Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ony7nZhBNt16FEGCxDi7SS0yKYQ.roa
File: ony7nZhBNt16FEGCxDi7SS0yKYQ.roa (raw, json)
Hash identifier: iVHaSgH+Sy9QZv5N2YP4U+0K4nUHbN6gz++jWtuTzVI=
Subject key identifier: A2:7C:BB:9D:98:41:36:DD:7A:14:41:82:C4:38:BB:49:2D:32:29:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899B501FF18A5303D19A9FE0A06BD299BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ony7nZhBNt16FEGCxDi7SS0yKYQ.roa
Signing time: Fri 28 Jul 2023 07:04:26 +0000
ROA not before: Fri 28 Jul 2023 07:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:189:9b50:10ed/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:50:1f:f1:8a:53:03:d1:9a:9f:e0:a0:6b:d2:99:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 07:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a27cbb9d984136dd7a144182c438bb492d322984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:25:8f:c0:bc:fa:9d:26:bc:e2:ae:3e:8c:
e5:20:b8:f9:b3:0b:1e:d3:1b:21:c2:75:91:12:36:
32:53:0b:98:98:63:13:11:15:ad:6f:86:a8:ed:56:
fb:26:09:0e:65:16:0b:12:e3:bb:1f:17:5c:53:d2:
2d:f5:77:e9:d0:f7:24:43:d0:31:6a:c2:ea:26:b9:
ee:7a:52:18:6c:1d:da:b1:af:f4:21:6e:b4:a7:84:
4f:ae:72:38:57:94:fe:4f:90:87:04:16:1b:df:7c:
d4:cf:7c:bb:73:07:e1:16:58:f7:ea:bb:9c:9b:05:
35:90:90:45:df:9c:5f:2e:31:b1:30:65:cc:e5:b6:
66:49:00:55:3d:7a:91:e6:9a:82:c1:79:66:7c:d9:
4b:89:61:00:f1:26:09:2f:f4:ee:f7:19:e7:8b:6d:
ea:86:0a:40:5b:16:e7:1c:d2:91:9d:35:03:89:18:
4a:7b:e0:4e:6d:d5:5d:be:fe:67:70:08:21:39:a2:
d5:a6:44:73:f4:32:d6:7f:1a:f7:21:c5:c5:38:15:
fa:90:80:e1:13:51:49:50:9d:97:47:b1:b1:5c:b1:
9b:2b:4d:db:0c:6f:13:ad:3a:5e:53:25:98:30:bc:
51:a1:8c:59:65:3f:04:1a:f8:3c:9c:4b:05:02:e7:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7C:BB:9D:98:41:36:DD:7A:14:41:82:C4:38:BB:49:2D:32:29:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ony7nZhBNt16FEGCxDi7SS0yKYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:1d:0c:97:ff:de:94:e3:ec:4d:11:00:fe:38:1b:f0:54:88:
23:f0:20:a8:be:c4:1b:34:47:e1:dd:71:31:97:ef:3e:70:74:
6b:b0:00:da:6c:77:f2:16:e9:29:2b:be:df:26:b6:dd:5c:85:
9b:c4:48:56:db:9c:0d:bd:1d:9c:41:62:9a:d1:85:bd:37:c2:
a1:89:d6:ac:25:57:6b:7e:ce:86:1a:21:50:66:6f:71:7d:a1:
3f:d3:e8:a9:38:e3:ec:bd:cf:74:27:93:2f:77:c0:d7:f6:b7:
29:4f:cd:31:e2:1f:54:2e:95:b7:34:ea:7c:1f:ad:7c:4f:86:
61:4f:d3:bf:37:5f:a2:a9:56:b8:90:53:20:69:73:82:cb:c9:
68:6e:05:2d:41:2e:3a:90:04:40:42:32:49:31:e3:eb:c3:3a:
b7:72:c9:67:ba:99:3d:45:92:a1:5d:43:cd:71:c9:4e:cf:82:
c2:fb:4d:5c:ca:35:21:37:f6:d2:fe:cc:f4:cd:b7:d0:3f:63:
b6:37:4a:8e:d5:fd:68:22:b5:1f:0b:30:e1:97:b5:84:5c:39:
01:35:9b:6c:80:48:f6:95:b6:ad:f2:85:75:6e:ba:3a:08:32:
de:70:29:4b:ab:a6:c8:88:36:6e:65:f2:32:e9:d1:1c:34:48:
73:87:0d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:06:05 2025 by rpki-client