Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t5I2gDX6F_r8oE_86lh0cpOz6zY.roa
File: t5I2gDX6F_r8oE_86lh0cpOz6zY.roa (raw, json)
Hash identifier: gwTiMusvKmi/KszLFsJ5FQe7pxtPrhxYXRiX9cKk/qM=
Subject key identifier: B7:92:36:80:35:FA:17:FA:FC:A0:4F:FC:EA:58:74:72:93:B3:EB:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D5494D4000FD26B7F0843E9867191DE7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t5I2gDX6F_r8oE_86lh0cpOz6zY.roa
Signing time: Tue 08 Aug 2023 13:14:58 +0000
ROA not before: Tue 08 Aug 2023 13:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:49:4d:40:00:fd:26:b7:f0:84:3e:98:67:19:1d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 13:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b792368035fa17fafca04ffcea58747293b3eb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:e4:fe:be:84:2e:89:68:07:26:d8:42:8c:
28:f7:f8:f7:46:41:3b:41:b5:48:70:ba:03:19:89:
71:f5:4e:64:e6:2b:29:32:56:81:b8:c9:b1:60:7a:
30:29:2f:fb:76:e9:bd:a4:22:5b:d5:18:b4:6f:ea:
74:37:21:17:9c:d1:1d:b6:33:59:1c:b0:2b:dc:55:
d1:3f:e9:e1:fe:d0:f1:0a:a1:a7:0c:d5:cf:ad:18:
82:e1:18:d4:2d:72:ea:ab:2c:88:5f:ca:6c:8e:06:
4e:1d:bf:d9:1a:43:a8:7c:41:40:8b:3e:ba:b5:e9:
ef:51:c7:3d:8f:3a:1a:26:c5:b5:4a:c9:01:8e:e0:
39:4b:11:84:39:16:cd:ae:88:b7:9b:bc:93:76:b3:
81:56:96:4d:3c:ad:f8:4d:11:47:2a:04:05:9b:1a:
f6:d4:08:7c:1a:29:83:18:04:e1:e9:2e:ea:bc:b4:
44:1a:d2:f7:4a:24:6c:ef:57:c8:6a:41:8b:e9:3a:
7a:4f:bf:db:d0:bb:f5:d5:20:e5:90:bd:03:1c:ff:
cc:3f:ac:ca:ca:60:7f:db:7f:3c:e3:fa:34:9e:57:
e1:ce:aa:a5:69:95:e1:f6:1f:f0:45:64:96:f9:b4:
9c:65:ce:fa:b3:8b:a7:bb:11:79:a5:8e:95:c5:1b:
79:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:92:36:80:35:FA:17:FA:FC:A0:4F:FC:EA:58:74:72:93:B3:EB:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t5I2gDX6F_r8oE_86lh0cpOz6zY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:40:8d:f4:63:3f:32:01:f5:d6:2f:40:be:76:c1:63:6c:0d:
25:96:93:18:ca:ad:4d:b9:8c:8b:9c:cd:ed:6e:8c:c7:be:af:
0b:66:82:d6:0a:81:19:e4:42:41:db:17:ea:bd:be:c7:f3:52:
71:fb:e1:e6:af:25:16:d5:80:83:89:92:1a:73:97:e2:f8:df:
00:50:e2:d4:5f:4c:31:82:52:60:eb:4a:97:c1:2b:d9:d6:ee:
79:be:8d:70:04:d1:ea:39:92:96:f7:5c:00:02:b4:0c:1a:a4:
17:32:42:a9:c6:85:ca:0c:cd:34:a6:1f:97:d6:af:c3:80:a1:
2d:4a:2e:03:99:48:36:80:13:54:ab:94:8b:3e:fb:7b:2b:61:
c0:3f:cf:e2:1c:d7:19:db:e3:77:45:3b:ae:7f:9a:98:a3:c6:
b3:0a:1f:21:47:8a:80:70:6b:b6:0a:94:16:de:93:a7:06:b4:
de:d6:bf:88:a9:6d:65:8f:b6:be:56:f9:9b:34:27:c0:cf:9a:
6d:1f:0a:7b:9f:ee:dd:27:75:d1:7f:ae:a4:7a:b9:8e:b4:14:
23:a5:4f:a2:f5:71:ba:7b:23:f3:fb:41:c5:8c:fd:aa:de:76:
b3:98:3b:b3:75:2c:3c:a7:53:b1:7d:3f:a1:15:e8:bc:6d:98:
cb:61:ab:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:50:45 2025 by rpki-client