Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tH30W5qRX5WZ-gxsiITcr9Sluac.roa
File: tH30W5qRX5WZ-gxsiITcr9Sluac.roa (raw, json)
Hash identifier: YYCVXuU5fSi1AfBgOAC1Gk56kHqi1jBYIEGSHvozoDA=
Subject key identifier: B4:7D:F4:5B:9A:91:5F:95:99:FA:0C:6C:88:84:DC:AF:D4:A5:B9:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897E26E98244532D7E8F0CA848400DF45A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tH30W5qRX5WZ-gxsiITcr9Sluac.roa
Signing time: Sat 22 Jul 2023 15:10:26 +0000
ROA not before: Sat 22 Jul 2023 15:10:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7e:26:e9:82:44:53:2d:7e:8f:0c:a8:48:40:0d:f4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 15:10:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b47df45b9a915f9599fa0c6c8884dcafd4a5b9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3f:d0:d8:e9:c7:28:d5:ab:c2:88:f5:cb:b9:
64:d2:f8:88:63:f8:6f:42:1b:50:e7:4e:34:28:90:
50:77:d1:2c:df:2e:99:29:09:4b:67:a6:28:3b:01:
bf:ad:e8:8e:1b:91:70:90:12:89:1f:eb:ee:c2:a9:
1b:3e:9e:28:36:4f:f6:70:a0:53:8f:ff:56:90:0c:
31:9b:be:d7:27:1a:b6:0b:19:08:d0:f5:86:9f:bf:
97:dc:fd:34:57:cd:19:8e:7f:fc:09:05:58:33:37:
5d:c7:43:26:1f:b7:b7:a3:8f:37:b6:fd:4a:a1:b1:
38:b8:01:d3:72:62:c2:cd:5c:a1:09:c8:19:6f:7f:
0e:2c:0a:03:e0:02:f3:5e:ba:b3:c1:d9:aa:e4:3b:
fc:24:f6:6f:6b:a1:39:b1:b0:51:c0:81:04:1f:d9:
19:4e:0a:f7:82:bf:e0:18:27:f4:ac:df:83:2e:c8:
8c:56:0d:1a:bb:84:f5:4b:3d:88:67:6b:e4:62:97:
3c:45:97:2b:4f:cb:0f:a9:a1:4e:b7:2e:64:64:8c:
09:f8:b9:8d:84:13:3c:54:f0:6f:fd:ca:e1:e3:24:
cc:3b:7f:cb:16:76:5e:d7:2e:cd:d9:90:b1:56:ea:
7f:9d:68:09:1d:14:51:5b:da:75:7c:7f:51:4a:20:
10:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7D:F4:5B:9A:91:5F:95:99:FA:0C:6C:88:84:DC:AF:D4:A5:B9:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tH30W5qRX5WZ-gxsiITcr9Sluac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:b5:a9:c5:a0:be:5d:bb:08:5a:23:ea:9c:00:5b:02:e6:e5:
28:03:88:43:af:e8:cc:e5:c9:a0:83:05:2f:3c:c2:2d:99:8f:
c1:2f:2b:b4:98:83:a5:09:63:df:01:95:0d:75:4e:30:1e:42:
39:cf:db:6d:6f:2e:dc:84:a3:f1:36:7a:46:50:72:43:cc:1c:
aa:14:5e:bb:fa:d3:08:ca:28:fa:14:4b:9c:61:e5:79:61:2c:
a4:c6:26:fb:dc:e4:d4:83:ce:18:f3:ad:79:a7:b5:04:ae:9c:
e8:3d:fc:ca:17:5f:69:22:4b:e4:b7:04:62:75:07:05:65:68:
fb:2d:76:0c:5f:d0:08:7a:9e:f3:d7:79:2e:e9:eb:65:61:0c:
a2:20:9a:23:23:fe:56:b9:08:42:96:a0:e8:c6:b0:22:e4:7f:
a5:ee:d5:6c:d5:93:58:30:76:d1:12:13:6a:63:08:60:e6:23:
62:90:ec:fa:63:55:11:b2:e5:7e:15:98:67:a3:0b:84:3e:37:
27:8b:7b:06:27:34:3b:dc:c0:38:c5:da:94:e7:29:f5:db:fb:
75:07:9f:20:c8:81:68:d1:e9:6c:99:db:1f:95:53:f4:5f:2e:
d0:6f:e8:e9:63:9c:6d:52:18:ad:83:cb:63:22:58:52:3c:f9:
93:e7:3f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:13 2025 by rpki-client