Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lOpCwHDbQFmKx6dyuvEni-ehHpg.roa
File: lOpCwHDbQFmKx6dyuvEni-ehHpg.roa (raw, json)
Hash identifier: LjMVpsD0m1TZhLk2lfMl4GU4SjJkytydKrBGQjcX4z4=
Subject key identifier: 94:EA:42:C0:70:DB:40:59:8A:C7:A7:72:BA:F1:27:8B:E7:A1:1E:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B6989E7A03D30EB25B5EAC94C916EF84
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lOpCwHDbQFmKx6dyuvEni-ehHpg.roa
Signing time: Mon 06 Mar 2023 11:05:00 +0000
ROA not before: Mon 06 Mar 2023 11:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:b697:df6a/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:98:9e:7a:03:d3:0e:b2:5b:5e:ac:94:c9:16:ef:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 6 11:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94ea42c070db40598ac7a772baf1278be7a11e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:1a:37:58:ad:62:24:22:63:7b:d8:fb:d9:
7f:65:4a:98:61:c5:31:1a:62:4f:5e:4d:1f:84:61:
cc:c7:b0:01:c4:ad:19:0c:e7:05:63:f8:f3:1f:74:
ce:8f:2b:8f:3b:5c:9d:dc:38:37:41:42:3a:2a:96:
fa:f1:a3:ad:62:9e:06:42:11:99:86:dd:3c:0f:fe:
ef:ed:c8:21:5a:dd:f5:19:d7:e6:b4:fc:ba:22:92:
e6:cc:e8:6b:07:06:85:69:ea:92:be:49:0a:06:89:
61:3e:ca:ac:c2:e3:28:2d:85:15:b7:c7:93:e2:1f:
43:85:31:57:b2:f8:d2:db:c3:a8:ae:18:3c:f4:1b:
1d:1d:19:25:f1:8f:81:13:55:e8:06:b2:aa:ba:de:
2b:7c:9f:1a:60:bc:c3:14:97:ec:86:44:41:09:d8:
71:be:ab:1d:5d:35:ba:7e:42:56:5c:06:3b:35:6d:
87:76:06:37:eb:5f:8e:8e:88:5f:a0:1e:ea:17:8a:
a2:71:b1:e6:20:43:0b:cc:b1:2e:21:d8:29:ac:6c:
f9:44:92:a8:ff:4e:8b:18:66:dd:b0:27:29:5c:f6:
90:b8:3e:de:f7:b4:f4:62:e3:0e:90:59:34:47:1c:
be:18:3b:a8:6a:a6:23:62:bd:f5:c7:e7:db:cd:aa:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EA:42:C0:70:DB:40:59:8A:C7:A7:72:BA:F1:27:8B:E7:A1:1E:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lOpCwHDbQFmKx6dyuvEni-ehHpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:ab:dd:75:85:f4:9f:23:c6:b6:e0:30:dc:54:cd:99:90:3a:
74:88:27:71:51:6c:71:8e:fe:0e:7d:ad:95:b2:2e:82:2a:46:
62:61:56:a4:92:5f:8c:de:ce:78:6d:ae:01:69:9e:0b:b7:17:
6e:c8:bb:22:12:61:3e:ca:01:76:38:24:e0:10:88:8a:2e:e8:
1a:66:7f:7a:b1:d4:0c:7c:f5:92:40:91:3d:f5:9d:55:e5:a9:
9d:5d:fd:9c:14:af:0e:52:4d:e6:3e:c6:dd:c6:6a:58:35:80:
4c:3f:be:70:da:0f:b8:b1:87:21:11:b0:96:4b:bb:ce:ae:09:
28:e3:45:87:05:b7:fc:99:bd:40:9b:9f:f5:ed:6e:85:53:5a:
c8:eb:46:1b:e4:f3:27:5d:e9:4c:69:80:c5:71:f8:f7:e9:0c:
37:4f:a1:19:b1:ea:12:04:2e:78:09:8a:5a:79:20:ba:3c:f8:
e4:ed:ac:68:f6:3d:8f:5f:4f:4c:c8:6b:2c:94:fb:a5:75:19:
67:6c:2d:bb:38:69:e1:d8:10:ad:b3:2d:0f:4f:90:e9:5a:c3:
70:32:21:69:26:97:e9:2c:dd:75:9d:61:b8:87:35:1b:02:d6:
a9:b9:c9:fa:90:8c:4f:4c:47:3c:28:0c:43:07:17:40:23:08:
38:e4:ea:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:51:00 2025 by rpki-client