Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mac0JSjEwk7Nf18Pd3b2qWci-_8.roa
File: mac0JSjEwk7Nf18Pd3b2qWci-_8.roa (raw, json)
Hash identifier: 5wt9Rb9WLQsoyZCply/Vj40WlOJxIbNfTkDch4zhsCs=
Subject key identifier: 99:A7:34:25:28:C4:C2:4E:CD:7F:5F:0F:77:76:F6:A9:67:22:FB:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EBC7F8DF82A246BB12433F1C637BA1E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mac0JSjEwk7Nf18Pd3b2qWci-_8.roa
Signing time: Sat 12 Aug 2023 22:04:58 +0000
ROA not before: Sat 12 Aug 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:ebc7:575a/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:eb:c7:f8:df:82:a2:46:bb:12:43:3f:1c:63:7b:a1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99a7342528c4c24ecd7f5f0f7776f6a96722fbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d0:ea:20:84:27:c7:fe:24:e0:30:12:31:4c:
25:3a:6e:c2:4f:82:f2:54:2f:4b:bd:6d:37:82:f7:
fa:4b:14:1e:e9:cc:30:c4:f4:31:d2:3b:93:21:7e:
a3:04:df:1b:03:90:61:1c:34:2c:00:94:d8:34:ef:
bb:83:ae:7a:d0:66:60:18:e2:bb:87:2d:bf:91:be:
d8:f8:0e:c2:4b:4b:5f:32:02:2d:dd:4f:9e:aa:3a:
eb:28:c8:8f:65:e3:b0:ab:0e:06:47:68:0f:ca:8e:
9e:0a:c7:e5:22:fe:5a:35:7a:a8:e2:c5:63:13:2a:
5d:43:78:38:5f:61:99:19:1a:55:8d:ca:82:12:41:
99:29:12:ba:3f:ab:7b:ab:4b:f8:12:2f:40:b4:bc:
0b:17:04:07:f2:43:1e:83:a5:8f:1f:cf:11:b1:a7:
f0:e2:09:ce:91:32:bb:49:9f:5b:5b:9a:6f:3a:d2:
75:75:cb:17:b4:ed:29:98:56:2a:50:01:16:ba:76:
27:90:15:38:85:19:38:84:b8:38:ee:a9:40:39:78:
fa:bd:88:76:5a:c6:d8:3f:a1:0e:08:28:5a:b9:97:
a7:4a:34:21:e6:f9:54:3f:44:ab:a6:10:1f:76:53:
e6:4e:dd:06:e8:b8:8b:56:78:83:50:59:49:a1:c0:
4f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A7:34:25:28:C4:C2:4E:CD:7F:5F:0F:77:76:F6:A9:67:22:FB:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mac0JSjEwk7Nf18Pd3b2qWci-_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:d0:61:b8:09:d1:62:8b:af:59:77:24:b1:7b:95:ea:8d:5b:
ab:d1:31:18:98:63:81:d4:a6:27:73:1d:f4:8f:16:c4:c6:a7:
9c:4f:e2:ab:d8:2b:91:47:1e:19:9f:a7:c0:e8:2d:58:7c:c6:
13:8b:c9:b3:92:87:4e:23:2a:b5:92:7e:44:08:c7:7a:8d:2d:
84:ac:44:2b:0b:18:ff:94:79:cd:4d:1f:54:fb:e0:e3:4a:ba:
bb:4f:4c:5e:9c:b2:cc:86:92:1c:df:90:e4:6b:a8:ff:f9:8a:
12:c4:3e:c2:de:80:fe:ef:8b:33:ce:2f:e9:e3:33:27:db:63:
c9:08:f6:6f:bf:8e:39:65:61:14:e9:85:e0:a4:8a:67:dc:d4:
52:f2:12:80:ef:44:c9:a9:ee:4d:ef:8e:38:21:15:c2:3b:7e:
08:c3:5f:23:71:2a:81:b0:e2:da:d3:0c:58:95:9f:42:bd:94:
a2:d9:e2:23:05:af:1b:5a:d7:de:d7:0d:d1:c1:ec:c6:3d:97:
7c:f1:d1:b3:11:1f:9b:cb:e3:0a:3f:0c:fb:5e:73:02:b5:76:
a2:0b:19:b3:d1:18:10:19:f4:a9:88:56:d8:2e:fb:20:92:32:
e4:19:30:ff:5c:a0:b1:09:81:e3:ff:73:a6:4b:f2:b5:61:c6:
4a:a2:df:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:45 2025 by rpki-client