Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rC_i__pYZlMn3EsyMfHuJ0zsuoA.roa
File: rC_i__pYZlMn3EsyMfHuJ0zsuoA.roa (raw, json)
Hash identifier: xwcLUGV0KtHa6+jJ1ViQ/8da7tszlZDxTQGbziRszwU=
Subject key identifier: AC:2F:E2:FF:FA:58:66:53:27:DC:4B:32:31:F1:EE:27:4C:EC:BA:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AE0C82BA1BC7C72D778367924780FA14
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rC_i__pYZlMn3EsyMfHuJ0zsuoA.roa
Signing time: Sat 04 Mar 2023 19:15:00 +0000
ROA not before: Sat 04 Mar 2023 19:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ae:0c:82:ba:1b:c7:c7:2d:77:83:67:92:47:80:fa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 19:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac2fe2fffa58665327dc4b3231f1ee274cecba80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:71:47:44:10:47:6f:90:71:04:36:ae:23:
88:ed:0d:a6:3d:08:70:3b:e0:2d:70:de:fe:91:a5:
45:c3:71:55:17:28:f6:f7:58:dc:7b:fe:23:6d:ab:
0d:8a:8f:c3:77:78:95:11:f6:3f:4b:ab:62:d2:59:
f0:af:e0:60:07:f2:48:44:7c:d4:9d:0c:44:0c:83:
15:72:31:cb:fc:a4:c7:2d:e7:a3:28:e9:f7:42:ad:
0e:25:a0:4c:0f:5a:ab:ae:43:df:00:38:d5:8a:c9:
f0:f4:56:69:13:cd:d7:3b:f8:de:40:10:54:2c:8d:
9c:99:fb:4d:07:79:2e:b9:94:fa:ae:13:b5:8b:b9:
e3:d2:ca:12:ce:84:7f:2e:67:2c:e9:e2:4c:82:b5:
12:a7:25:0c:8b:c1:e7:cb:6a:ac:cf:1d:2e:a6:7c:
7e:a7:6d:ab:46:8d:a0:ae:71:15:03:d3:53:9a:7e:
40:eb:d7:72:54:e4:f3:3f:98:18:fb:76:18:87:15:
4c:f2:c2:cf:78:bc:28:a0:6e:ce:70:03:ac:55:68:
5b:52:37:60:a3:73:8d:4c:1f:65:c4:02:b6:e5:90:
1d:0e:26:2c:4e:6d:e0:e7:56:08:79:85:05:ad:64:
4e:e0:0e:41:7f:95:03:0c:e7:ad:3b:72:27:e1:40:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2F:E2:FF:FA:58:66:53:27:DC:4B:32:31:F1:EE:27:4C:EC:BA:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rC_i__pYZlMn3EsyMfHuJ0zsuoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:1d:83:1b:15:3d:4e:bd:b1:c1:74:11:c9:2b:ee:51:36:da:
0c:6d:b2:c0:3a:dc:79:2d:34:64:a4:ce:4a:50:ba:38:95:bb:
ca:5e:d1:bd:3a:61:7b:ae:29:fd:72:2c:50:7c:1f:2c:ca:94:
50:6f:e2:51:c6:19:24:fe:b9:d3:10:bd:4a:a8:58:7c:f2:3a:
a1:5b:1d:b6:bf:09:87:1c:e7:96:a4:47:b4:21:c4:1e:86:42:
2b:48:7a:86:7a:a3:4e:23:c9:39:e2:4d:ae:e2:a0:d6:3a:4e:
71:68:30:50:cd:04:26:f0:6c:e7:eb:b8:a3:51:98:e3:18:b4:
1a:0c:df:93:e3:95:d3:06:09:f5:3b:53:47:75:14:83:ec:00:
11:bd:93:6b:96:46:a7:75:1a:90:9a:6e:5c:21:98:ab:0a:59:
7a:ec:2f:fd:47:e8:6c:77:a7:cb:b7:31:9b:81:94:d9:d6:a2:
21:07:c9:2c:90:ee:7b:60:9a:ab:ee:8b:40:13:9e:08:e0:f0:
b8:a3:8c:04:6b:a8:2a:b8:db:b4:81:bd:28:ad:30:70:3b:0f:
3f:c7:41:7a:72:03:e1:94:04:69:09:1c:c2:aa:d1:fa:4e:e3:
4d:0e:5a:61:34:93:b3:04:4c:d7:00:5f:ec:8c:63:88:81:ac:
46:96:b5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:21:59 2025 by rpki-client