Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oRb4l87VGLzT96ORUE7nRbdbECI.roa
File: oRb4l87VGLzT96ORUE7nRbdbECI.roa (raw, json)
Hash identifier: sR7MIYvLtd3Oq2pykuQg9rnIWByVN2s33rUqO6iUMkE=
Subject key identifier: A1:16:F8:97:CE:D5:18:BC:D3:F7:A3:91:50:4E:E7:45:B7:5B:10:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DAD45FAEC2007AD39BDDD8A799923C96
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oRb4l87VGLzT96ORUE7nRbdbECI.roa
Signing time: Wed 09 Aug 2023 15:04:58 +0000
ROA not before: Wed 09 Aug 2023 15:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:189:dad3:d560/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:da:d4:5f:ae:c2:00:7a:d3:9b:dd:d8:a7:99:92:3c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 15:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a116f897ced518bcd3f7a391504ee745b75b1022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e8:5a:05:b3:00:25:a5:86:77:29:d1:b0:b0:
58:3a:bb:73:42:dd:05:a1:b4:2c:dc:f1:e7:5c:e8:
35:d6:38:72:42:e6:d7:a0:53:0a:07:ee:ae:c1:c8:
13:2e:55:49:3f:43:a6:51:de:b4:9d:6e:c9:99:15:
df:c2:1e:84:7b:0f:a3:c7:93:34:f6:1a:26:86:55:
87:58:ed:73:f6:53:fd:14:f0:49:62:e9:dd:42:8e:
31:da:e5:bc:cc:ee:02:6a:6a:83:30:5c:d4:6b:6c:
53:de:d9:05:07:55:35:66:bf:71:d1:fd:16:76:9b:
5c:ba:a9:c1:fc:34:a1:b4:55:5d:99:6a:e7:1b:80:
f3:6a:1c:0b:d2:16:2e:d4:46:e7:33:74:61:a6:3e:
3e:66:c7:4c:3f:a0:c6:3e:a8:21:1e:30:19:c2:fe:
ac:6f:df:19:05:54:6d:08:c4:86:79:3a:e8:24:c6:
b2:88:46:1d:cc:81:dd:f2:8a:2e:71:f3:1e:42:7a:
2f:68:2b:0e:46:80:80:24:4c:43:4c:58:b7:55:7a:
13:b8:1e:a9:ac:29:12:0b:bd:1b:f1:02:ce:9b:81:
09:f6:4c:34:c7:31:b9:e3:9c:05:ca:f2:0b:cb:9b:
04:80:4a:c3:cf:b1:20:69:47:ac:ff:4d:5a:29:4d:
2c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:16:F8:97:CE:D5:18:BC:D3:F7:A3:91:50:4E:E7:45:B7:5B:10:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/oRb4l87VGLzT96ORUE7nRbdbECI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:ba:07:ef:b4:44:a0:05:d6:2c:2f:49:58:4d:84:79:76:38:
7f:d1:4e:a0:c5:d4:32:53:28:30:dd:b1:fc:33:63:f8:52:29:
17:d6:1c:2a:97:b8:63:5c:c6:aa:b7:83:ad:c1:8b:3d:10:fa:
42:42:4f:19:f4:7e:bf:a8:5c:14:4e:e1:24:99:8a:5e:a4:68:
83:00:4c:b5:20:e3:2c:9c:03:f3:c7:7c:26:7f:06:e5:21:13:
7d:89:b2:cf:77:48:9f:0b:3d:e4:e9:51:c3:96:52:98:ff:0f:
45:18:0d:32:57:5c:16:dd:df:34:59:b4:9d:46:7b:49:5d:0f:
fe:c6:6c:95:6c:21:80:72:fa:ea:28:c0:20:fe:a2:2a:4c:38:
36:8d:9e:7f:cf:7d:6d:a8:52:ea:3f:83:7b:aa:70:74:bd:2c:
40:20:58:ac:0f:29:6f:6c:c6:85:d2:48:d7:e1:97:51:c7:1b:
73:63:18:81:f3:26:c3:a8:b6:13:86:0d:4d:4d:ea:46:e6:43:
65:3e:e5:f6:d3:d9:b7:37:a9:35:3e:3d:13:c6:8f:8c:07:f8:
7f:de:6d:68:06:ea:3c:23:25:6b:03:e4:e7:c3:51:42:e1:db:
ad:fe:a0:97:52:ee:f9:c3:98:54:c7:35:35:17:96:3a:c1:13:
b8:1e:48:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:14 2025 by rpki-client