Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rrkRVw7DElsKQY2UPYPAq99ESjw.roa
File: rrkRVw7DElsKQY2UPYPAq99ESjw.roa (raw, json)
Hash identifier: OW9uEzt3gdDD9qdbaXTTL2q5ZkdaRf4BXe9cCJC5n1A=
Subject key identifier: AE:B9:11:57:0E:C3:12:5B:0A:41:8D:94:3D:83:C0:AB:DF:44:4A:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868D6E63756DFD52A24FB11AA6C1830FB0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rrkRVw7DElsKQY2UPYPAq99ESjw.roa
Signing time: Sun 26 Feb 2023 11:14:27 +0000
ROA not before: Sun 26 Feb 2023 11:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8d:6e:63:75:6d:fd:52:a2:4f:b1:1a:a6:c1:83:0f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 11:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeb911570ec3125b0a418d943d83c0abdf444a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b7:40:29:9a:c5:14:53:d0:32:a4:00:86:b4:
5b:e2:1d:01:cf:ea:71:58:b0:0c:52:12:95:3b:ff:
38:17:e6:e1:5d:10:58:50:dd:12:00:1c:73:a6:d4:
cf:5e:2f:0e:aa:cb:93:1d:1d:da:c4:81:43:41:99:
56:27:a0:ec:27:ee:a3:0c:e0:fb:0e:6a:62:5f:3a:
10:68:31:37:62:73:c5:2f:0a:59:f6:06:e7:17:90:
cc:1e:4a:1f:1b:ec:16:84:f8:0c:df:39:10:b6:57:
37:0f:84:c4:ee:a5:fc:f2:a1:b9:4b:8f:92:09:2e:
b5:e1:d4:00:1b:71:60:72:e8:bf:80:0d:fb:49:96:
ed:ea:41:a1:8b:3d:6a:89:e1:ee:36:1d:7a:86:08:
51:49:67:1d:80:58:9f:92:a7:1f:60:5a:af:69:5f:
74:f5:27:8f:57:62:1c:28:6c:b0:c6:2c:4a:b8:e9:
56:b7:7d:82:ea:d9:92:ba:48:ed:77:d9:46:0b:89:
f3:fd:c2:11:e5:f5:9e:78:8e:4d:f3:57:fb:99:02:
6e:7d:62:55:8e:b8:3d:16:3e:01:b5:5a:e2:05:ec:
40:df:e1:02:89:63:9e:ef:e7:53:dc:cd:2d:28:cb:
85:0e:a5:1a:28:bb:17:b5:80:66:ce:45:35:ae:dd:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:11:57:0E:C3:12:5B:0A:41:8D:94:3D:83:C0:AB:DF:44:4A:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rrkRVw7DElsKQY2UPYPAq99ESjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:10:1a:ae:53:2f:32:42:c6:2b:9c:73:21:33:c3:71:00:08:
43:87:d3:ca:46:eb:43:1b:fe:56:9d:d8:99:c2:fa:17:33:64:
c5:ff:71:e3:2b:ae:50:e0:0b:03:63:06:58:d0:d3:db:ba:57:
20:0f:ce:87:9d:e2:3d:b2:cd:55:ce:2d:d8:79:37:81:cd:82:
56:53:e6:b8:bb:3b:04:f8:e3:ea:d4:50:2c:2e:10:92:15:d1:
d5:0b:43:60:e9:36:ad:f6:b2:8c:29:dc:e0:8a:c6:a7:9f:d3:
19:84:d4:d0:11:e2:c0:69:33:0c:2f:81:be:a4:36:7e:ef:d1:
58:4f:e2:33:9a:83:b0:00:63:9b:a2:28:cc:2b:15:1b:6e:fe:
86:2e:b0:a1:89:60:e2:15:ca:aa:7b:da:e0:6b:bf:ff:a2:50:
41:4c:ef:4c:99:88:74:04:16:9b:c2:3e:e9:3e:e9:2d:66:3d:
f7:c0:70:a9:f1:a4:45:00:e2:2d:3e:98:91:e2:82:52:b8:47:
8a:5a:cd:e3:3f:87:4d:0a:80:65:88:bd:c0:db:c4:27:5e:12:
9b:49:5c:ee:83:70:8f:6f:35:11:cf:bf:a9:44:8b:7f:fd:53:
ad:3d:55:ed:c0:b5:5e:6b:55:0d:b4:e4:16:74:69:8c:74:0b:
ac:66:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:38:27 2025 by rpki-client