Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t2NH_2LvtanLGAiErVKKRScJwiU.roa
File: t2NH_2LvtanLGAiErVKKRScJwiU.roa (raw, json)
Hash identifier: SvEFI55b+jgE8P4ramYsAqIoL/gIRKR0ZwhqFWd04rE=
Subject key identifier: B7:63:47:FF:62:EF:B5:A9:CB:18:08:84:AD:52:8A:45:27:09:C2:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018820D2DAA7724F50162805191280AC4034
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t2NH_2LvtanLGAiErVKKRScJwiU.roa
Signing time: Mon 15 May 2023 19:11:09 +0000
ROA not before: Mon 15 May 2023 19:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:d2:da:a7:72:4f:50:16:28:05:19:12:80:ac:40:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 15 19:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b76347ff62efb5a9cb180884ad528a452709c225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:50:37:3c:ca:94:6a:8e:7c:c4:57:01:86:2b:
d2:75:48:e6:04:05:ee:a8:dd:47:e0:c6:6e:df:e2:
27:c3:5d:e5:ab:e3:a3:f4:dd:ba:40:4c:4d:7e:29:
23:6e:e6:c3:96:67:aa:4e:fb:26:c7:1a:dd:12:ee:
21:fe:53:ce:7e:e9:d8:b4:0e:6a:c4:20:d1:06:75:
95:7c:07:0f:29:ee:65:8a:11:06:6c:9d:56:aa:03:
72:ab:18:1b:7f:d7:7e:b4:dc:42:34:42:20:02:28:
8c:e1:52:8c:85:3f:dd:7e:bd:97:fb:dc:ae:d5:42:
16:c8:d6:ec:4a:cb:9f:ba:fa:a8:aa:0e:d3:1b:9a:
c6:31:17:24:00:66:08:08:d0:17:fb:fe:4a:d0:03:
95:68:b7:b0:ad:a6:4e:be:91:46:9e:04:c1:8a:e8:
c8:e8:b5:7a:3a:d9:dc:cb:90:2a:b9:1f:93:e9:ad:
29:48:19:47:2b:ff:24:76:37:ae:5e:11:81:93:eb:
f3:c3:51:b6:68:3f:5b:fe:21:6c:90:9c:0f:fb:13:
08:b6:e8:0b:e1:ce:f2:db:d9:a1:1d:04:1d:4f:17:
0f:07:4c:52:19:df:62:4d:6f:e7:a6:dd:f7:99:f8:
4c:3a:71:6e:7a:87:b6:ff:bd:94:00:e2:35:5b:81:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:63:47:FF:62:EF:B5:A9:CB:18:08:84:AD:52:8A:45:27:09:C2:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t2NH_2LvtanLGAiErVKKRScJwiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:3a:94:93:33:6f:c7:40:85:c1:c4:ad:21:2e:ec:5e:66:16:
2a:2d:a4:8d:6b:d8:19:2e:7e:bf:84:17:ba:0d:03:39:f8:c6:
91:da:47:9f:90:24:82:05:74:1b:c1:d6:0e:00:a3:05:d5:0d:
23:b7:36:95:42:57:80:c6:76:6b:96:1c:4a:4d:bb:a7:bf:9d:
82:6a:6b:5c:79:c4:30:3a:e7:1f:9c:ef:82:92:3a:66:98:71:
c6:98:9a:07:ba:7a:e4:aa:2b:bb:6d:93:53:f9:f2:c1:e8:14:
e8:b1:39:57:56:e4:af:0a:62:4b:c4:fc:11:9b:7f:95:c4:db:
5b:8e:b7:31:e7:d8:5e:56:03:00:dc:b1:d7:21:ec:7e:3e:61:
a2:6f:2a:9c:53:16:4d:02:52:58:17:ef:92:76:11:a1:78:ba:
25:46:40:ac:3b:38:24:ac:ec:63:29:4d:12:3c:73:72:b7:bd:
97:e9:bf:b8:5d:01:15:6d:3c:32:ca:8f:9f:b0:d4:66:a3:95:
95:9f:74:4d:77:f6:d5:b6:da:29:01:99:9a:20:a0:c8:bc:9c:
08:51:ad:f6:c4:91:7b:3a:ac:0a:ae:86:51:8d:05:cf:8a:3e:
78:eb:95:cf:1a:13:d2:88:5a:df:c8:86:86:15:57:7c:16:31:
9e:ca:2d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:38:49 2025 by rpki-client