Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o6FbnFKurL28189UgTZqyMrlJa8.roa
File: o6FbnFKurL28189UgTZqyMrlJa8.roa (raw, json)
Hash identifier: +RHw4Vf02hg68sAS1eEbZ0BEUyMJUzkd9Y+KLi8TMzo=
Subject key identifier: A3:A1:5B:9C:52:AE:AC:BD:BC:D7:CF:54:81:36:6A:C8:CA:E5:25:AF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185D8B8F31B94F70F62FE44347682E23743
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o6FbnFKurL28189UgTZqyMrlJa8.roa
Signing time: Sun 22 Jan 2023 09:04:37 +0000
ROA not before: Sun 22 Jan 2023 09:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:d8b8:ad4a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d8:b8:f3:1b:94:f7:0f:62:fe:44:34:76:82:e2:37:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 22 09:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3a15b9c52aeacbdbcd7cf5481366ac8cae525af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:ee:69:e2:f1:84:19:4c:06:68:7a:32:f9:
09:93:79:2b:71:ce:aa:b0:42:d7:07:c5:50:48:7a:
be:0f:f8:3e:7a:08:18:4f:f5:1d:14:9e:63:0f:e4:
9d:82:7f:c3:4d:22:d5:68:0e:4e:dd:8f:67:04:31:
d0:17:a0:4e:2c:95:72:63:3d:3e:fc:14:84:34:a0:
32:7f:68:6d:1a:ef:87:d4:bd:68:5e:7e:ed:b2:0c:
2f:f2:6a:d9:7c:76:01:29:79:6c:1a:8a:06:e3:59:
7c:27:e7:00:a8:64:d3:e1:3c:0c:c7:f0:4a:8e:44:
7e:f0:d2:b1:ec:ac:74:27:75:56:c5:e8:01:37:9c:
65:e4:58:96:a0:28:14:68:f0:99:24:a2:c6:79:87:
69:ee:18:ce:b7:3d:f3:94:66:6f:65:e2:1f:56:43:
20:24:01:73:5b:35:28:00:8b:f0:a9:f9:e8:52:fa:
12:92:b0:3e:43:be:54:40:15:f6:b2:f1:83:21:04:
63:92:e5:cc:38:ac:56:70:36:71:74:96:e5:40:c9:
37:fc:84:9c:77:4e:4b:2d:99:3b:b6:3a:18:6f:74:
06:66:3b:f0:20:27:d0:de:25:bb:59:47:2d:db:84:
0a:36:1c:78:ef:7f:9c:fd:9b:2f:32:36:6b:6a:38:
9a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A1:5B:9C:52:AE:AC:BD:BC:D7:CF:54:81:36:6A:C8:CA:E5:25:AF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/o6FbnFKurL28189UgTZqyMrlJa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:e7:c4:fc:9a:ea:98:35:37:a2:b0:0c:8d:00:9b:d1:7e:01:
33:e1:b9:ff:bc:e7:68:1f:f9:6c:86:35:0c:50:a4:67:4f:58:
2d:50:fe:1a:85:96:e0:e0:32:e1:76:a7:4e:a7:d1:21:1d:94:
77:5b:3b:18:51:3e:e1:a7:71:00:2c:77:74:4b:50:6c:f0:5c:
99:c5:5c:ad:bd:67:e8:c8:4a:97:a8:4d:ee:01:5d:15:ff:d5:
fd:99:bd:3d:ed:27:f1:9a:45:71:3c:a6:5a:55:62:73:67:ce:
77:96:3b:06:c4:01:a5:8e:63:ba:59:75:26:f8:9c:10:0b:c6:
7c:00:c1:8b:c6:00:48:6e:bb:b8:90:08:d7:3b:49:86:75:53:
ef:85:b0:31:3d:a4:4f:90:cd:48:c9:b9:cc:39:e8:b3:28:4e:
4c:95:1b:e4:92:72:23:ec:54:e2:d6:85:b7:a9:7b:d8:d0:21:
6e:b9:b4:16:8f:63:1a:76:2b:f6:6e:3e:5c:ff:49:2d:d6:e7:
49:72:92:c8:ad:35:ff:5d:ef:27:32:b4:b9:41:24:ac:12:6e:
17:f6:f5:cd:1a:04:a1:c3:92:69:59:6c:2d:78:ab:6c:e1:d2:
2a:e1:b5:9b:e9:4e:33:b1:c2:72:dd:97:c4:37:09:3c:df:7e:
cc:61:02:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:52:22 2025 by rpki-client