Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rWi8paBk15oY-svVsHTmJyY89oE.roa
File: rWi8paBk15oY-svVsHTmJyY89oE.roa (raw, json)
Hash identifier: bc9p1gVlWTB9TfEj99o6CHSojbplpSH3yEu7COkJdOM=
Subject key identifier: AD:68:BC:A5:A0:64:D7:9A:18:FA:CB:D5:B0:74:E6:27:26:3C:F6:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868E4A224AD3F2DD85400C9208736A16A4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rWi8paBk15oY-svVsHTmJyY89oE.roa
Signing time: Sun 26 Feb 2023 15:14:28 +0000
ROA not before: Sun 26 Feb 2023 15:14:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8e:4a:22:4a:d3:f2:dd:85:40:0c:92:08:73:6a:16:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 15:14:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad68bca5a064d79a18facbd5b074e627263cf681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:c7:e0:d3:23:e3:11:9d:14:a6:e2:0a:12:
53:65:5e:2e:8b:d9:13:ba:f9:07:1d:fd:fc:33:d0:
fd:17:c6:88:ec:f3:8c:5b:3c:09:53:6e:24:cf:36:
c2:f7:7f:77:9f:4f:a4:57:9d:42:fe:8c:1e:78:98:
35:dd:5c:30:b0:30:3e:5e:6c:c5:fa:2b:b4:14:01:
e7:97:0f:c3:58:42:0a:d0:7b:89:2a:f4:64:af:bb:
4d:ba:44:fc:9a:90:82:92:62:75:89:10:4d:ac:8e:
87:ed:69:92:9d:27:60:2d:ec:4a:28:04:a7:c1:27:
79:33:bb:6b:c0:6a:9a:19:b1:6f:9d:f5:7d:e8:ea:
01:e7:7e:67:4e:13:96:39:b4:e4:fb:1d:18:66:40:
28:af:9d:71:9d:24:c1:4d:9b:03:a2:19:27:7c:b5:
41:28:41:12:14:4c:26:7a:fb:dc:e7:0a:3d:01:67:
df:3b:b6:ea:5d:80:7e:12:6b:7e:24:cb:93:eb:a7:
96:60:4a:21:50:05:88:f3:4c:34:57:78:5e:e0:1f:
82:0e:a2:57:d2:92:a5:38:0b:12:68:c2:ce:9c:de:
7d:3d:8f:b3:0a:84:3f:35:d2:45:43:2f:32:36:b1:
e5:98:57:81:6c:e8:73:e6:c0:9e:e3:86:51:74:68:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:68:BC:A5:A0:64:D7:9A:18:FA:CB:D5:B0:74:E6:27:26:3C:F6:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rWi8paBk15oY-svVsHTmJyY89oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:e2:45:a9:ad:92:29:9d:fb:3c:6d:e8:65:55:76:e4:c8:56:
b6:43:10:7f:1b:94:03:d8:66:08:95:9f:2d:30:86:52:d7:7e:
8b:74:19:68:bf:41:af:e4:4e:83:67:37:63:e7:a9:8c:19:95:
40:37:0b:d5:57:4b:26:67:44:be:5f:b0:76:34:dc:07:b9:ff:
ef:78:04:e2:ee:de:bc:d9:ae:56:8d:af:ac:bd:d5:28:00:1a:
c3:64:7d:08:6d:b6:08:df:fc:df:9b:5a:a3:51:f8:6f:fa:9d:
6f:2e:9b:c5:7d:39:6b:de:d6:9b:9d:15:5c:e1:e4:74:33:52:
51:a0:aa:61:1b:d2:31:a2:ca:84:e6:48:e7:a6:49:43:f9:66:
9d:90:30:cf:4c:5d:d2:ef:c7:ce:dc:ed:ca:7d:51:a8:37:25:
7d:42:79:e2:c4:f4:dd:27:23:a9:a4:5c:96:c5:59:22:b1:a6:
62:52:97:d3:40:57:bd:89:b4:33:31:ab:66:76:af:c5:12:2b:
32:bc:bb:e8:f0:bc:34:94:f0:be:19:58:13:93:0f:1b:bb:47:
df:83:a1:64:e5:e4:19:fb:77:65:56:12:63:8a:46:fa:fa:65:
9b:37:4e:de:50:bb:3d:90:e8:9b:88:ae:07:d1:a1:f7:11:0f:
c1:04:ec:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 10:08:51 2025 by rpki-client