Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tE4_IYw_KMykt9MtN3bSXsS_-No.roa
File: tE4_IYw_KMykt9MtN3bSXsS_-No.roa (raw, json)
Hash identifier: Uo6hXwqYoF/jFE65Vnpl+C3fzsuyHp9ZaF7NDuxx77E=
Subject key identifier: B4:4E:3F:21:8C:3F:28:CC:A4:B7:D3:2D:37:76:D2:5E:C4:BF:F8:DA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189FB0BE56175A2225D7270B8942A72258E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tE4_IYw_KMykt9MtN3bSXsS_-No.roa
Signing time: Tue 15 Aug 2023 21:13:27 +0000
ROA not before: Tue 15 Aug 2023 21:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fb:0b:e5:61:75:a2:22:5d:72:70:b8:94:2a:72:25:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 21:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b44e3f218c3f28cca4b7d32d3776d25ec4bff8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:da:bb:06:8e:e4:95:96:df:b0:35:a1:24:c3:
be:cd:d7:32:f8:b1:86:36:2d:0c:0f:5f:cf:8c:d6:
b0:4f:f2:76:77:75:a4:00:36:72:11:30:1e:13:4a:
50:7a:b7:95:dd:b0:e0:b2:c2:7c:59:87:da:0b:30:
b4:fb:27:f6:43:13:10:c7:83:43:90:a6:bd:2d:57:
bd:80:29:8f:db:8a:9a:76:fc:ee:91:a5:61:46:cf:
3d:d8:75:df:c8:f3:39:0e:14:d2:0b:ad:71:73:df:
d4:4d:27:78:a9:08:46:fe:d3:a7:68:68:a1:f3:29:
0d:c0:4e:4b:9f:25:d9:3a:83:70:e8:0d:a9:2e:35:
95:b6:39:4d:96:df:27:37:c3:e1:c8:8b:d6:e8:27:
16:79:3c:18:f7:23:2c:9f:90:70:9a:05:0e:e1:e9:
2a:f0:78:96:96:f0:7f:8d:3a:35:80:ec:99:0a:29:
75:8a:e7:01:b1:0c:96:4f:c3:92:a8:2b:92:44:42:
a1:fa:40:79:a3:d7:72:a7:fd:ce:29:10:bb:79:9f:
cf:aa:89:b8:2b:8a:75:0f:66:67:2b:36:61:1b:f9:
24:58:40:c2:3b:2e:0c:dc:4a:7b:ef:01:d2:cb:2f:
cc:a9:ab:a3:b6:c6:cf:c3:74:08:0a:ac:94:6a:ae:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4E:3F:21:8C:3F:28:CC:A4:B7:D3:2D:37:76:D2:5E:C4:BF:F8:DA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tE4_IYw_KMykt9MtN3bSXsS_-No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:8d:4e:13:e5:b9:e3:c9:4f:e4:49:d1:ef:af:7a:69:7e:ed:
c8:1d:ca:b9:a8:dc:1e:eb:a0:00:fa:b2:90:df:bf:6d:25:46:
69:07:03:1d:f6:6b:96:00:79:7c:1e:4a:f5:e5:d8:f0:5f:fc:
ab:da:68:02:02:c5:46:26:88:44:4d:9a:47:4a:6a:ea:55:0a:
7f:ce:c8:a9:78:bd:29:ed:93:8a:70:bf:f1:9b:c3:aa:45:c6:
d4:97:53:db:ee:52:a0:56:fe:96:ab:bc:29:f1:fe:c9:87:70:
21:be:1f:32:e3:d6:6c:96:7e:e4:8d:26:7d:6c:fe:44:18:c5:
78:9d:48:f2:8a:8d:77:7d:47:01:98:67:52:d7:9e:68:d4:57:
63:45:bd:95:2c:7c:db:19:ba:11:d3:f3:d5:f6:35:ad:47:bd:
c1:2e:d4:a1:e1:c2:92:a8:1e:97:25:8f:a4:7a:38:46:8d:01:
ef:75:61:17:62:69:22:91:bf:31:a9:74:d2:44:e3:c8:57:f1:
97:24:19:26:63:bc:07:90:a8:d3:65:4b:3f:ce:60:d1:d8:01:
aa:47:55:05:ff:1e:06:db:e7:d8:a0:da:1c:0b:a9:d0:e7:1c:
38:e3:a3:c9:87:92:26:c9:a7:75:af:d8:3d:30:16:ec:9e:7c:
28:52:85:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:11:08 2025 by rpki-client