Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k0xF6uhsfD5QpPRbjRlF5SXU6RM.roa
File: k0xF6uhsfD5QpPRbjRlF5SXU6RM.roa (raw, json)
Hash identifier: 9bXyXyWS/G1ns4iJojrBhH6UZ08AciYZVC+FX8WXNBQ=
Subject key identifier: 93:4C:45:EA:E8:6C:7C:3E:50:A4:F4:5B:8D:19:45:E5:25:D4:E9:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018739F4C1E2B4752C3737EB7BD226C5CE50
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k0xF6uhsfD5QpPRbjRlF5SXU6RM.roa
Signing time: Fri 31 Mar 2023 23:15:54 +0000
ROA not before: Fri 31 Mar 2023 23:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:39:f4:c1:e2:b4:75:2c:37:37:eb:7b:d2:26:c5:ce:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 23:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=934c45eae86c7c3e50a4f45b8d1945e525d4e913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:b9:1c:05:ad:3b:ed:59:4c:09:bb:a8:40:
cc:a6:9f:74:5d:4c:1e:1c:da:ef:99:0d:93:18:b4:
84:4f:b2:2e:0d:97:7d:e8:b1:90:df:e0:c5:57:4f:
47:42:a8:11:a4:6e:9c:9e:86:03:db:e6:4c:e3:bf:
68:04:d0:bf:d4:fc:d0:3a:ad:7c:8e:c8:4f:76:2a:
61:95:6f:04:df:3b:ab:5b:c3:bb:27:dc:c4:9b:75:
f3:b1:7b:42:c2:83:3e:f1:d4:69:03:21:bb:27:3f:
de:bd:9c:2d:1e:c2:f9:92:84:d7:36:8b:5f:f5:6d:
a6:f8:41:4d:f8:85:c7:c5:22:fd:c6:48:44:3d:3a:
da:b6:c5:50:67:18:38:c2:b9:dc:ef:90:c6:3f:f9:
38:95:8f:fa:9e:cc:ad:54:26:4b:8d:ea:0c:1b:b3:
62:3d:73:b0:8b:f0:b5:f3:33:5c:32:90:bb:21:0b:
b8:5f:29:5f:79:bf:ff:9f:4c:c6:d5:39:41:ec:d1:
de:d1:e7:f2:cf:b0:ea:5f:9f:eb:a9:3d:37:2d:d9:
ad:3e:08:81:5f:3a:a6:b4:80:ef:b6:96:c4:44:b2:
ce:ab:fa:c2:7b:fa:c3:48:a1:71:2e:6d:1a:19:bd:
93:b4:90:fb:42:54:55:f4:af:23:d6:ef:55:f6:41:
db:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4C:45:EA:E8:6C:7C:3E:50:A4:F4:5B:8D:19:45:E5:25:D4:E9:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k0xF6uhsfD5QpPRbjRlF5SXU6RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:e3:fc:fb:cf:2d:ae:aa:12:23:7e:70:39:6b:d9:7e:55:68:
57:6f:74:ea:3a:91:87:15:be:16:51:19:7f:36:24:70:22:1e:
d8:9b:93:a0:45:a5:78:c9:98:ee:0c:49:85:62:b8:24:0c:a0:
ee:73:d9:04:60:b7:98:25:e3:ae:95:54:e6:02:f4:69:48:b3:
22:e5:af:f3:dd:ad:4e:24:46:2c:b8:38:cf:b0:06:a7:f4:a3:
5e:49:99:f2:18:2b:12:d6:59:6f:bf:3b:09:07:c2:25:7a:8a:
79:8f:af:f1:2b:c7:6d:74:64:0e:1a:74:48:3e:8d:ea:c9:8c:
35:91:73:09:87:2d:c9:0b:04:33:24:de:c5:66:7b:8a:50:66:
71:3a:ac:9b:5a:a7:9e:ae:8a:36:b5:fd:ca:c7:b4:78:77:66:
84:ea:55:bf:2d:f1:df:ce:f1:51:5b:e7:98:bc:a2:e8:47:e9:
3a:f8:6b:55:14:61:be:a1:27:42:22:8d:8c:92:98:54:ef:d1:
f3:a1:f0:5f:51:32:e4:05:f1:e7:01:26:38:ec:4b:ad:3d:02:
e5:db:eb:50:2c:60:01:1a:03:aa:72:38:bb:35:cc:6b:52:3c:
3c:46:d5:6b:c0:cc:f7:46:7f:5a:1f:32:f7:55:32:e4:91:c2:
bc:54:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:23:10 2025 by rpki-client