:1f:e8:87:c4:97:8a:e5:19:59:2e:
a9:b1:d7:8e:f2:d8:47:4b:c4:d0:9b:bb:61:fc:ae:8b:e5:ca:
80:15:b7:ec:e5:1f:e3:a7:1b:92:d4:fa:8e:11:2a:98:d1:f0:
1d:8e:9e:5e:22:02:51:fc:20:15:fc:2a:9b:30:b0:09:23:46:
f2:40:5c:71:60:70:90:b5:91:71:dd:e6:1b:90:59:a1:a4:23:
d8:4f:5e:19:ca:80:2f:10:22:6b:7e:e2:3b:a4:58:6a:72:3e:
1a:36:05:cd:10:f0:55:52:ad:67:d9:eb:b4:42:0c:c6:bf:06:
07:bd:ae:5c:9f:ca:d8:45:40:40:67:94:6c:6d:14:87:32:6d:
9d:a7:74:92:8c:55:94:5a:0d:04:0c:57:23:8a:e2:f2:7b:e0:
f9:52:28:61:51:28:a1:7b:d5:bf:53:4e:92:8b:a4:e9:84:a5:
cd:a5:f5:7d:4d:cd:dc:d7:e0:a3:f3:96:83:b6:32:df:66:31:
24:8e:5d:eb:98:c2:f4:60:97:3f:d5:a7:50:c3:ab:34:64:73:
e9:73:6b:d9:38:73:3d:b0:53:a3:24:52:5e:e3:c9:8e:2e:f3:
86:fb:6b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:17 2025 by rpki-client