Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rn5vpUP9QUvTUxO0RMA8CpbHX84.roa
File: rn5vpUP9QUvTUxO0RMA8CpbHX84.roa (raw, json)
Hash identifier: OAqmVBouw/khEk48q4XjK//ImW83BJEzwVuEbwlKayY=
Subject key identifier: AE:7E:6F:A5:43:FD:41:4B:D3:53:13:B4:44:C0:3C:0A:96:C7:5F:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182D098DF403C2DF9B63633FB46D34B87E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rn5vpUP9QUvTUxO0RMA8CpbHX84.roa
Signing time: Wed 24 Aug 2022 16:04:15 +0000
ROA not before: Wed 24 Aug 2022 16:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:d098:cf9b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:98:df:40:3c:2d:f9:b6:36:33:fb:46:d3:4b:87:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 16:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae7e6fa543fd414bd35313b444c03c0a96c75fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5b:93:25:ef:65:93:be:eb:1b:02:b4:d0:27:
ca:12:5a:30:6e:87:91:54:e0:98:82:b0:5d:c5:57:
77:e8:cd:7a:e1:4b:9a:27:18:06:59:7e:29:f2:c9:
af:40:63:e6:93:14:3d:86:61:5d:ea:af:61:30:77:
fc:a1:5e:d2:84:24:46:06:f9:f1:3f:25:61:7c:ed:
a0:3d:3e:1c:d4:5d:cb:5e:af:17:4b:2c:eb:90:16:
fb:41:8a:ab:2a:5f:ff:9f:cc:b6:b7:78:79:54:ae:
fd:01:1c:1d:ea:43:67:9b:1d:ad:f1:e1:fd:c8:9f:
ae:58:10:08:eb:03:3a:fd:1b:34:e0:f2:3a:d1:0b:
4e:80:34:12:0e:ff:e7:c1:23:ed:10:ea:c5:b2:e6:
a0:78:51:22:a6:25:b5:0b:21:d3:7b:e5:61:6c:3a:
f7:6d:23:bb:cb:c5:f3:e8:45:4a:4c:98:b8:8f:4c:
2d:dc:ff:6d:6e:d3:e2:a9:65:a5:f5:20:f4:1c:42:
b0:14:c2:b9:2d:f9:98:f1:c3:07:51:ee:d6:84:4d:
bd:38:bc:d6:4a:f8:a1:42:47:1b:3e:29:3b:9d:fb:
89:33:1c:c3:a6:e0:74:61:10:0b:05:96:63:e2:3e:
c5:e0:ae:15:9f:b8:8e:7e:e3:ea:b3:71:d4:f4:b9:
e8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7E:6F:A5:43:FD:41:4B:D3:53:13:B4:44:C0:3C:0A:96:C7:5F:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rn5vpUP9QUvTUxO0RMA8CpbHX84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:4f:c4:95:1a:c7:31:10:27:64:a9:86:4b:4a:9f:85:c7:3e:
4e:5e:9d:4f:27:e2:7b:14:25:3b:6e:0b:84:42:68:65:0f:6a:
6a:d6:6f:37:af:62:ab:63:53:0a:84:4d:39:21:06:74:56:c1:
d8:62:53:dc:be:e8:a5:e7:87:cc:0b:36:59:e4:9d:d7:6a:9f:
09:da:2d:70:07:66:47:ce:1b:f9:32:00:42:b8:74:f3:7c:b1:
95:f9:b0:eb:17:8c:d7:f5:ab:88:2a:e3:28:96:fe:84:8c:c4:
85:dc:e3:b3:85:51:2b:0d:47:b8:f8:d2:cd:e1:58:10:f0:a3:
e1:8f:73:ea:8f:59:60:56:25:80:fb:8b:d9:ab:1e:83:09:f6:
30:3d:28:ba:99:11:f0:0d:67:9b:13:3d:01:da:b5:2a:01:63:
43:6b:13:98:08:df:cc:15:9a:ca:bf:c7:24:1f:54:82:7c:b0:
6c:c8:fb:32:44:95:2f:9b:b9:2e:50:31:f3:27:1b:e4:04:9b:
68:0d:6c:75:36:7c:57:c3:56:e9:57:e1:11:f8:70:56:9d:b0:
a6:d5:3e:23:fe:a4:dd:fd:10:54:e7:aa:b7:2f:e9:95:7b:c5:
0d:d6:6f:72:a9:28:22:a0:82:8b:39:b4:b1:71:13:b8:45:c8:
11:28:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:27:57 2025 by rpki-client