Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ir3gL3kJjAeTLi14y1io8ikAbB0.roa
File: ir3gL3kJjAeTLi14y1io8ikAbB0.roa (raw, json)
Hash identifier: XJIjk+JJV2xaTwHsPMrlqJkb9C9NEgazjZNNvh52dIs=
Subject key identifier: 8A:BD:E0:2F:79:09:8C:07:93:2E:2D:78:CB:58:A8:F2:29:00:6C:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189BA08FC05FDBF7DF9A8F717477E32A5B5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ir3gL3kJjAeTLi14y1io8ikAbB0.roa
Signing time: Thu 03 Aug 2023 06:14:58 +0000
ROA not before: Thu 03 Aug 2023 06:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:08:fc:05:fd:bf:7d:f9:a8:f7:17:47:7e:32:a5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 06:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8abde02f79098c07932e2d78cb58a8f229006c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:8a:ba:0f:dd:a0:2e:40:31:24:8a:4d:b6:
a4:91:f2:e7:a7:7d:eb:b3:27:f3:0b:80:24:cd:05:
19:7b:a8:db:63:32:c0:6e:64:89:0d:70:d3:82:23:
36:5c:55:99:2e:bf:58:4a:c8:be:2e:0b:6f:41:6f:
5c:a9:97:81:22:8a:c4:4a:a4:2b:c8:45:c6:a8:da:
55:64:19:95:4b:a8:d9:4a:3b:45:a1:30:b2:9c:35:
73:88:49:7d:72:81:66:b1:f6:cf:d1:61:e0:a2:eb:
31:93:fc:ec:94:de:99:cf:da:85:0d:5c:15:66:a4:
a0:3d:c8:de:c8:cf:ad:00:2e:97:90:1f:ea:1e:c9:
cc:ac:7c:e4:3c:e0:83:29:33:53:94:28:f6:28:27:
96:18:4c:01:17:72:60:a8:51:93:64:c5:a7:3b:11:
11:58:42:4f:ba:86:46:69:0b:7b:25:36:3f:e4:86:
a8:7b:c8:2c:85:ad:7a:c1:13:2f:41:6f:aa:a8:06:
bd:a7:3b:b7:ed:45:74:9e:eb:32:70:a2:bd:e5:86:
23:a5:4d:ed:0a:a8:a1:4b:8d:b1:57:4e:a0:cd:d9:
0a:e0:c6:1a:b0:83:7b:b8:be:09:9e:69:31:dc:45:
7b:8f:fd:cd:dc:9e:cf:81:e1:c7:6f:15:1a:e6:49:
35:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BD:E0:2F:79:09:8C:07:93:2E:2D:78:CB:58:A8:F2:29:00:6C:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ir3gL3kJjAeTLi14y1io8ikAbB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:74:d8:7c:2e:42:63:a5:f1:6a:d3:78:25:c2:31:aa:8f:49:
80:ef:7e:7b:43:37:c3:72:48:4a:d0:68:5a:48:c0:2a:87:9b:
bf:29:61:6e:0f:28:49:81:1b:6a:52:31:fc:6c:90:fa:9d:98:
28:45:60:ef:10:d0:b6:52:f7:d4:16:b0:26:c0:d0:b2:ee:8f:
7e:de:43:33:98:5f:9b:0e:76:d1:7e:5b:c6:28:92:70:9b:9b:
b1:0f:7c:e3:71:54:22:a8:7e:bd:95:fd:16:43:36:cf:c4:5c:
cf:51:b8:4b:69:fc:f6:19:ac:a3:b3:ab:e5:28:cc:66:ba:26:
f7:a7:83:a8:f5:86:0f:d2:6e:29:25:1e:e5:c1:5c:b6:fc:8b:
32:e6:70:5c:f3:2f:5b:eb:71:00:a0:3b:1f:be:c2:e2:86:e4:
38:2c:a6:ba:00:68:bc:34:24:6d:d3:b5:25:41:37:db:fb:0d:
7f:e2:1e:32:f1:fb:37:89:c3:be:fa:f1:8c:3a:a1:05:9c:a6:
89:fd:27:5a:c3:c4:ae:79:d1:a5:a0:74:bd:bd:55:76:34:8c:
6c:74:ba:7f:b7:c9:ae:05:1f:8f:17:e1:d7:20:43:51:6e:3f:
96:c7:7f:c8:95:34:2c:d4:19:31:d9:2c:93:60:81:b9:bd:d6:
a9:a0:09:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:30:55 2025 by rpki-client