Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t48bUkyb3t1ZWEfSlnVjr_2Vqug.roa
File: t48bUkyb3t1ZWEfSlnVjr_2Vqug.roa (raw, json)
Hash identifier: M79iq+RNoCAACoDmHPZMjh7Lp+vWVULYgmVQBU0Wkuc=
Subject key identifier: B7:8F:1B:52:4C:9B:DE:DD:59:58:47:D2:96:75:63:AF:FD:95:AA:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018323AED3612159F015B132D2F3F7157A12
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t48bUkyb3t1ZWEfSlnVjr_2Vqug.roa
Signing time: Fri 09 Sep 2022 19:16:43 +0000
ROA not before: Fri 09 Sep 2022 19:16:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:23:ae:d3:61:21:59:f0:15:b1:32:d2:f3:f7:15:7a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 9 19:16:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b78f1b524c9bdedd595847d2967563affd95aae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:29:ab:40:36:de:39:9d:e4:44:05:a2:29:3d:
e8:d3:a4:64:f0:f4:f8:94:bc:aa:37:4b:fc:b9:db:
4b:e7:e8:ee:b8:78:66:aa:85:17:e7:4e:43:ca:d2:
15:39:3d:d9:dd:25:ba:29:ee:0d:ec:d1:37:cf:ca:
c6:fc:25:d8:ce:c8:6a:37:fc:f7:3f:af:a8:ee:32:
0d:55:1c:6f:ed:f0:c3:ee:2d:11:28:45:3d:38:96:
2f:a5:75:ed:fc:60:29:b3:49:5e:6f:9c:49:69:d6:
6c:f7:21:17:a4:91:e1:68:62:a4:e4:9c:e0:48:f5:
0a:bd:a5:50:84:45:d6:c2:d4:dc:c5:12:3f:44:e3:
7b:31:68:3f:7e:ea:03:89:ea:39:1d:bd:29:23:e3:
60:2d:38:b6:90:31:a5:c8:46:a7:34:1a:b7:11:01:
18:b8:12:08:34:1d:58:c3:a2:1d:e1:4d:98:6c:2f:
0e:d4:38:7e:78:ab:ac:d6:81:13:39:58:ef:26:84:
1a:5b:ff:d6:aa:61:35:db:4e:6b:af:fe:cb:0d:ec:
81:35:83:00:3e:02:66:83:c8:c3:c4:2b:bd:56:50:
63:39:79:c5:88:8a:10:73:ac:ab:2e:9a:cf:29:8f:
3e:ae:e2:db:5b:e9:d6:a1:67:4a:f9:2d:e1:c8:d0:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8F:1B:52:4C:9B:DE:DD:59:58:47:D2:96:75:63:AF:FD:95:AA:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t48bUkyb3t1ZWEfSlnVjr_2Vqug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:27:45:80:90:72:5e:36:d8:b2:50:98:8c:72:c0:f4:b4:4f:
a9:a6:67:6c:81:e9:78:0f:55:88:2e:cc:89:e0:cc:56:07:76:
c0:68:bc:f5:99:28:77:9c:25:a7:60:97:bc:75:31:1d:04:1b:
af:05:ff:e2:3c:be:06:ab:fa:09:6b:6a:a8:dd:c4:2b:00:03:
f8:8c:57:ea:8c:11:63:0b:dd:d2:4d:b3:bb:fd:59:cd:91:01:
1c:5a:51:82:fe:62:0a:5a:68:2a:91:30:9b:c0:7a:b1:e6:2e:
3c:41:b9:3f:3c:76:47:ee:cf:ad:4c:25:5d:14:6b:5d:53:e9:
1b:91:6a:eb:60:37:18:20:a2:49:00:b0:a2:ab:45:be:b2:b3:
a6:57:c7:26:89:33:c6:06:05:20:46:63:b7:b8:e9:28:d1:81:
36:2f:c0:65:4a:59:1b:a2:6a:69:f7:57:3e:4d:eb:c6:d2:b5:
5d:93:6d:66:3b:8d:46:8f:d0:76:35:df:43:cb:0e:5f:56:d6:
4d:8b:3d:72:8c:00:23:c3:c3:01:5a:fa:66:70:22:e0:25:31:
7e:00:d7:cf:88:89:d0:19:4b:ce:7a:c9:c2:93:c5:41:6f:9e:
4d:a8:c7:f3:2c:f2:34:ff:e2:8e:5c:ec:b0:bc:c5:0e:79:34:
53:7a:fe:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:21:10 2025 by rpki-client