Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p8YPkj-3_NB0YpDaVG46UnRy_-o.roa
File: p8YPkj-3_NB0YpDaVG46UnRy_-o.roa (raw, json)
Hash identifier: fquEJhvSJJJFcOXE57fDp0bTeHtnZW5SUcrhcCDwJCk=
Subject key identifier: A7:C6:0F:92:3F:B7:FC:D0:74:62:90:DA:54:6E:3A:52:74:72:FF:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E60400CCBAEF11672CEC43FB08D6C098
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p8YPkj-3_NB0YpDaVG46UnRy_-o.roa
Signing time: Wed 15 Mar 2023 16:04:27 +0000
ROA not before: Wed 15 Mar 2023 16:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:e603:e44a/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:04:00:cc:ba:ef:11:67:2c:ec:43:fb:08:d6:c0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 16:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7c60f923fb7fcd0746290da546e3a527472ffea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:25:a0:2d:24:4d:44:25:e1:d0:b0:86:db:
bc:37:17:9a:71:f2:1d:bc:38:86:50:0a:84:de:80:
60:db:3b:88:57:dc:8b:1c:e4:d0:fa:bc:c9:ac:ce:
6b:0f:8d:b2:78:39:4f:71:e8:60:75:c0:6a:00:34:
8a:27:bb:d3:ee:77:16:4a:9c:86:e8:da:16:41:b5:
38:13:f8:f0:cd:af:e5:53:fd:b1:e1:ef:df:51:94:
6b:15:a9:e1:39:8f:25:54:bf:02:96:bb:3e:ab:9d:
28:bb:00:df:eb:86:06:cf:2a:4f:6e:29:54:55:7b:
a7:76:70:0c:1d:2f:fa:9f:eb:2b:39:32:ec:ac:73:
09:98:a1:5b:c5:d8:d2:e8:b5:6a:df:65:4c:9d:6c:
14:04:81:27:83:5f:bb:90:1d:c7:af:37:05:04:e1:
96:3c:b3:6d:a3:ad:3a:73:81:ad:2f:e4:44:e5:d5:
43:47:69:26:4c:73:f4:a8:89:ed:0e:f3:c3:18:31:
46:58:3c:f5:35:d2:ab:82:ba:86:0e:24:cd:82:69:
3f:7a:c8:fe:3b:56:e1:92:2e:c0:17:4d:a4:5a:96:
3f:c8:0d:e3:59:90:b2:1e:c6:19:84:27:9a:07:92:
56:ac:42:2c:ad:38:85:59:8d:4b:3c:6d:0d:65:42:
bc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C6:0F:92:3F:B7:FC:D0:74:62:90:DA:54:6E:3A:52:74:72:FF:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/p8YPkj-3_NB0YpDaVG46UnRy_-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:0a:1f:58:b8:a8:cf:e4:d8:d5:ba:8c:6b:3a:4a:85:0d:b8:
95:42:b5:b8:75:4d:77:c1:87:1b:2c:1c:1a:d8:a7:e8:93:8a:
d1:11:b5:89:da:ff:1b:15:8b:a5:f4:ca:9a:ee:63:80:82:3f:
c7:c9:23:86:81:b8:e1:fc:38:53:4a:4e:20:87:c4:07:c4:0f:
59:f3:ac:d5:27:f1:8e:e5:9c:2f:40:c5:e0:1f:68:5c:70:ce:
cd:82:4c:41:33:49:b3:b8:cb:54:f1:6d:89:2a:68:ea:40:22:
23:de:a8:53:c2:e1:88:2d:dd:f0:95:48:e3:b9:66:46:87:ea:
e5:ec:90:4f:c5:b1:bb:f5:6d:7b:a1:74:05:76:f3:d4:6e:ab:
89:d6:aa:b1:3e:8a:54:26:66:f9:c4:f0:98:05:0e:d6:5b:a7:
09:8a:69:c3:bf:50:42:18:94:c9:20:b4:f7:11:ee:3e:f9:8a:
05:0c:20:01:43:12:9e:a3:16:37:f9:24:2b:a6:33:03:1a:80:
ad:a5:bc:57:15:d5:57:05:45:ad:39:a2:0e:fc:98:28:f4:c7:
31:00:f4:2f:fd:fe:53:47:8e:8c:d1:e3:b1:49:4d:a4:c4:df:
5b:c2:ee:a9:05:6c:bc:26:1c:3e:ed:ff:b9:52:8f:95:ca:58:
eb:ba:ec:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:43:35 2025 by rpki-client