Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sKeiPo-VHv4klyR5XRFBHDULKxA.roa
File: sKeiPo-VHv4klyR5XRFBHDULKxA.roa (raw, json)
Hash identifier: xYwnvWG/+9uK9dBxi2d+7xtWXtigDyc2Rtjxgd0zqj0=
Subject key identifier: B0:A7:A2:3E:8F:95:1E:FE:24:97:24:79:5D:11:41:1C:35:0B:2B:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D73DBF95528A5C7488DDC1212C8E7569
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sKeiPo-VHv4klyR5XRFBHDULKxA.roa
Signing time: Sun 12 Mar 2023 19:13:13 +0000
ROA not before: Sun 12 Mar 2023 19:13:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d7:3d:bf:95:52:8a:5c:74:88:dd:c1:21:2c:8e:75:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 19:13:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0a7a23e8f951efe249724795d11411c350b2b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:51:5d:2f:bd:fd:be:af:6f:36:b4:72:72:
c5:be:2c:80:69:36:86:99:8d:10:e9:0a:e5:66:90:
71:e3:92:45:fb:50:1e:ca:4b:66:c1:23:76:85:12:
8c:bf:d2:9e:7e:ab:71:51:5b:10:63:b4:ea:db:af:
ac:cc:fa:a3:33:0b:70:62:b9:2c:c1:08:37:9e:0e:
b7:81:ca:8a:8b:c9:c0:97:65:ea:98:27:bf:d1:32:
a8:b6:d6:2d:2c:fd:02:3b:32:c9:ed:b3:3c:cc:53:
ec:8e:f4:39:fb:4a:4a:a8:a9:54:d5:b4:b2:34:01:
4e:7c:e7:20:72:b8:c6:26:d8:43:e0:63:ae:e8:1b:
59:46:5b:9b:c1:99:52:eb:13:b2:42:85:c3:a9:a4:
fb:0b:cc:53:62:2b:24:5e:43:ca:b4:45:f6:e9:94:
aa:87:53:b5:8f:c2:25:6b:0e:99:11:3b:81:f5:9c:
1e:4d:d0:8e:5e:da:4e:f2:65:d1:04:d0:04:ce:42:
8f:1a:b7:59:0a:ad:e0:c7:21:dd:0e:09:91:95:17:
5a:c5:7a:87:51:1f:70:6b:df:01:6a:a1:c0:6c:9a:
87:06:e0:a7:82:15:f1:5b:01:4d:e7:ef:57:52:b3:
6d:30:99:26:b5:78:42:da:0b:8b:48:8c:be:48:74:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A7:A2:3E:8F:95:1E:FE:24:97:24:79:5D:11:41:1C:35:0B:2B:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sKeiPo-VHv4klyR5XRFBHDULKxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:b4:41:7c:3b:41:44:11:0a:bb:14:f1:90:4a:ef:6e:4f:59:
fa:f5:5e:89:69:a7:6e:3f:89:1d:46:7f:25:e9:ab:9e:c7:fe:
88:b3:fd:b7:2e:3d:d0:3a:a2:a3:c8:cf:81:99:37:83:dc:34:
68:c0:8e:35:c7:98:78:7b:29:3f:15:44:b2:9c:5d:2e:2b:33:
2a:c2:2b:22:60:00:f2:2a:af:36:83:3b:12:7b:b7:99:c1:19:
5c:fc:e8:94:36:42:24:8d:22:29:6f:74:25:33:e5:04:48:10:
42:0e:d4:88:8a:02:ca:cc:09:98:ac:43:18:02:aa:fe:f5:81:
b0:5e:8c:20:5e:0c:57:bc:8a:21:20:07:eb:1f:83:4b:99:57:
27:cf:54:a4:9b:82:bf:b1:69:87:a8:86:fe:b7:69:72:07:98:
bd:4c:a8:33:77:72:a6:a8:0f:b0:59:75:7d:d7:32:ba:4a:27:
d4:7d:86:d2:08:b6:84:6e:5d:ca:7f:a2:42:4a:4c:5f:db:d1:
9e:24:28:ea:3d:c1:f0:18:93:0c:54:0f:53:36:cc:f9:cc:df:
b7:cb:64:54:bb:4f:51:06:41:4b:ca:a7:d5:73:7b:dc:58:ed:
ad:f5:c8:dc:d1:8e:d7:c7:66:f8:f0:5f:8b:54:ee:2c:92:e0:
b0:5a:b7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:19 2025 by rpki-client