Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p67XnXY_gS2pjBsLOsbYs1V9YeU.roa
File: p67XnXY_gS2pjBsLOsbYs1V9YeU.roa (raw, json)
Hash identifier: cUMXrQt+jg7Qw01ocWvTh0obVWRwSwU7ZH2fs9d3sUo=
Subject key identifier: A7:AE:D7:9D:76:3F:81:2D:A9:8C:1B:0B:3A:C6:D8:B3:55:7D:61:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F878B8E65FC75E39B407279C014CD898
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p67XnXY_gS2pjBsLOsbYs1V9YeU.roa
Signing time: Tue 15 Aug 2023 09:13:28 +0000
ROA not before: Tue 15 Aug 2023 09:13:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:78:b8:e6:5f:c7:5e:39:b4:07:27:9c:01:4c:d8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 09:13:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7aed79d763f812da98c1b0b3ac6d8b3557d61e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:e3:44:ef:b1:4b:f1:52:19:7f:23:a0:18:
8a:06:d3:76:3d:33:d2:f8:62:9b:74:46:cb:e9:41:
b4:89:40:87:ac:c0:91:23:c9:f2:d0:6e:f8:d6:5b:
06:1f:d1:4f:0e:37:9c:7b:27:ef:ac:6e:2f:4b:3f:
0e:84:8a:e9:4e:49:a6:df:99:ed:30:0b:0b:d8:9b:
1d:f3:ae:ad:a8:9c:a6:cf:d1:82:9f:89:42:4f:6b:
99:9f:56:60:1d:83:22:81:5a:62:48:17:1c:f1:d0:
00:d8:de:32:60:0e:1c:90:dc:33:18:9a:41:9a:1e:
d2:03:b7:b3:c9:10:81:19:e2:6e:e3:d0:76:d7:06:
fe:cb:39:6b:09:e2:02:6d:77:5a:db:9f:84:cd:ce:
e8:0e:92:63:bc:14:66:8b:aa:c8:61:cd:22:52:03:
6d:15:22:ae:25:fc:80:2a:4c:ba:0a:c3:29:d7:3b:
08:06:8d:e5:5e:1c:23:d1:5a:9b:40:a0:49:8f:2b:
9e:5e:74:15:70:73:a8:5e:1f:a4:59:48:dc:d6:a7:
98:bf:da:18:52:3a:20:e9:cc:2c:c3:7b:29:6c:b1:
cd:d2:36:89:1a:cc:8f:be:e8:86:b7:d2:52:52:7e:
31:34:9d:cc:ef:a7:65:5a:66:e8:e4:85:ce:c7:f3:
48:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AE:D7:9D:76:3F:81:2D:A9:8C:1B:0B:3A:C6:D8:B3:55:7D:61:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p67XnXY_gS2pjBsLOsbYs1V9YeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:a4:37:7e:2e:c8:b7:e7:19:e8:9a:c2:b8:7f:90:31:a2:84:
dc:80:64:81:fd:3e:3a:53:2e:a1:6b:2b:43:b8:fe:6d:e8:9e:
e7:fa:82:4e:2f:75:89:51:65:38:3e:4a:1f:d5:b8:11:9d:fc:
d5:d8:6f:26:73:fc:c2:b2:72:a8:a0:e5:b6:25:0d:c1:3d:e9:
45:c5:38:f0:d2:ac:1a:65:c4:81:de:5b:1d:55:5a:19:e9:3d:
3e:f3:69:d5:5a:f8:1c:be:d9:5e:20:06:12:01:cd:90:29:3f:
11:40:e5:3f:1d:db:f9:da:8c:ae:20:d5:d8:11:1a:25:9b:a5:
f1:48:5e:84:24:2d:cc:c8:c1:32:32:92:1a:1e:32:e7:a9:a1:
e9:1e:72:88:20:3f:36:df:24:8e:22:24:5b:e9:7c:e4:f2:d2:
da:6e:8a:b6:31:4f:4c:4d:a6:33:07:8c:86:60:23:f3:8c:0c:
5c:a6:8c:06:ca:2e:ba:7e:6f:a3:6c:1e:4c:32:b4:20:6b:0b:
f1:a2:2c:7d:7f:1c:cc:cb:8d:27:9d:6c:c0:93:1e:e2:18:3c:
73:c4:19:fe:76:e0:cd:cc:0f:b4:4f:e3:3f:c5:f0:45:1e:e1:
51:29:95:d1:e4:59:f4:c6:78:5d:77:b0:f8:3e:99:59:ae:4a:
29:71:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:20:13 2025 by rpki-client