Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i_g85eQHd5D2hdfPhjRZxBONN4M.roa
File: i_g85eQHd5D2hdfPhjRZxBONN4M.roa (raw, json)
Hash identifier: /CTRZG7EDEIOqaA9/c3FH/Ed1ri8mky67opgZY3ykKY=
Subject key identifier: 8B:F8:3C:E5:E4:07:77:90:F6:85:D7:CF:86:34:59:C4:13:8D:37:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AEAA0C5CA4D56A4B826985503B660005
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i_g85eQHd5D2hdfPhjRZxBONN4M.roa
Signing time: Tue 01 Aug 2023 01:15:27 +0000
ROA not before: Tue 01 Aug 2023 01:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ae:aa:0c:5c:a4:d5:6a:4b:82:69:85:50:3b:66:00:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 01:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bf83ce5e4077790f685d7cf863459c4138d3783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:0d:95:d1:57:52:7b:fe:d3:52:fc:49:3d:
68:4e:19:a1:1d:e8:71:e6:e8:70:19:49:e8:4b:af:
60:37:dc:08:39:a4:bd:db:6c:f9:a9:48:53:8f:05:
6b:2e:48:df:bd:ad:af:55:de:16:dd:e8:9f:44:04:
d5:e3:fd:75:bf:9c:84:6f:29:40:6f:8a:d8:95:37:
c3:5e:0c:a9:3c:7d:3a:74:1d:cc:35:39:de:02:89:
d0:8e:a1:b8:be:74:52:e0:fd:05:82:22:48:3c:dd:
3d:2a:7f:27:19:06:26:85:40:05:8b:8c:46:67:ed:
f6:72:ae:8b:c1:b2:b5:37:e6:61:fe:fd:1c:26:89:
3b:b7:1b:4e:f1:0f:08:eb:69:15:e4:14:c9:4e:6a:
02:ce:87:97:1f:77:f1:b4:73:d9:94:f4:ab:67:9c:
29:9f:29:de:02:4f:b2:fc:09:51:e8:7a:1a:4b:2c:
e3:96:cf:20:ab:0a:83:11:fc:4d:5e:80:0b:e6:83:
de:ea:0a:96:c4:11:4b:e4:64:51:d3:9d:86:8b:57:
7c:79:2d:45:4a:0b:26:6b:62:fb:3e:19:21:af:86:
cb:0f:46:4c:0d:1f:8a:e8:76:2c:bf:39:39:30:fe:
e7:77:ca:c9:7e:d9:86:09:85:6b:f8:18:ba:76:81:
da:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F8:3C:E5:E4:07:77:90:F6:85:D7:CF:86:34:59:C4:13:8D:37:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/i_g85eQHd5D2hdfPhjRZxBONN4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:bd:bd:e2:e4:3f:cd:71:ab:f4:33:bf:97:65:28:7d:31:2d:
98:d3:37:9c:21:24:15:4a:f9:61:00:82:35:91:cc:71:d6:0a:
a6:c7:ba:c7:2a:bc:a2:7a:26:10:10:c7:2b:ce:30:3f:95:11:
69:70:61:fa:d9:11:3e:e0:f0:77:70:07:91:e3:fc:f9:4d:31:
9a:b2:f5:80:d0:76:24:f6:14:38:69:cd:07:2f:59:15:3c:26:
55:9b:2e:b5:94:50:e0:5d:14:93:9c:29:3b:35:c1:d7:e4:8e:
d2:ea:01:b9:5b:a3:40:cd:90:d3:24:ed:d9:c2:f4:7a:c1:33:
9c:8e:59:e1:e1:b1:7c:42:8c:ca:65:04:69:b0:20:55:bb:80:
bf:92:ba:1a:a9:7a:e7:2f:b4:83:6f:24:c7:34:e3:4f:3a:02:
83:c9:04:82:63:4b:e5:d1:2a:30:24:5e:e9:30:19:d2:78:9d:
75:77:17:4f:f5:82:ed:a4:69:16:4c:5b:8e:98:63:aa:7e:d5:
24:2e:cc:7f:2c:ca:2d:65:0d:d3:43:e9:6a:f7:87:cd:da:69:
2f:2d:de:87:b2:28:84:2f:65:00:45:ba:93:40:ff:41:cc:5c:
4a:38:12:84:40:75:93:3c:39:89:8a:5c:20:f8:5e:78:3f:4d:
18:90:76:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:46:11 2025 by rpki-client