Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oP2M-tyXLsVql-1gRvJV90vkpfE.roa
File: oP2M-tyXLsVql-1gRvJV90vkpfE.roa (raw, json)
Hash identifier: 5F56jK/8x+NmtXXp8cA6L2CV1e1c+oYtbxs6rchDiP8=
Subject key identifier: A0:FD:8C:FA:DC:97:2E:C5:6A:97:ED:60:46:F2:55:F7:4B:E4:A5:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868EB8150687D7E2D84D85C6D526751D73
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oP2M-tyXLsVql-1gRvJV90vkpfE.roa
Signing time: Sun 26 Feb 2023 17:14:34 +0000
ROA not before: Sun 26 Feb 2023 17:14:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8e:b8:15:06:87:d7:e2:d8:4d:85:c6:d5:26:75:1d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 17:14:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0fd8cfadc972ec56a97ed6046f255f74be4a5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:ce:d5:6d:be:69:44:8b:3e:6d:5c:3f:33:
3c:bb:be:6b:0b:fa:45:97:ba:cd:ca:4c:16:58:43:
29:b0:5e:80:e8:b2:30:6e:fd:f8:ab:f2:d4:ce:8e:
29:0b:44:f5:93:57:10:31:33:d4:cc:9d:5f:c6:06:
bb:a9:ff:5b:07:8b:d6:df:48:28:fd:55:af:40:7d:
34:5f:a0:c6:9c:b9:ea:ad:85:0c:01:9d:1b:33:7d:
cc:6a:f5:e2:d6:cd:d9:f0:5c:fc:5c:9c:6d:f0:2d:
03:89:36:d3:ff:d3:55:7d:3a:c9:7c:31:05:7b:39:
37:44:12:2b:1e:e4:f1:f9:68:1b:b4:02:16:54:32:
b7:f4:dd:0e:7d:93:e0:a7:07:9c:cd:5c:34:81:f6:
59:16:32:a3:75:00:be:ab:61:f9:d4:c7:51:7e:4b:
26:9d:40:bb:62:21:54:15:42:3e:21:d2:5e:c1:d0:
54:7f:a0:1e:d7:9a:99:2a:1b:3f:7c:62:8e:f3:f4:
6a:08:ec:a6:20:21:c5:55:ab:19:20:02:80:22:61:
7c:0c:53:3b:c4:ec:f7:d6:16:dd:fe:b7:80:65:e2:
cc:5d:3a:6f:5b:21:a3:13:af:93:18:fe:7e:a8:59:
ab:19:e3:17:31:a4:4a:08:82:41:70:25:9c:2d:22:
9f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FD:8C:FA:DC:97:2E:C5:6A:97:ED:60:46:F2:55:F7:4B:E4:A5:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oP2M-tyXLsVql-1gRvJV90vkpfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:26:6e:c4:ff:83:41:9b:dd:b4:bf:14:28:95:63:03:f3:d0:
99:ad:a4:bf:46:b1:a7:0c:50:db:4e:8b:1d:d8:ee:47:c6:26:
21:f1:05:ab:e7:32:04:13:85:45:39:bb:9e:7b:55:c4:54:4e:
9b:02:15:f5:36:2c:01:cb:3a:99:45:19:e5:64:c1:2d:28:67:
18:2d:e2:c5:01:f5:bb:56:d7:bb:42:e2:a3:64:ac:14:7b:1d:
3a:1e:bd:4d:e2:7d:9c:6a:51:e8:c6:14:69:20:88:61:86:e9:
b6:8c:1a:71:88:99:92:73:f5:07:03:c5:87:0e:f8:4d:1b:5c:
17:bd:21:6c:55:10:80:4e:d4:e7:37:9e:67:15:ed:5b:ae:58:
54:fb:4d:be:f7:8e:13:7b:08:cb:05:59:91:16:cb:f8:82:29:
1d:af:55:9c:b9:48:ab:22:25:58:2d:98:c4:ce:c4:33:bb:3b:
94:ee:bb:d7:fa:ad:b1:fe:ef:b6:51:da:bc:e6:a4:89:58:0e:
f9:63:c9:6b:82:41:16:fc:85:86:f1:3d:17:ee:8d:9e:1d:96:
71:98:41:a4:09:a3:1a:bb:4f:1d:06:fc:94:1c:43:11:dc:50:
bb:a4:82:d5:02:df:28:71:88:88:b5:ad:4d:68:23:02:a0:24:
19:f5:ba:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:21:51 2025 by rpki-client