Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ryPfdmJCNizp02SvP57OUmb3maQ.roa
File: ryPfdmJCNizp02SvP57OUmb3maQ.roa (raw, json)
Hash identifier: CcaQEsGck0LDeAFrghF/6uTsQgt9xqa5HRa5O3YoHwM=
Subject key identifier: AF:23:DF:76:62:42:36:2C:E9:D3:64:AF:3F:9E:CE:52:66:F7:99:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870E2E95C607FD8D22DC0428254454899A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ryPfdmJCNizp02SvP57OUmb3maQ.roa
Signing time: Thu 23 Mar 2023 11:15:46 +0000
ROA not before: Thu 23 Mar 2023 11:15:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:2e:95:c6:07:fd:8d:22:dc:04:28:25:44:54:89:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 11:15:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af23df766242362ce9d364af3f9ece5266f799a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:14:ff:26:a2:96:98:13:41:fa:77:10:6e:66:
b4:f4:f4:9e:46:e0:55:75:7b:4a:db:c9:93:f8:21:
26:4e:e0:7d:65:69:5a:e6:53:cf:85:73:23:f4:5a:
15:35:fc:c7:b9:05:c0:75:bf:10:c0:ee:ee:cb:9c:
36:72:f9:21:45:e5:6f:0d:a4:04:d8:db:88:40:65:
92:96:05:aa:83:bd:6a:19:95:ba:e4:e4:f7:3d:a6:
df:8e:b7:5a:f2:70:bd:19:d5:4c:96:45:a5:3e:fe:
66:5a:b3:fb:17:c0:16:43:c5:e1:b5:95:34:23:89:
a4:97:dc:77:fe:8d:71:92:4a:85:ab:83:ee:97:90:
44:20:a5:c0:99:3b:3c:85:c8:12:a8:77:4f:99:b1:
a5:42:3c:18:82:8b:11:68:a2:9b:af:f7:86:da:71:
32:00:75:d5:d8:41:b4:83:53:06:e2:93:0a:da:24:
eb:e9:7e:9e:61:65:8a:3b:97:50:1f:cd:62:a1:68:
d6:41:56:59:26:97:74:01:13:a3:72:d5:1c:70:55:
1e:b8:a1:ef:bd:29:dc:8b:70:03:c6:58:55:ff:fa:
af:9d:c7:f6:8a:af:71:33:ad:60:42:3c:8f:c9:15:
06:3a:67:04:fa:9c:85:bc:e7:bf:57:a3:ce:29:38:
82:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:23:DF:76:62:42:36:2C:E9:D3:64:AF:3F:9E:CE:52:66:F7:99:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ryPfdmJCNizp02SvP57OUmb3maQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:c1:de:8e:16:10:0f:bc:c0:4e:2d:91:04:cf:8a:8d:00:90:
8a:d3:8f:26:a8:f7:1b:95:39:fb:e8:c8:38:b5:e1:06:8e:c8:
cc:71:7f:d3:2d:f7:7d:8b:f2:25:0d:60:8e:d7:51:f9:26:7b:
7e:b7:15:84:92:bc:3c:21:da:89:78:05:b4:e6:b2:de:24:95:
2a:05:1b:6f:dc:63:a7:06:29:d3:80:d6:ad:8c:b3:61:8c:0f:
83:a5:0d:92:82:ef:95:84:ba:05:7a:d6:00:59:0f:9d:9e:a2:
f3:f8:68:c0:ac:2e:71:1a:5d:e4:81:bc:b1:44:01:ca:01:41:
bf:4e:b1:dd:54:72:c2:38:eb:70:21:ca:e8:71:c2:b7:73:51:
0a:7b:00:b4:c6:fd:1a:7a:61:d3:72:f3:3b:a0:9f:f3:73:bd:
d2:62:25:30:b4:d4:1b:9b:62:0a:b2:61:ff:6b:da:54:80:b0:
1f:47:70:79:37:09:c9:92:19:f1:3f:17:a4:f0:a9:a0:1a:7f:
41:1b:fb:d3:2a:42:34:89:b9:30:ce:5b:1b:9d:0d:75:d7:0e:
4d:e7:99:da:e0:75:8c:68:4e:42:f9:6c:17:9e:7e:cc:c6:30:
b0:63:35:cf:9e:ab:97:c4:42:fd:50:3d:90:be:7d:62:76:1c:
a9:48:9f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:59:47 2025 by rpki-client