Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l3UXnNPk1IdWG7s22k-F_4iNFGk.roa
File: l3UXnNPk1IdWG7s22k-F_4iNFGk.roa (raw, json)
Hash identifier: D7Wvl+sYZ0OMTBM843MAro6R6drzUD0STs95HH51hHQ=
Subject key identifier: 97:75:17:9C:D3:E4:D4:87:56:1B:BB:36:DA:4F:85:FF:88:8D:14:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B14BD072612E5C5BCAB71DC756B307B5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l3UXnNPk1IdWG7s22k-F_4iNFGk.roa
Signing time: Sun 05 Mar 2023 10:23:01 +0000
ROA not before: Sun 05 Mar 2023 10:23:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b1:4b:d0:72:61:2e:5c:5b:ca:b7:1d:c7:56:b3:07:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 10:23:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9775179cd3e4d487561bbb36da4f85ff888d1469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a4:91:80:d6:02:ea:1d:88:19:c7:c0:a3:0b:
0e:5a:70:96:7d:c7:91:5c:15:d0:85:8a:81:86:40:
53:e3:6a:06:08:64:14:00:3a:61:24:a9:8c:54:8a:
2d:18:00:c3:3e:7c:b2:26:96:fb:9d:21:8b:0a:53:
9d:77:c1:e7:23:a2:09:2a:ce:81:8f:cd:dc:70:a7:
de:c3:66:e9:17:49:f4:78:a3:ef:8e:b1:36:60:c8:
2a:f5:29:8c:77:76:6b:e5:25:1d:95:8d:34:c5:6c:
0c:4d:c9:a8:c0:ff:dd:35:a9:5f:42:af:89:0d:47:
f4:69:1d:9b:87:00:7d:e2:e2:4f:20:6d:76:b9:04:
ca:e0:a6:d5:f8:9d:97:e1:9e:04:8a:18:a2:a1:16:
37:18:5f:8d:22:e7:cf:f4:0f:d4:c9:5b:49:44:50:
b6:a0:1a:50:3c:f6:be:04:20:68:9c:47:c8:31:27:
a2:e6:52:bb:05:58:8b:57:42:e9:21:04:f9:a9:46:
b8:ee:fe:f3:34:91:af:0e:54:2b:d6:f1:fa:b0:d0:
94:97:ac:c4:57:4b:09:6e:99:81:a4:41:4d:4c:db:
4a:34:e6:a3:a2:b6:55:99:52:fe:4a:21:a3:25:c6:
61:fc:90:ef:71:2b:ab:c6:aa:1d:c7:06:e5:79:fb:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:75:17:9C:D3:E4:D4:87:56:1B:BB:36:DA:4F:85:FF:88:8D:14:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/l3UXnNPk1IdWG7s22k-F_4iNFGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:cd:3d:2f:38:81:a3:4f:ae:ee:15:2f:75:e3:b6:7d:d8:76:
64:2c:64:1f:5e:61:13:80:95:32:d4:8d:67:ff:61:a2:cf:7d:
62:de:9b:c1:95:44:fa:a2:f6:ec:4b:1b:5b:4a:bc:75:73:e5:
ac:85:37:8d:7b:5d:13:54:47:cc:83:e1:90:1b:e4:90:23:71:
5b:33:e5:ca:9f:80:78:07:86:de:94:96:f3:db:2c:90:1a:34:
24:51:33:d7:14:0d:52:45:8f:49:6f:9d:e7:e5:8f:e3:da:a2:
8b:4c:de:c8:39:fc:6a:f4:4c:12:f0:23:2d:f4:c2:b5:78:3a:
5e:f7:ba:0b:32:01:c2:8a:d5:e0:99:4d:bb:2c:b5:13:07:ea:
69:6d:2c:c2:37:ef:1e:11:20:db:49:86:ce:58:62:53:cd:61:
59:63:44:d8:93:e4:0f:5a:18:93:98:69:53:06:f1:bc:1f:e6:
4c:70:4d:d7:9f:53:cc:60:aa:95:b0:f7:3f:77:81:1c:be:6a:
98:66:9d:2d:d9:b7:3b:77:b0:cd:22:a4:03:03:73:13:d3:85:
f4:47:c8:d3:0e:14:cf:54:29:09:c7:51:16:b4:d2:10:84:3d:
09:9a:f6:fb:d7:de:19:d7:b3:ab:6f:60:22:9e:ca:54:dd:f0:
3f:60:03:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:18:37 2025 by rpki-client