Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i0lml6HMh3Y_pCirJExg7ufFwRc.roa
File: i0lml6HMh3Y_pCirJExg7ufFwRc.roa (raw, json)
Hash identifier: /chLoPVEkCfeScKG/79dNcIdrA0DOzyitnv2jjILYEg=
Subject key identifier: 8B:49:66:97:A1:CC:87:76:3F:A4:28:AB:24:4C:60:EE:E7:C5:C1:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873D98C42D9CC2E6C1B3DFF4F413F2277F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i0lml6HMh3Y_pCirJExg7ufFwRc.roa
Signing time: Sat 01 Apr 2023 16:13:54 +0000
ROA not before: Sat 01 Apr 2023 16:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3d:98:c4:2d:9c:c2:e6:c1:b3:df:f4:f4:13:f2:27:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 16:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b496697a1cc87763fa428ab244c60eee7c5c117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:9b:2b:89:3d:98:c5:79:40:56:5f:f7:1c:
64:0a:c1:e2:f0:a1:a8:c0:c4:fb:11:f5:87:8b:97:
32:65:8f:a9:d6:58:56:f1:06:12:e5:50:2b:8d:cb:
2b:32:fd:1a:d6:0a:92:32:82:06:22:60:c3:bf:7b:
ce:9e:d9:04:61:e1:b1:9d:f8:f0:81:15:8a:b2:58:
cd:07:9a:dc:e9:52:20:4d:2e:b4:4c:9b:ff:61:2f:
86:63:f5:fc:6c:7b:26:88:ec:fb:4e:ec:f6:66:af:
e6:d9:ed:09:13:21:49:c5:43:3f:84:85:0d:34:55:
2b:55:37:cf:d8:89:3f:91:50:44:70:a2:6b:5f:84:
aa:ba:1d:c3:74:05:08:ab:20:ab:a0:72:08:fd:9e:
99:86:9c:8c:cf:ff:69:ab:a1:7e:5f:7b:92:97:99:
75:5e:0c:8e:07:f0:b0:fe:f4:6b:95:ee:26:96:e6:
2e:65:f6:cc:7e:bf:7a:88:51:6b:e4:a1:8f:c8:b3:
5d:50:5f:a5:bb:4d:79:b8:1a:34:7d:b9:05:2d:bc:
70:f8:7d:6f:9e:5b:79:d5:30:b8:57:0a:77:c3:e3:
8b:11:45:39:9a:c8:6c:c6:98:8f:73:20:7a:0c:8e:
60:02:4a:d6:a7:2c:50:ab:75:34:d0:bc:b7:74:a3:
f1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:49:66:97:A1:CC:87:76:3F:A4:28:AB:24:4C:60:EE:E7:C5:C1:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i0lml6HMh3Y_pCirJExg7ufFwRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:65:b9:39:62:4e:3a:f8:9c:fc:e0:44:43:d1:bc:13:ed:1e:
9d:d4:94:ee:89:fa:a2:24:80:88:b4:6c:60:74:01:3e:14:cb:
5a:5c:c8:be:45:41:b1:13:7b:a2:3b:dc:ef:03:2d:5b:65:b2:
dd:1e:24:4b:4c:f0:ad:18:e4:47:38:0f:22:05:82:15:e4:14:
27:92:c1:1f:57:74:65:5d:ee:61:5e:75:36:ab:f1:a7:c4:ac:
d4:85:f3:43:12:96:34:f9:65:6e:e9:2b:d7:5f:75:24:a8:09:
1f:55:0b:07:db:a9:19:56:b9:a2:92:c8:c4:76:9b:e5:cd:fb:
f3:fd:cc:2b:85:b2:99:8b:bc:89:ad:51:05:9e:cf:c7:8c:3c:
68:7a:7a:68:59:cc:4d:ae:de:79:49:40:43:b3:df:6a:94:24:
f5:6d:c9:b4:47:1d:b3:5f:df:9f:10:f3:6d:18:06:fd:08:5f:
6f:b0:49:d2:18:10:42:ff:7d:43:f6:df:bf:5d:70:f1:09:4f:
61:b1:1b:8f:02:1e:6a:3f:16:2b:19:c3:8f:ab:e0:79:0d:b0:
f3:a3:ea:d8:4c:0c:3e:28:27:ee:e1:73:56:4d:70:4c:30:ed:
4e:1e:83:1b:dc:6e:76:98:42:32:ff:5c:ed:54:37:6c:e7:df:
4a:81:6b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:21 2025 by rpki-client