Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/spe4GpK9G8RYzUDxvXeLvxp7lDg.roa
File: spe4GpK9G8RYzUDxvXeLvxp7lDg.roa (raw, json)
Hash identifier: gpuPUsduQV5GRmhgPjTkxWacF1fT0nvRfkfEIBsohdk=
Subject key identifier: B2:97:B8:1A:92:BD:1B:C4:58:CD:40:F1:BD:77:8B:BF:1A:7B:94:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FD3AB05616C9C50E78812BC9847C92C1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/spe4GpK9G8RYzUDxvXeLvxp7lDg.roa
Signing time: Mon 20 Mar 2023 04:15:27 +0000
ROA not before: Mon 20 Mar 2023 04:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fd:3a:b0:56:16:c9:c5:0e:78:81:2b:c9:84:7c:92:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 04:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b297b81a92bd1bc458cd40f1bd778bbf1a7b9438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:2b:ca:86:6c:1c:18:ef:cb:7c:90:78:a3:
67:65:96:d9:af:2a:94:ed:03:cc:39:f3:21:79:39:
96:2a:6d:86:0a:e0:c4:80:9b:f2:1a:3c:c7:44:bf:
c4:a5:7c:61:6b:6f:4e:6e:b6:f8:0d:88:d9:33:f0:
cb:fe:0b:9d:30:8b:25:51:01:25:3a:b0:ae:79:57:
a3:75:3b:f2:d4:27:fe:6c:cf:6f:9f:59:22:f0:ca:
ba:c7:5a:39:a5:79:f1:a6:22:2b:aa:fd:83:64:97:
90:68:dc:ab:6a:33:c1:3c:82:21:4f:13:3b:2a:44:
f3:b0:09:a3:2f:57:25:7d:6b:79:d0:92:b3:15:89:
b8:57:cd:51:63:08:fe:37:bc:1d:f5:8d:dd:6f:7f:
a3:8d:3f:95:ef:30:b5:b6:5e:4b:4d:b2:fb:3c:6c:
6a:82:35:0c:c5:28:0e:6a:7c:15:cf:aa:f3:f2:3e:
43:70:0c:d0:33:57:de:bc:75:7b:e1:8b:02:6e:9b:
dd:5c:59:dd:60:b6:38:ea:df:ba:fc:de:3c:e4:56:
4f:25:2b:cc:cc:48:1b:78:c9:c1:0d:ef:e4:d4:64:
58:76:ec:0e:27:ed:c4:a2:c4:95:c3:91:3e:a2:2d:
1a:b3:5e:7e:72:73:6a:8f:6b:f6:fa:0f:68:d4:f4:
dd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:97:B8:1A:92:BD:1B:C4:58:CD:40:F1:BD:77:8B:BF:1A:7B:94:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/spe4GpK9G8RYzUDxvXeLvxp7lDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:d1:68:2f:4a:66:24:58:75:db:26:11:f9:a9:69:44:93:1b:
62:56:06:dc:2c:e5:d3:cb:c7:d5:64:1d:ba:e1:04:42:d0:6e:
94:7b:1d:b1:5d:0e:76:a2:d2:90:71:c2:80:d6:55:7e:fd:25:
86:80:ea:5b:cc:bf:59:28:52:de:9e:4a:b4:a3:fc:80:2f:70:
83:2e:74:b5:39:48:85:d8:56:a0:db:b5:07:4b:a8:4d:d4:35:
f6:77:b8:0f:44:eb:23:a0:0d:65:8c:13:a6:df:0c:5b:45:5a:
d1:10:3e:c3:13:de:3f:c1:08:f8:30:92:e9:80:a4:51:90:76:
b0:6b:32:80:04:c0:b4:d3:15:61:fd:7e:2a:38:7a:c8:ad:2d:
95:2a:16:43:d4:92:96:99:60:2c:5a:5c:2a:43:f3:87:ee:b1:
1d:98:54:35:fc:5d:90:14:bf:3e:5d:df:22:0f:e0:cf:8a:47:
1a:71:a3:0e:6b:36:ef:5c:c2:96:d1:e6:38:e8:b1:0d:31:c0:
22:39:32:49:6a:f4:08:d8:a6:50:3d:2b:47:fc:5b:9e:32:2a:
8e:6f:1a:a0:4d:20:a6:8e:79:ed:c7:38:13:a2:f6:98:7a:4f:
24:0e:96:5d:09:11:49:7a:8a:de:8c:47:29:7a:d5:fb:be:e4:
c7:47:74:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:30 2025 by rpki-client