Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sDR9wIRLE-c5YJ8gY8J4hc9yMgg.roa
File: sDR9wIRLE-c5YJ8gY8J4hc9yMgg.roa (raw, json)
Hash identifier: D2skwhnQ5kp06dzthuYoqSNNJGEzyMZphQKvAvqN5WA=
Subject key identifier: B0:34:7D:C0:84:4B:13:E7:39:60:9F:20:63:C2:78:85:CF:72:32:08
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018809DD2B1A6D893320DEA656CDA4D0D28D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sDR9wIRLE-c5YJ8gY8J4hc9yMgg.roa
Signing time: Thu 11 May 2023 08:11:09 +0000
ROA not before: Thu 11 May 2023 08:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:09:dd:2b:1a:6d:89:33:20:de:a6:56:cd:a4:d0:d2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 08:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0347dc0844b13e739609f2063c27885cf723208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:cb:cc:a5:af:2e:73:ba:5d:b3:5d:d6:6c:
74:3f:51:6c:80:d5:3d:1f:00:3b:ed:40:f1:e1:f0:
b1:e6:1a:2c:02:88:c1:a4:92:25:a6:c2:65:3b:83:
67:94:ef:66:9c:34:36:e1:5a:34:a1:08:63:59:e0:
4c:d6:e0:2b:09:a3:b7:3f:14:b6:00:4b:6b:8a:08:
1c:5c:fe:ce:76:64:f8:65:04:4e:0d:07:bf:39:e9:
bf:f3:f5:07:15:70:02:77:fc:bd:b1:2e:8e:27:b7:
d1:2e:ce:01:c0:79:3b:04:5d:a1:29:ca:2f:ec:3a:
e6:5b:46:a9:56:df:2f:8f:70:94:6e:de:1c:79:ff:
f2:bb:bd:f4:d1:11:af:c4:32:ea:31:a5:60:09:01:
55:fb:2d:a9:eb:0e:a0:99:b3:03:14:b2:e8:a9:ff:
e6:16:a6:f0:8c:4b:47:ed:60:67:77:88:05:56:ef:
7e:e2:05:85:72:fc:bc:ac:10:d6:de:5d:17:d2:35:
b5:92:49:c9:51:e2:99:14:9d:5b:ed:85:39:b1:f2:
f6:f9:91:29:8b:d8:a5:cb:09:ce:eb:f3:9e:82:97:
ed:b8:02:d8:f9:80:e2:7a:71:51:b5:7c:bf:77:ef:
41:bc:3d:ce:7d:1b:02:cf:9a:fb:4e:72:8f:3d:2e:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:34:7D:C0:84:4B:13:E7:39:60:9F:20:63:C2:78:85:CF:72:32:08
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sDR9wIRLE-c5YJ8gY8J4hc9yMgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:a9:28:00:3d:58:3b:c5:47:63:57:19:fd:52:94:32:e2:83:
78:00:21:82:45:ec:15:f4:e1:f0:b0:c4:53:c8:a5:bd:22:c5:
44:0d:d8:30:1b:8a:9b:24:00:c6:1d:b8:65:5d:ea:52:1f:1d:
54:71:0f:57:af:a3:9d:d4:a0:ff:6e:04:00:d1:96:a8:e7:d7:
cd:f3:c6:c4:7b:7c:c3:b5:63:75:62:bb:95:91:9d:9d:16:b5:
f5:b1:58:92:b2:49:c4:b0:c9:91:75:87:46:63:5c:c2:79:79:
ea:1b:47:ae:f2:ff:e5:d3:5b:83:51:8a:d2:93:00:aa:83:f1:
c4:bc:29:20:18:8c:05:59:33:3a:0f:69:ae:e5:39:dd:db:b3:
1d:d2:ab:49:bf:38:69:f1:be:a3:73:dd:e9:07:88:b7:f5:ad:
22:93:16:6a:92:65:77:47:7b:25:4b:b4:f1:c5:df:79:93:0f:
41:ed:29:99:45:c7:b5:cd:27:b8:f4:15:bb:a6:46:14:27:03:
7d:8e:be:5e:13:87:ea:4f:25:af:eb:ff:db:3b:b2:83:eb:fb:
05:61:3a:c5:d4:bc:b7:45:f3:b3:56:e2:d2:ef:30:13:a2:f9:
fd:ae:30:15:a5:98:14:d0:91:8d:5e:9e:05:2c:7c:0c:9a:9f:
2b:8e:50:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:42 2025 by rpki-client