Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/prj211S_qEuVXL0ww0_EbUbUbQc.roa
File: prj211S_qEuVXL0ww0_EbUbUbQc.roa (raw, json)
Hash identifier: RfA5LEy7UrM8OpUbddABceZy/I0NfYMS8BCMq2wRD6M=
Subject key identifier: A6:B8:F6:D7:54:BF:A8:4B:95:5C:BD:30:C3:4F:C4:6D:46:D4:6D:07
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018827745E9CFF93074AF8517648E4AF2434
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/prj211S_qEuVXL0ww0_EbUbUbQc.roa
Signing time: Wed 17 May 2023 02:05:17 +0000
ROA not before: Wed 17 May 2023 02:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:188:2773:f973/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:27:74:5e:9c:ff:93:07:4a:f8:51:76:48:e4:af:24:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 17 02:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6b8f6d754bfa84b955cbd30c34fc46d46d46d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:9b:a8:a9:97:0d:2a:f6:4a:9c:e1:28:86:
58:e7:20:cd:c6:7a:20:8e:58:c8:4e:e3:50:62:45:
1d:fe:0b:d4:2e:11:a5:bc:a0:78:7e:5e:18:a9:f0:
6c:e0:c5:fd:49:00:1c:97:52:dc:ed:c8:07:3c:d8:
fb:aa:9e:2d:30:53:76:59:c3:ac:35:20:1b:26:3b:
6c:96:4d:53:e9:76:c8:b4:f4:6d:41:62:18:0f:5e:
ac:ea:a3:c1:6b:a5:25:87:13:35:69:1a:33:45:ed:
3f:97:46:28:99:50:47:83:90:a2:9a:b7:26:b4:ad:
3f:d4:b9:65:bd:4c:fa:3b:a1:8a:90:ee:cd:bf:10:
0b:85:a0:7d:10:11:d3:77:22:13:fd:5b:cc:18:91:
c7:78:a9:6e:d6:1d:ae:f1:e3:6f:5d:55:02:a6:21:
42:9d:e6:73:2a:a5:a8:67:f4:b4:15:87:1a:35:81:
03:27:74:d5:e1:75:f7:b6:54:a8:80:b5:73:d2:4c:
4a:ca:d2:5e:a1:49:e3:48:39:81:b0:93:c0:7a:0b:
18:fe:51:6f:2c:21:18:4f:c0:26:d5:4c:eb:8a:2b:
72:4b:aa:19:28:68:3b:ef:49:c9:26:7a:27:c9:54:
ac:d1:58:6f:e1:a2:87:d6:61:4c:8f:d5:50:74:e5:
51:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B8:F6:D7:54:BF:A8:4B:95:5C:BD:30:C3:4F:C4:6D:46:D4:6D:07
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/prj211S_qEuVXL0ww0_EbUbUbQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:4d:db:29:2d:8b:89:30:a7:eb:c8:ff:94:5f:a3:45:29:f3:
0d:05:24:79:f8:59:12:fb:28:6b:6d:d6:3b:0f:68:14:f2:e2:
d3:37:2d:5f:80:af:7a:58:0d:d3:06:3f:29:ef:01:d4:29:dd:
55:73:45:dd:0f:cf:08:a1:30:6e:31:ef:7f:f4:b9:77:f8:d7:
f4:93:ad:7b:ab:d0:3e:e1:9e:aa:69:a0:7d:43:68:34:28:40:
7d:4f:56:6d:57:b6:e9:d0:0a:9c:d2:24:31:12:d7:7e:70:3a:
5a:04:b5:cd:8a:7c:a4:79:f4:fe:03:18:19:fb:9d:93:13:e1:
d1:f2:8d:ee:e3:6b:c2:46:d7:6a:77:54:43:c9:ac:fb:0c:c7:
e3:5a:fc:4e:1a:65:c4:22:47:e6:94:a4:84:34:d0:8f:ba:11:
3b:fb:0f:d8:5f:eb:45:5c:cf:42:65:fb:ad:7d:8f:e4:5c:99:
c8:3e:41:3e:77:06:1d:80:fb:2f:2f:45:ef:a6:e1:21:ba:6c:
4a:8b:75:67:3e:26:50:03:99:ea:52:04:4f:48:f1:a7:ff:99:
7b:bf:3c:4c:97:e7:02:85:fb:cb:29:80:8c:4b:26:23:b5:9d:
f3:5d:be:a8:73:33:b6:a2:7e:10:23:8e:5b:a6:d1:a7:63:4a:
ed:28:63:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:55 2025 by rpki-client