Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rwjRtJxf59g-UzMKwU2q6SGwa3k.roa
File: rwjRtJxf59g-UzMKwU2q6SGwa3k.roa (raw, json)
Hash identifier: YJ3SibU20QR5OOmnqe9Ic+OX+J3qCWw6JTE+TfYtoH0=
Subject key identifier: AF:08:D1:B4:9C:5F:E7:D8:3E:53:33:0A:C1:4D:AA:E9:21:B0:6B:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187BD45CFD6A16BB24CDA1198F1FF0F3056
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rwjRtJxf59g-UzMKwU2q6SGwa3k.roa
Signing time: Wed 26 Apr 2023 11:14:41 +0000
ROA not before: Wed 26 Apr 2023 11:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:45:cf:d6:a1:6b:b2:4c:da:11:98:f1:ff:0f:30:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 26 11:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af08d1b49c5fe7d83e53330ac14daae921b06b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:4e:2b:eb:0b:92:6b:e9:ab:17:d7:88:99:
e0:ec:bc:06:46:a8:06:4d:c2:a9:f7:f0:41:a3:4e:
93:52:7a:de:52:c8:fd:f6:1e:b0:bf:72:bb:88:0c:
eb:8a:42:3e:db:cf:21:08:eb:35:90:3a:b6:37:13:
dc:0b:6d:a5:40:60:de:48:4c:d8:29:35:1b:16:35:
5e:91:ea:02:66:84:31:32:44:b3:22:29:b3:25:f7:
e9:8b:cc:61:86:c2:85:6f:d8:16:14:c7:4d:df:0d:
de:2a:fc:07:78:af:09:be:2a:e7:06:00:c0:3e:66:
08:a2:01:85:b5:8a:6b:4d:92:fd:f8:8f:6a:a7:5f:
e1:49:06:b4:b2:f3:8d:2c:0a:87:f8:c9:ea:f0:c4:
42:be:b0:b6:af:5c:da:de:eb:b6:e5:1e:f3:06:be:
dd:83:f0:79:3b:c8:6c:7c:39:66:2e:af:48:8b:f9:
17:c9:6c:55:fe:a6:14:c3:6c:52:bd:59:2c:d4:dc:
e6:d7:49:d3:2d:08:5e:c3:69:f3:ea:31:4d:b4:3a:
70:e7:32:63:41:59:47:a8:1c:7d:07:af:31:78:8f:
38:44:6f:eb:9e:08:19:91:da:d1:27:8d:cc:31:9c:
ae:3f:91:84:71:86:98:52:21:fb:cb:3c:fe:35:33:
c9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:08:D1:B4:9C:5F:E7:D8:3E:53:33:0A:C1:4D:AA:E9:21:B0:6B:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/rwjRtJxf59g-UzMKwU2q6SGwa3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:54:94:99:bb:7e:be:d5:8f:f9:d1:05:24:c2:2a:4c:40:77:
df:a2:f1:3e:87:0e:b2:58:c4:59:01:3b:c0:57:cd:f2:94:ab:
5e:00:e1:b5:bc:05:b6:10:34:06:dd:46:59:f7:76:6c:c5:84:
11:15:b7:8c:93:4f:71:a0:f6:d8:e8:bd:d0:4b:1d:76:1a:06:
5a:fd:e0:c2:3b:e6:74:05:d3:4b:58:2b:92:64:50:34:a9:b7:
b8:73:80:f3:99:f9:50:66:d7:e7:f3:9a:f5:8b:60:2e:28:25:
35:cf:6d:c7:26:72:70:97:75:db:ac:81:28:f1:60:dc:08:15:
88:e9:c6:66:84:48:a3:21:eb:76:95:aa:ce:c0:f4:43:5a:b0:
4a:d5:e1:74:06:c3:ab:f2:b6:7c:73:0f:29:76:1a:13:d4:44:
82:5b:66:0d:2e:93:31:a0:a3:e8:60:18:a8:60:28:00:c6:f8:
3d:e8:51:7f:70:48:73:c9:32:85:8b:0a:2f:18:6a:9f:9c:8d:
9e:cf:a7:f8:26:84:dc:68:24:99:a3:da:16:8c:38:eb:71:d8:
19:72:c4:c3:27:3d:0f:48:1c:bd:1b:ed:66:95:10:6f:f8:3d:
48:e7:3d:be:be:20:1d:e9:d8:13:2b:0a:5b:e1:10:03:bd:54:
45:67:aa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:34:26 2025 by rpki-client