Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t4NFKzg7id8p4on0L6lxci4jqX4.roa
File: t4NFKzg7id8p4on0L6lxci4jqX4.roa (raw, json)
Hash identifier: SU84d+2L8QtnWEXyKCUd22EP85hhWlb1XNPJwYKenwI=
Subject key identifier: B7:83:45:2B:38:3B:89:DF:29:E2:89:F4:2F:A9:71:72:2E:23:A9:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865C82BE4F130827604D363D35DBDF69F7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t4NFKzg7id8p4on0L6lxci4jqX4.roa
Signing time: Thu 16 Feb 2023 23:15:17 +0000
ROA not before: Thu 16 Feb 2023 23:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5c:82:be:4f:13:08:27:60:4d:36:3d:35:db:df:69:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 23:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b783452b383b89df29e289f42fa971722e23a97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:09:ee:4f:c1:bc:7e:8d:30:42:69:df:04:8f:
c8:b4:07:9c:12:74:9a:4e:db:a6:e5:12:d4:44:4b:
bc:18:0d:86:a5:cb:da:12:45:87:2d:aa:21:7e:8c:
20:f0:de:f2:1f:43:f9:d4:9b:38:af:f3:11:c3:18:
a3:8f:18:f5:ac:91:47:47:a8:3e:11:02:fb:4e:b4:
a1:0e:08:de:ff:52:f1:de:59:60:82:b3:5c:9e:0f:
7d:3e:2c:41:c9:49:be:07:4d:35:e3:d3:2b:3a:e7:
21:65:e9:4d:a5:04:10:40:ce:e2:02:2f:fe:0d:cf:
6a:73:1e:30:c4:88:ef:fd:71:4d:dd:80:27:e9:c8:
6d:09:8b:50:61:ff:be:4a:99:70:26:52:9d:4a:c5:
2e:a1:48:f6:e6:81:ad:13:08:e9:a2:b5:de:e4:5e:
88:3c:2e:ef:82:e5:62:47:01:58:3a:6c:57:37:83:
05:5c:99:07:e6:82:db:32:79:88:b9:c6:b8:2c:78:
25:3d:0a:5f:75:59:23:3f:96:bd:d4:b9:c0:68:72:
47:43:55:95:34:90:e3:76:73:03:9e:27:78:5e:e6:
6a:eb:db:46:5b:a2:a7:4a:8f:eb:ba:32:67:56:6f:
13:42:ab:d4:1f:b5:7b:16:06:8d:19:2b:74:67:97:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:83:45:2B:38:3B:89:DF:29:E2:89:F4:2F:A9:71:72:2E:23:A9:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t4NFKzg7id8p4on0L6lxci4jqX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:95:2f:47:19:17:9f:21:bc:f6:66:71:dd:27:22:35:c7:9e:
b7:2b:58:6c:59:df:4a:a8:b7:10:6e:8e:24:f5:7a:18:b0:2e:
dd:de:46:c6:57:27:f6:b6:39:25:1e:7d:2b:54:de:a5:e2:cb:
41:c6:aa:c1:60:ed:49:df:69:89:a4:64:8f:86:af:ce:d8:b8:
32:ed:8a:06:8c:08:6e:0c:f2:41:2c:bb:f6:3c:f1:ed:0c:ba:
8a:c4:21:eb:f1:2a:3d:52:a2:51:5a:29:03:82:f9:a9:f5:b1:
1e:e4:4c:9b:34:d9:9d:70:0f:79:15:83:b4:da:3b:d0:bd:50:
04:8c:8a:ce:69:ca:29:c8:56:bf:ed:05:4a:5e:6d:9d:4e:e8:
71:6c:5f:cf:ad:a0:6e:a1:99:74:96:9e:bd:7c:1c:f8:45:87:
2f:bf:2d:3a:48:a7:d1:b6:b5:2e:63:41:12:51:ab:d0:c4:e5:
a9:5e:3b:0e:b1:c2:2b:92:11:35:02:ea:9e:da:df:10:cf:a5:
3f:29:b2:b9:48:50:26:6a:61:a0:ca:53:eb:b0:72:d2:55:49:
80:3c:3d:4a:d5:25:ae:7c:11:71:1d:06:9b:6a:f1:14:18:45:
60:2d:2f:7d:95:85:56:5f:20:79:6d:01:35:99:f1:2e:bb:34:
10:d6:9c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:51:54 2025 by rpki-client