Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m1D8BBvGDfsOYQbPPE2vY2kCgDo.roa
File: m1D8BBvGDfsOYQbPPE2vY2kCgDo.roa (raw, json)
Hash identifier: LyO3a0s8iF2nYQUHBX3C31IbJTGtu9un5srNLWFa8FI=
Subject key identifier: 9B:50:FC:04:1B:C6:0D:FB:0E:61:06:CF:3C:4D:AF:63:69:02:80:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866FD29775FEB23CA0631A6BF52993BDEE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m1D8BBvGDfsOYQbPPE2vY2kCgDo.roa
Signing time: Mon 20 Feb 2023 17:15:17 +0000
ROA not before: Mon 20 Feb 2023 17:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:d2:97:75:fe:b2:3c:a0:63:1a:6b:f5:29:93:bd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 17:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b50fc041bc60dfb0e6106cf3c4daf636902803a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:36:08:63:50:d5:b9:91:4d:df:96:79:87:
90:1e:ff:a0:1e:34:f5:b7:d5:0b:4e:5e:d0:4d:3d:
80:52:da:17:42:a9:2d:56:aa:7e:6f:bd:fb:4a:d9:
60:07:b5:1d:c4:39:7d:a5:7a:d6:65:5f:dd:d9:22:
58:24:a2:ec:70:fe:c4:4d:a2:20:20:5b:4d:2c:ea:
61:0e:81:05:ba:b7:70:7b:e0:68:f4:b1:1a:eb:f8:
b6:2f:9c:a8:75:e5:4d:1e:26:58:e5:ba:96:27:98:
2c:52:04:a7:91:63:03:b8:45:c2:63:20:8a:3c:b6:
7a:fa:7a:74:ca:c6:35:02:d8:f4:1a:94:4c:68:e4:
34:99:13:ca:fa:97:d2:3b:94:40:09:15:57:ff:04:
61:3f:03:ca:80:c6:27:77:f6:70:e1:e0:9c:4b:68:
10:50:4d:f7:b8:5b:2d:c1:a6:c3:82:72:19:77:3a:
24:86:0f:ff:1c:02:f2:46:e9:96:e0:38:10:f7:58:
bc:e1:66:61:15:7b:6d:24:99:dd:0c:55:68:b8:65:
65:92:89:69:6f:1e:25:04:db:94:bc:1b:84:d5:b3:
74:37:2e:6c:04:6b:6c:1b:e5:55:ef:59:b4:f0:2b:
dd:75:a9:24:a8:56:c2:41:87:fa:29:58:91:1e:2d:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:50:FC:04:1B:C6:0D:FB:0E:61:06:CF:3C:4D:AF:63:69:02:80:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/m1D8BBvGDfsOYQbPPE2vY2kCgDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:ab:5e:0e:25:34:aa:ee:e8:1c:99:39:63:21:80:ee:05:04:
a4:2e:0a:0e:5a:fe:07:0c:78:fb:e5:15:a1:1c:8a:0e:c9:b3:
74:f0:ec:b9:42:d8:cf:74:af:19:cd:e6:56:4e:0c:51:8e:10:
4d:57:a5:92:af:00:1a:1b:b5:6c:15:93:4a:6d:08:2c:99:58:
60:30:1a:32:84:00:f8:78:e8:8f:b6:24:d1:3b:fe:7d:b9:8e:
90:ae:9a:09:10:62:d0:93:79:d2:2b:73:77:05:88:be:e0:c6:
4e:0e:9b:3d:be:48:74:e3:cb:66:e5:17:95:03:ff:f8:60:99:
d3:cc:cf:28:ab:13:7d:50:1f:1f:33:43:91:62:bf:a3:ac:b3:
34:6b:ea:e5:73:e0:ab:ab:84:4c:31:c9:5d:11:70:4c:34:3f:
b2:a5:91:df:81:62:f1:ac:ad:de:42:c5:11:8e:f2:a4:33:e6:
4d:bd:62:e5:37:25:70:19:59:c2:4c:98:54:22:c3:64:90:45:
0e:ef:3f:f3:93:82:3d:f7:72:b6:81:27:27:a3:a2:07:dd:9c:
59:25:04:d9:30:e8:10:94:ef:cc:f6:39:dc:6d:85:3a:5b:ab:
39:90:a2:0a:f6:da:2c:f8:75:b1:6d:cc:24:77:e8:30:c1:46:
34:ab:ca:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:24 2025 by rpki-client