Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/innZ6FqiDTYneQ3m2te34pDuHnw.roa
File: innZ6FqiDTYneQ3m2te34pDuHnw.roa (raw, json)
Hash identifier: MD5DAF3ydyPXqq86czYvEI5DXlvH7vPTGxSJItKsdKA=
Subject key identifier: 8A:79:D9:E8:5A:A2:0D:36:27:79:0D:E6:DA:D7:B7:E2:90:EE:1E:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DE14950D353DF0F61865AED3A1AAD39C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/innZ6FqiDTYneQ3m2te34pDuHnw.roa
Signing time: Thu 10 Aug 2023 06:13:58 +0000
ROA not before: Thu 10 Aug 2023 06:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:14:95:0d:35:3d:f0:f6:18:65:ae:d3:a1:aa:d3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 06:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a79d9e85aa20d3627790de6dad7b7e290ee1e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:70:0a:95:6e:b8:9e:79:d7:96:80:99:7f:
b2:2f:d9:29:36:a9:21:27:a9:cf:1b:03:76:18:9a:
e7:9c:6a:85:ee:90:76:13:bb:f4:a2:1f:31:c5:af:
ef:d2:b7:d7:ac:fa:5b:64:61:e2:49:6e:0e:84:73:
02:85:92:1c:e2:66:99:cc:2b:d6:fc:59:a6:2a:e1:
29:5d:03:84:94:3a:f4:02:3e:d3:81:f6:9b:92:9f:
80:e3:8f:bb:24:72:02:f3:33:c5:5f:8f:32:bd:50:
59:e9:ed:d6:a1:45:a4:55:ed:36:a1:ba:69:48:63:
84:c7:6a:54:74:09:03:a3:e0:d7:97:fd:99:da:eb:
90:bc:c8:3b:e6:d2:94:40:a2:96:d6:ce:ca:5c:43:
0b:a6:4c:48:ae:0c:13:38:45:f3:8c:3d:57:21:84:
61:04:56:e0:2b:b3:f5:e9:63:1e:24:13:83:52:3e:
01:9b:82:6f:d9:54:c0:cc:0b:32:cf:d2:d3:a8:5e:
fb:db:2d:b1:fd:98:c9:4c:4a:1e:04:99:1a:d3:af:
ef:bc:e5:10:9d:f6:21:f3:eb:08:8b:db:25:17:89:
1a:70:dd:af:ca:78:15:48:e4:e4:0d:20:b7:2b:64:
6d:ed:bb:2e:e7:15:be:1e:ee:25:21:d5:ec:1f:82:
05:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:79:D9:E8:5A:A2:0D:36:27:79:0D:E6:DA:D7:B7:E2:90:EE:1E:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/innZ6FqiDTYneQ3m2te34pDuHnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:9e:e4:27:ed:a8:26:ed:f8:d6:5f:78:c4:45:f1:c4:a6:ff:
20:26:e4:85:b6:4b:8b:40:18:e1:31:be:40:b6:dc:1b:97:9f:
8f:62:ad:82:9d:a6:f0:fd:8d:ab:e6:fb:73:79:8b:d1:ad:a8:
05:d0:40:f5:61:81:a9:67:f3:1b:b9:c6:f7:ee:60:fe:01:9a:
f6:2d:1a:9f:a9:4e:51:72:73:e7:b7:44:4c:13:98:52:38:4e:
31:db:45:bd:cd:57:f6:30:2f:c3:0c:f9:4d:44:73:f9:2b:40:
82:72:67:12:b1:f2:fe:f5:23:64:88:b0:ee:88:3d:61:0c:c7:
f4:68:9a:94:1a:10:31:80:5f:b6:28:bc:c5:97:35:ff:3e:d6:
9f:6f:32:6d:3f:72:7f:4b:4c:0f:5e:1f:02:23:c3:b5:f6:32:
85:27:44:f7:12:3f:d5:7e:2d:2a:50:11:0a:24:69:07:ca:0e:
d4:01:fc:16:b6:4f:1c:c3:2d:21:c0:4a:c2:72:78:05:e0:cf:
d7:74:ba:ff:92:2c:2e:60:9c:7b:1e:9a:3d:4e:18:37:20:b3:
77:98:a5:94:2b:64:aa:af:51:c0:91:b3:1f:13:21:f7:2b:ea:
cc:9a:2e:6c:db:5c:c4:cd:d9:6d:19:5f:ba:55:38:6e:51:8c:
c6:2b:a5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:09:29 2025 by rpki-client