Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k2jLIJm2sx97dwUueBCW5bd6N0I.roa
File: k2jLIJm2sx97dwUueBCW5bd6N0I.roa (raw, json)
Hash identifier: yiqSh/z/roKMZ5rTxLbzyvNc4kSNb2ynY4pF6ctgwq8=
Subject key identifier: 93:68:CB:20:99:B6:B3:1F:7B:77:05:2E:78:10:96:E5:B7:7A:37:42
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B28522F85C7FEF0FDF87F9FFBDB9F2D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k2jLIJm2sx97dwUueBCW5bd6N0I.roa
Signing time: Tue 01 Aug 2023 19:13:36 +0000
ROA not before: Tue 01 Aug 2023 19:13:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b2:85:22:f8:5c:7f:ef:0f:df:87:f9:ff:bd:b9:f2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 19:13:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9368cb2099b6b31f7b77052e781096e5b77a3742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:6c:85:12:3d:f5:a8:99:b2:d7:a4:76:33:
8d:2f:a2:1f:24:01:7a:01:a9:03:ab:01:fe:1a:86:
f4:20:dc:a9:88:95:a8:ba:8a:5c:1b:de:67:e3:63:
18:fd:82:f8:7b:1a:b7:07:89:c6:57:72:85:47:c1:
68:02:d4:54:18:bc:65:d7:bf:b8:ab:3f:48:85:94:
f9:b4:74:7d:c8:cf:e6:27:b5:84:88:78:01:64:d9:
a5:45:ce:f4:e1:d8:a6:11:9a:b8:c2:72:da:6f:1f:
f9:4c:57:80:e1:b2:ae:f6:f1:c8:0e:69:04:48:5c:
11:ab:2c:23:98:3f:c1:a7:0b:d2:a7:73:55:46:3c:
24:68:a9:05:06:f3:dc:4e:94:c4:56:63:96:6b:74:
f6:84:a8:ec:3c:48:9a:9f:15:e8:f8:d3:b6:68:fd:
b3:09:81:9d:9c:95:62:de:8c:c5:ba:b9:c7:f4:d1:
39:0c:f0:bf:d3:7c:1e:3b:a6:52:f8:6b:f2:32:80:
b4:70:7a:f2:f9:48:f3:af:fa:5a:93:da:99:80:47:
ca:e9:d7:5f:48:7b:c6:71:14:32:cd:97:92:bb:a0:
29:fa:76:3b:b9:d5:ca:d8:56:7d:c2:c3:04:f1:55:
2e:97:ee:cd:cf:bb:8b:ec:4a:a4:f7:1a:a0:b4:fc:
d9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:68:CB:20:99:B6:B3:1F:7B:77:05:2E:78:10:96:E5:B7:7A:37:42
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k2jLIJm2sx97dwUueBCW5bd6N0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:91:3f:ae:b6:b2:fc:09:18:83:cc:4e:08:ef:85:b3:6f:9c:
fc:8c:b0:b7:51:a4:0e:8b:6e:60:ec:d8:0e:68:a9:d2:ea:c4:
ea:68:1e:27:f3:6f:db:74:f6:ff:07:cc:c5:48:4d:33:27:76:
fe:67:46:ad:7b:f3:ed:4d:a2:6e:5b:a3:35:0b:c0:34:31:02:
d1:26:08:eb:e0:e7:7d:2a:61:bf:49:10:f0:3f:0e:f6:7d:46:
15:fd:ad:0a:ec:7e:ac:5c:d6:32:76:05:df:85:b3:9f:6f:25:
82:11:fc:cd:de:c1:56:10:c7:0e:8a:9d:65:1f:15:63:66:4e:
96:48:10:0e:94:0b:25:57:7a:b8:c9:40:ae:00:92:2b:b0:0a:
93:62:96:b4:de:0d:88:90:be:e9:96:53:37:4e:26:ee:ce:6e:
46:46:28:f4:58:9c:e2:b3:45:91:61:76:cc:50:a2:37:c3:3b:
84:78:81:0b:07:9c:07:65:b3:b8:51:7c:1c:3b:4e:70:8f:e3:
e4:96:39:de:94:ab:b7:40:a6:76:3c:01:3e:b3:fd:f0:1b:79:
d3:3e:36:a7:18:c4:bf:b3:f9:58:6d:43:98:53:48:2d:b6:85:
50:a5:74:b2:25:8c:fb:12:62:74:08:89:31:b4:0a:e4:60:67:
76:6d:ab:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:58:36 2025 by rpki-client