Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k0UWj67EEJIngeromQojT1nZF5I.roa
File: k0UWj67EEJIngeromQojT1nZF5I.roa (raw, json)
Hash identifier: yPs84YhvU+7bmwunZjxShiyzMvRgaXtb8oZHTH+YCg4=
Subject key identifier: 93:45:16:8F:AE:C4:10:92:27:81:EA:E8:99:0A:23:4F:59:D9:17:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0E23D76E056F5D1834AD95B3815868CD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k0UWj67EEJIngeromQojT1nZF5I.roa
Signing time: Sat 19 Aug 2023 14:12:24 +0000
ROA not before: Sat 19 Aug 2023 14:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0e:23:d7:6e:05:6f:5d:18:34:ad:95:b3:81:58:68:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 14:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9345168faec410922781eae8990a234f59d91792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:3e:e4:c5:35:41:45:2c:34:d7:00:bb:58:
e4:5d:9d:7e:d2:ff:a4:32:50:bd:ea:8c:a1:08:e2:
90:d8:d2:b8:ba:1e:6f:dd:69:73:4b:7a:23:49:9e:
0c:f5:6b:28:e6:44:06:1d:d3:7b:3e:f5:d1:be:47:
58:94:95:39:df:07:99:41:16:bf:6b:4f:cd:92:35:
a0:43:89:79:20:6d:ae:ce:f1:be:b3:8a:c8:a7:9a:
26:52:8f:76:d0:02:bb:b0:b8:3f:7b:88:67:cb:fc:
ef:4e:52:7d:44:96:47:bd:3b:00:38:16:ad:bf:ec:
8c:7d:40:2c:4a:02:2f:5c:dc:44:4d:2f:82:b1:5d:
51:68:55:43:b8:52:75:bc:53:d6:d3:52:f0:86:a7:
e0:9d:40:f7:12:c4:7b:9d:34:60:1f:b1:17:f5:c7:
1d:dd:37:14:23:76:6a:c7:65:c3:00:97:5a:13:1c:
7b:c3:a4:98:e8:f7:64:03:16:4f:d8:b4:ff:d7:9b:
95:d7:73:d3:01:ad:b6:17:87:d9:cf:42:3a:1e:fe:
79:a9:8f:2f:81:70:23:b3:ac:4d:0f:f5:c2:1f:ec:
60:fe:65:6f:97:e2:7b:79:3f:7c:e2:4b:79:89:86:
aa:11:57:21:a4:31:1e:f9:11:08:ac:37:cb:e1:2e:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:45:16:8F:AE:C4:10:92:27:81:EA:E8:99:0A:23:4F:59:D9:17:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k0UWj67EEJIngeromQojT1nZF5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:1d:f2:ac:8f:2c:07:d9:34:9d:83:58:00:f0:03:0f:f4:57:
b9:fa:5b:a4:bd:a8:ab:6f:ee:19:0b:de:8e:7d:62:80:92:78:
e1:7f:0d:e4:8b:d1:c9:f4:9a:dd:d4:a1:9b:de:85:f6:97:53:
2d:0e:5f:e6:c4:78:1c:6c:98:b9:a4:0b:a2:6e:26:cf:3d:f1:
16:f9:61:70:ca:8a:dd:a9:eb:56:06:cd:73:ac:6d:09:f1:53:
ad:2b:a9:e6:42:30:c4:1b:ea:dd:ee:3b:a3:a0:3a:ec:a8:ac:
7d:3f:4c:0d:23:13:25:5f:60:13:36:45:d0:5a:6c:2d:cf:20:
89:be:fd:b3:3e:63:03:49:7a:12:70:8c:e9:36:cb:5c:44:e4:
a7:9c:9f:ce:a1:7b:90:05:fe:8a:87:dc:4f:07:e0:6f:ff:c3:
dd:c7:26:06:35:88:0e:e3:65:50:22:4c:f9:5b:54:3d:15:a8:
4a:28:84:af:fa:70:0f:55:bd:da:73:a9:2d:49:15:e3:0f:8c:
35:b7:37:1b:07:b4:13:ae:0c:21:2f:ab:8b:44:15:c5:60:e1:
61:6c:e7:ca:ee:f5:cd:3f:69:d2:71:bb:34:53:8c:6e:a4:50:
8c:c9:0a:e4:70:40:2b:6a:f1:fb:f4:c2:b8:4f:b5:c2:4c:3c:
81:8c:8f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:23 2025 by rpki-client