Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rnXZMzDM9UsGsFtdBdGjY4BByaQ.roa
File: rnXZMzDM9UsGsFtdBdGjY4BByaQ.roa (raw, json)
Hash identifier: N3ZAZeH8lSmXXoVHdmYiDESydpQYOcdMDDvGjT7aAFQ=
Subject key identifier: AE:75:D9:33:30:CC:F5:4B:06:B0:5B:5D:05:D1:A3:63:80:41:C9:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8D097DF5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rnXZMzDM9UsGsFtdBdGjY4BByaQ.roa
Signing time: Wed 15 Jun 2022 22:10:44 +0000
ROA not before: Wed 15 Jun 2022 22:10:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2366209525 (0x8d097df5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 22:10:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae75d93330ccf54b06b05b5d05d1a3638041c9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:2a:5e:12:a9:4b:6f:2d:da:ed:c3:3c:17:
c8:2c:ff:3c:1f:04:ee:ef:2c:ce:a1:4c:31:16:3b:
f6:92:45:aa:8f:ad:0d:88:56:29:88:a4:12:f4:d1:
0f:60:76:3c:2b:43:5c:25:c1:6e:fe:e4:8d:50:9a:
a1:6b:7f:be:0a:60:b4:0c:65:c6:1b:bb:35:51:87:
1d:97:5e:da:66:1f:ba:4e:07:ce:e7:8e:ab:91:2d:
fd:3a:4f:ae:d0:06:d7:39:76:a5:35:a7:5e:eb:18:
68:6b:9e:23:67:cf:e7:ea:70:59:a2:2f:43:8f:30:
ff:01:f4:d2:47:c9:46:7a:4a:1c:94:ce:55:74:80:
16:12:0b:8a:b3:d1:50:1f:dd:f4:d2:da:d9:1f:7f:
e5:3d:b4:45:fe:25:96:91:ee:19:0a:ec:6e:96:a9:
95:f6:cb:8e:43:8f:5f:97:18:ae:a3:05:86:51:78:
cd:64:1b:fa:82:3c:e0:ae:d1:af:c8:05:3e:dd:ec:
42:ee:e5:d3:1e:f5:f6:bd:0b:1b:d1:31:ce:1d:11:
09:3a:08:58:1e:2c:43:d6:0c:b8:50:e9:f8:5c:52:
f2:85:ce:38:27:e2:a7:ac:fb:f1:13:9a:3f:53:ee:
6d:dc:31:1a:8e:d1:49:44:ee:1a:c7:9f:68:b2:1d:
9a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:75:D9:33:30:CC:F5:4B:06:B0:5B:5D:05:D1:A3:63:80:41:C9:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rnXZMzDM9UsGsFtdBdGjY4BByaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:52:3d:2c:dd:cd:30:ad:8a:e6:dc:1b:c5:96:ba:ab:3a:3b:
5b:d9:33:d8:42:a7:41:a3:6d:a2:d6:f7:3d:c4:e8:88:8e:47:
9d:3e:64:c4:ae:75:3e:de:b9:a6:46:a4:c7:51:c5:d0:b1:89:
d3:39:af:d1:29:b3:cf:7a:6f:87:a3:fd:b6:89:78:72:8f:f1:
6f:e8:40:91:7c:d1:04:d0:94:49:24:9d:fc:53:7e:df:bd:5b:
16:0a:be:e5:e7:13:7d:ba:45:86:e2:27:ea:ed:9d:d0:c9:65:
d9:b0:7b:b2:41:16:84:76:74:b3:df:2c:5f:b9:f0:a5:50:5b:
44:52:17:04:11:65:78:91:1c:ff:22:34:19:e1:fd:e6:f5:e1:
b9:87:86:f1:20:3c:a3:d6:33:0f:37:81:13:08:83:8f:50:a6:
fa:98:69:d0:88:bc:40:42:a6:79:11:6f:53:12:c4:67:28:a5:
bf:c0:a4:d5:2e:d5:2c:0a:77:e5:89:4e:63:c6:3d:86:7e:97:
51:a7:1a:ab:af:7d:0d:74:d7:d5:9e:e3:8d:ec:ac:90:31:c2:
1f:c1:54:04:d5:8f:75:b6:46:1b:e2:6f:e8:fc:19:5c:28:91:
64:a7:b0:2e:40:d4:a4:3d:ec:4c:b4:0d:db:65:b0:75:55:58:
6e:c9:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:44 2025 by rpki-client