Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ruM3HjNERvgqx_ORgnB8kpRUdPg.roa
File: ruM3HjNERvgqx_ORgnB8kpRUdPg.roa (raw, json)
Hash identifier: PlPWFC2JrmndV4OQE3nseoAktqTwyUVk5hNOpAVaK54=
Subject key identifier: AE:E3:37:1E:33:44:46:F8:2A:C7:F3:91:82:70:7C:92:94:54:74:F8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AFF48C849439952E8A3BEA024F91A064
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ruM3HjNERvgqx_ORgnB8kpRUdPg.roa
Signing time: Tue 01 Aug 2023 07:16:26 +0000
ROA not before: Tue 01 Aug 2023 07:16:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:af:f4:8c:84:94:39:95:2e:8a:3b:ea:02:4f:91:a0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 07:16:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aee3371e334446f82ac7f39182707c92945474f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:47:87:5b:d3:85:81:b4:63:ed:ff:cd:10:51:
db:e8:a2:0d:b5:99:93:22:98:6e:25:af:a2:43:a8:
46:f6:89:03:96:56:b3:5d:58:88:39:95:9b:f7:f6:
49:2e:8f:91:ae:78:29:e4:b8:0b:97:c6:43:7f:49:
f8:b7:16:9f:67:ca:0f:a3:0c:12:0f:bb:72:30:07:
2a:24:ac:5e:d9:45:2f:42:62:d5:e6:cd:8a:2b:70:
be:6e:37:f7:a5:84:35:9b:03:91:5e:fc:38:13:56:
dc:2c:28:7c:30:47:87:7b:8c:43:31:de:64:72:85:
cc:4d:2a:a5:b9:8b:8c:0f:ec:e3:e4:99:d8:83:81:
d6:ce:2f:6a:80:be:d6:f0:d2:ac:ed:76:03:e4:f0:
f6:3e:ed:cd:62:2e:2a:ce:87:48:57:dc:0a:0b:af:
58:35:04:1e:6d:ad:33:6c:05:27:02:02:26:f7:d2:
5f:f2:fb:e4:88:1e:31:8f:1c:a1:1e:78:03:f8:6d:
18:eb:e1:dc:d6:69:2c:b5:8f:a2:b1:bb:82:f6:85:
d8:08:f5:f0:1f:e2:49:9f:c7:a7:7e:6e:23:bf:c7:
5e:56:4d:f5:2a:89:7a:4e:d4:28:a0:20:ac:1d:3b:
b4:74:44:ec:db:62:50:c8:e6:cf:65:17:28:a9:16:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E3:37:1E:33:44:46:F8:2A:C7:F3:91:82:70:7C:92:94:54:74:F8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ruM3HjNERvgqx_ORgnB8kpRUdPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:1c:2d:9d:7c:60:6d:cd:b9:ee:f7:de:bd:f6:78:f2:ec:8a:
9d:d6:23:0f:2f:72:71:24:94:6d:a5:27:ce:c4:1c:7c:33:e7:
24:c5:1b:58:7d:69:3c:1f:b6:94:de:58:ec:2f:01:db:fb:6c:
9e:93:ba:fd:6b:48:92:4d:0f:9f:5c:c2:ad:95:69:6b:4c:2c:
98:43:cf:d3:c6:df:cd:d3:ff:68:1e:64:83:0d:ae:a1:27:d8:
35:33:a5:fb:7b:3d:d9:8c:2b:15:d7:97:b2:39:83:5c:b8:64:
bd:be:42:57:01:0f:ca:5b:61:b5:19:08:37:1a:03:7d:38:f7:
ed:f6:94:1b:b4:64:4a:10:f3:dc:95:2f:39:a5:b9:92:72:51:
8f:c9:11:ba:c0:09:37:a0:26:bb:30:ce:9c:f8:3a:8a:ce:7f:
67:1b:1d:46:dc:d9:d2:8b:b0:fc:ff:50:70:b7:ec:f3:c7:de:
26:8f:b4:ae:20:f6:1c:a2:fc:25:c9:72:37:4c:9a:0b:27:fc:
3d:4d:ff:9d:b7:99:e6:fc:7f:0d:f6:ea:7f:3a:26:c2:5a:75:
db:3a:59:e7:32:6e:9e:2a:68:10:08:35:65:61:55:fc:b5:b5:
fe:25:5f:a0:75:ea:bc:ec:a5:d7:9f:93:d8:80:51:6e:0a:a9:
38:40:e5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:19:22 2025 by rpki-client