Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o3S5eVMq1Jp4XZhGbD7u8qzWL6g.roa
File: o3S5eVMq1Jp4XZhGbD7u8qzWL6g.roa (raw, json)
Hash identifier: EYzR2giAJxpA0VC3VIBB+pRD7Y2HYXNYIdq1QFodmTU=
Subject key identifier: A3:74:B9:79:53:2A:D4:9A:78:5D:98:46:6C:3E:EE:F2:AC:D6:2F:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D7DD683ED3E30481DEF140453E10ECD4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o3S5eVMq1Jp4XZhGbD7u8qzWL6g.roa
Signing time: Wed 09 Aug 2023 01:15:58 +0000
ROA not before: Wed 09 Aug 2023 01:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d7:dd:68:3e:d3:e3:04:81:de:f1:40:45:3e:10:ec:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 01:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a374b979532ad49a785d98466c3eeef2acd62fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2e:69:66:02:14:72:0b:66:05:e6:fb:d0:ce:
30:31:36:89:dc:ba:f7:a4:52:df:23:4d:e8:dc:4f:
f4:f0:4c:e4:7f:20:bb:9a:69:8a:e7:5c:7a:46:9d:
7c:40:b6:30:1b:84:52:0a:ed:56:6f:c5:32:1b:64:
ac:fa:57:03:04:4d:fc:72:1d:09:a8:15:7f:96:25:
ee:c5:82:34:b7:15:88:69:a0:27:59:b0:a4:56:69:
36:d7:b7:d8:77:0b:ab:f8:ec:08:e4:13:3a:2b:52:
18:04:18:c9:4d:1d:87:1a:d1:f8:c6:72:78:9a:33:
7f:af:d8:b1:9e:d7:d1:a9:cd:cb:64:bf:c0:fd:97:
85:8c:8f:58:07:fe:fd:24:18:90:5c:ef:5b:4f:8c:
e4:0c:64:c7:9a:fa:f1:c5:0f:ab:55:de:b9:90:1d:
cc:b1:c7:77:68:0f:fa:c7:72:d9:5f:01:57:9e:99:
3a:00:b4:42:ac:6a:ef:40:f0:fc:b0:0f:4a:c5:c2:
46:58:16:9c:07:68:d2:d9:8d:d7:45:1a:e6:ec:e1:
25:78:4f:bb:47:90:1d:66:9a:7f:74:61:27:68:7e:
5c:d0:76:03:a1:94:2b:b1:be:c4:1e:37:a9:a9:29:
9f:bc:e2:27:4c:86:c3:e1:cd:d4:7e:05:73:c6:f5:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:74:B9:79:53:2A:D4:9A:78:5D:98:46:6C:3E:EE:F2:AC:D6:2F:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o3S5eVMq1Jp4XZhGbD7u8qzWL6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:eb:43:24:da:85:ac:95:fb:97:99:66:d1:b8:3c:a4:95:8c:
9a:a2:48:01:39:4b:89:b2:fb:62:f6:ae:91:bf:4b:73:64:57:
54:56:08:b9:b4:ab:38:51:10:59:9a:b4:a5:e4:ee:0b:2b:22:
45:49:ed:6d:c9:94:73:c3:b7:a9:10:7a:31:be:dc:19:2e:09:
d5:ee:dd:f3:7a:d8:7f:fb:ce:4e:c8:f8:b4:d7:8f:70:7e:5e:
d0:85:30:3d:39:0c:e3:be:ba:50:ea:f0:11:8b:0f:60:67:07:
fa:05:dd:0c:f2:ce:f9:03:a9:7f:ca:a7:b1:6e:b4:27:4c:4d:
58:db:d5:8c:29:50:2f:64:18:68:64:ea:57:ff:da:f3:73:7a:
ab:52:27:9b:c3:47:af:1f:81:a5:74:91:13:b8:4c:c3:c8:c5:
24:24:93:43:74:48:a9:99:9d:33:36:0d:b4:4e:07:dd:be:a5:
9c:63:4b:51:c7:87:9e:c4:aa:56:b4:0c:32:0d:60:04:02:3f:
cc:49:00:cf:b8:ae:57:ad:e0:9b:c8:33:e2:7f:23:b3:0d:ca:
e7:fb:36:c9:58:57:cf:a5:41:60:54:6a:7d:3f:fe:97:65:55:
1e:3f:d2:a3:29:c7:f6:f1:00:0c:7b:7b:c7:a7:f0:3a:84:c8:
9f:f1:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:21:47 2025 by rpki-client