Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r_0fiGwxQxDzqaRKOxZ4WOIUBZI.roa
File: r_0fiGwxQxDzqaRKOxZ4WOIUBZI.roa (raw, json)
Hash identifier: wrCmSWnHMhcdY/BvO6tyuFPu47HC22+w1ojEYK98IUc=
Subject key identifier: AF:FD:1F:88:6C:31:43:10:F3:A9:A4:4A:3B:16:78:58:E2:14:05:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A9122A84F4148A3DCC9451437A347522
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r_0fiGwxQxDzqaRKOxZ4WOIUBZI.roa
Signing time: Sun 30 Jul 2023 23:11:27 +0000
ROA not before: Sun 30 Jul 2023 23:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a9:12:2a:84:f4:14:8a:3d:cc:94:51:43:7a:34:75:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 23:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=affd1f886c314310f3a9a44a3b167858e2140592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d7:1f:35:ab:e1:a9:8b:3c:74:62:4b:9b:5e:
ae:ce:12:0d:26:78:a5:ed:b6:7d:e7:7f:37:06:35:
8d:84:8e:8c:d6:a9:95:bf:a3:5f:65:97:37:e3:fc:
74:f5:b1:32:7a:d1:64:db:bb:46:9e:4d:81:c3:cc:
ae:43:4b:ee:34:5b:67:f7:e9:cd:d2:e2:6d:f5:45:
ec:c6:73:86:53:fa:4f:be:91:5b:6b:2a:28:4e:f4:
8a:09:e0:a0:09:90:b2:91:54:4d:23:1b:ed:f8:27:
a3:01:8d:fe:d4:12:de:e8:ad:61:71:44:42:6d:17:
16:c8:9d:55:08:54:ff:a5:ad:46:36:dd:6d:cd:61:
72:b0:04:0d:38:7a:db:cf:2b:e5:c1:38:0d:42:a2:
eb:53:2d:fc:cb:30:82:5f:e3:25:74:df:78:0d:3d:
7b:e3:e5:39:30:fa:66:50:ba:f7:cd:a2:94:bf:b8:
2f:bf:52:76:57:74:1a:6d:48:a3:e0:0e:38:2e:0e:
2d:ba:ce:63:df:b0:23:81:2f:97:e8:3d:c2:ec:28:
0a:aa:40:01:5f:3e:d4:88:6a:9e:f1:d6:21:00:6b:
12:c6:d0:57:ff:33:21:44:d7:d9:1f:54:56:0a:02:
45:bf:dc:71:21:36:c0:a9:f3:57:ad:3f:90:4a:78:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FD:1F:88:6C:31:43:10:F3:A9:A4:4A:3B:16:78:58:E2:14:05:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r_0fiGwxQxDzqaRKOxZ4WOIUBZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:da:e6:16:e5:ab:23:5e:b4:8d:29:e1:09:f8:8d:3c:d5:76:
e3:cd:75:55:8c:3a:3a:74:bc:57:4d:92:d2:be:26:9e:34:2c:
39:91:b0:c5:91:fe:7c:e8:6b:11:0c:d3:63:4f:59:7c:c4:cd:
90:eb:72:b5:50:9c:ec:5d:1e:f9:ef:a7:22:f8:43:32:30:c8:
8a:39:d1:1e:96:5a:47:fb:8b:03:d3:6a:d1:dc:91:75:cc:68:
1f:96:e4:18:f7:7b:53:7d:03:6f:1e:dd:e2:b7:cd:34:25:dc:
8b:35:6e:93:04:7d:58:8b:9d:49:4d:57:fb:c7:28:51:c1:e2:
eb:d6:12:c0:27:73:d7:c1:36:1d:13:29:28:c4:c7:a3:a1:5c:
d5:16:80:2b:29:79:3c:5f:ac:63:5b:67:4e:40:54:cf:3f:cc:
eb:b6:74:e7:fd:3a:58:a7:b4:a2:9e:c4:47:c5:15:63:09:55:
c0:e3:64:3f:ec:3a:c9:e7:f8:2c:b6:31:89:41:9e:6b:13:2d:
bc:d3:83:ab:df:1f:05:30:01:79:59:11:18:ce:7b:b1:a5:90:
e0:4e:a2:0c:30:1c:79:13:2e:52:56:08:3b:ed:81:33:fd:13:
ff:c9:19:ef:60:f2:60:89:e9:90:2d:22:46:29:33:cc:c7:6d:
51:bb:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:42:18 2025 by rpki-client