Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k3XgBuMB9j42dFIL8KBpe099_4E.roa
File: k3XgBuMB9j42dFIL8KBpe099_4E.roa (raw, json)
Hash identifier: k28iJPTs7UFjKa/5VxMmnfvQ9P/1o8WlZaHIQCzlaSk=
Subject key identifier: 93:75:E0:06:E3:01:F6:3E:36:74:52:0B:F0:A0:69:7B:4F:7D:FF:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A1191D81F55CCAFCD1B6D30B5617E7C85
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k3XgBuMB9j42dFIL8KBpe099_4E.roa
Signing time: Sun 20 Aug 2023 06:11:25 +0000
ROA not before: Sun 20 Aug 2023 06:11:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:11:91:d8:1f:55:cc:af:cd:1b:6d:30:b5:61:7e:7c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 06:11:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9375e006e301f63e3674520bf0a0697b4f7dff81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:9e:49:04:c9:0e:56:38:51:c5:82:b6:07:
a4:d6:9c:72:1f:4d:e3:ff:7c:2e:f0:c2:78:d6:17:
1d:ae:ce:51:9e:ec:ae:69:2e:4f:8f:db:40:7b:2b:
9f:e9:92:5e:01:d7:5d:ef:9d:98:f0:18:25:f8:fd:
f4:ad:c3:b5:e8:bd:59:7f:79:ef:ab:c0:43:7f:59:
9d:76:3d:24:89:7a:df:9c:af:8c:86:d5:90:7a:f3:
51:ae:bc:e9:0b:01:b5:25:79:a9:de:5b:7d:c5:92:
f4:8b:33:2f:75:3a:b1:4f:da:b9:cb:79:48:2f:25:
d8:dd:9b:0a:f4:f2:87:1c:43:b1:21:01:28:11:6f:
00:4e:30:1d:8c:57:13:62:03:eb:bc:26:e1:4d:48:
49:ec:59:77:7b:cc:c3:7b:86:56:0f:e7:90:3d:dc:
a7:d5:e3:c2:a3:1c:e9:af:b9:13:9f:dd:fa:9c:46:
c8:89:09:d6:3b:31:99:67:99:13:01:bc:8d:2d:d5:
3b:36:2c:49:a5:fa:f8:81:bc:ba:e0:e7:f7:45:74:
db:32:37:f3:0c:df:9f:7f:04:4d:a3:ab:ba:e2:58:
61:3d:3f:1c:70:cc:88:c6:d0:7c:9b:5b:33:ff:90:
eb:eb:06:bc:6c:35:11:a9:ad:1b:7d:43:01:83:08:
33:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:75:E0:06:E3:01:F6:3E:36:74:52:0B:F0:A0:69:7B:4F:7D:FF:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k3XgBuMB9j42dFIL8KBpe099_4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:ba:f2:63:f2:04:cc:6c:74:20:8b:5f:09:e3:83:91:f6:b1:
08:a4:7b:cb:90:81:fc:a7:16:f6:0b:51:6b:e3:47:7f:cf:b8:
5b:f2:de:5f:19:06:4f:03:96:25:dd:a7:e0:49:06:0e:52:dc:
38:d4:c0:e0:83:97:1b:8a:b5:37:3d:70:06:89:69:df:5c:9c:
86:76:2b:00:70:71:5f:14:33:01:86:11:2b:50:f8:db:45:3a:
ca:be:77:35:6f:88:d0:a0:93:a4:4b:86:7c:11:3b:66:07:e3:
7f:ea:46:45:fe:74:f4:ed:c1:a2:a4:66:86:6d:50:0c:8b:f4:
d2:fb:9b:b7:9b:72:c2:4d:47:91:30:d0:c7:e2:80:be:60:92:
da:a1:c8:b9:9b:19:3b:de:cf:cf:e7:46:83:3e:14:dc:e5:b5:
fe:bb:b7:7f:e0:e0:e0:01:31:4e:1e:05:fc:a6:71:82:62:be:
91:f3:9f:c7:76:35:63:cd:b8:bf:a7:ae:fe:46:ea:4a:93:ea:
b9:18:4d:58:e2:80:22:56:62:9c:51:a0:3e:8f:c7:bb:b7:cd:
2e:0a:05:74:3a:6d:29:50:a5:74:42:8b:fd:fb:f2:ba:18:42:
ab:b6:93:b3:a2:d9:f7:fa:1a:fe:74:13:73:ec:66:a5:3b:f1:
d6:7c:37:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:11:31 2025 by rpki-client