Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rgo_WXmI12b54G3VBdm39wQqJBk.roa
File: rgo_WXmI12b54G3VBdm39wQqJBk.roa (raw, json)
Hash identifier: xJ9Udy35hqgK0GM7Vv9mViWjwEvYoea/kqWtBM+WND4=
Subject key identifier: AE:0A:3F:59:79:88:D7:66:F9:E0:6D:D5:05:D9:B7:F7:04:2A:24:19
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DEF04EC68205241F50391C18DE17FB76
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rgo_WXmI12b54G3VBdm39wQqJBk.roa
Signing time: Thu 10 Aug 2023 10:13:58 +0000
ROA not before: Thu 10 Aug 2023 10:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:f0:4e:c6:82:05:24:1f:50:39:1c:18:de:17:fb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 10:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae0a3f597988d766f9e06dd505d9b7f7042a2419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:3f:a7:3f:8a:95:03:7d:a8:b3:8d:1f:43:
0f:81:6c:b3:0f:b1:9e:4a:eb:0b:ba:68:cb:3f:73:
69:e1:07:c1:55:df:50:ff:27:58:a8:9a:6c:06:5c:
73:be:54:57:ae:5c:fc:52:ad:fb:b7:18:38:46:e4:
30:ac:66:9f:d3:72:4b:e6:fe:99:12:28:8d:7c:8a:
4b:a7:98:d5:87:54:6d:74:ed:43:e7:45:f1:26:86:
5a:e7:20:4d:47:b3:ed:14:44:64:f1:f7:61:2f:75:
25:90:39:ce:92:7f:a4:11:16:e0:0e:47:21:9a:af:
02:d8:93:ae:d8:b3:d5:3f:ff:f3:7a:a3:94:9b:08:
41:0a:bb:e2:78:8e:cb:d7:3c:8a:ad:74:15:08:aa:
48:41:97:87:15:3f:5f:10:e8:0b:b0:d0:c3:d0:8d:
b8:09:af:3c:c5:00:8d:e5:4b:90:eb:71:3b:16:50:
92:48:b3:cf:79:ff:e6:68:22:1a:b4:b3:06:1d:ae:
a8:e2:67:a2:61:c5:8d:5c:c0:62:72:49:43:cc:df:
9f:7b:ae:46:4c:9d:b1:40:17:28:05:df:0e:f7:e7:
d6:c4:30:8b:0a:f8:90:ce:95:83:a8:6e:2b:54:90:
19:28:31:b7:84:9d:d0:7e:79:3f:df:6f:46:a1:6b:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0A:3F:59:79:88:D7:66:F9:E0:6D:D5:05:D9:B7:F7:04:2A:24:19
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rgo_WXmI12b54G3VBdm39wQqJBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:93:0a:22:36:35:bb:ae:87:f8:2c:34:bf:cc:8b:ea:2b:ac:
50:8e:91:db:fc:d9:ee:ab:d6:08:32:14:b3:5f:70:83:02:29:
bd:e4:e3:f2:3e:fe:85:57:12:77:7d:a7:05:41:3b:4f:e2:f4:
41:e6:b1:b4:40:58:38:15:02:aa:05:f0:1c:1e:c8:09:7a:71:
d0:17:73:a1:f9:87:c5:06:f2:7d:6f:52:20:8e:0b:5c:92:1e:
bf:5b:0b:8a:62:46:17:68:4f:58:51:da:17:05:48:af:e3:5b:
f6:fd:87:09:1c:01:2b:95:63:76:61:f1:f0:13:49:75:45:f6:
af:45:e2:ae:11:04:e7:88:92:81:6c:3e:27:e1:ba:7c:cc:03:
88:ef:43:c9:27:54:56:ed:99:03:7c:3a:76:30:b8:bf:51:bd:
15:cb:00:54:d9:d9:87:8b:0b:e2:e3:ad:72:99:76:0d:0d:3c:
93:ba:2e:e0:10:09:b6:72:0c:2d:1c:82:91:2f:58:17:85:dd:
5c:6e:00:8c:c1:b6:a3:2a:d8:4a:62:82:2b:24:8d:cb:61:66:
c0:54:d0:3e:d1:d2:f3:95:8a:39:61:97:b9:ff:ef:2b:28:af:
b3:70:99:4d:88:db:7c:af:2f:45:c1:52:e1:35:d0:e8:1b:93:
19:a1:91:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:19:13 2025 by rpki-client