Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tOJmfWPNEHeCUpKopxrRN5FB5y8.roa
File: tOJmfWPNEHeCUpKopxrRN5FB5y8.roa (raw, json)
Hash identifier: R3Gp9Z0ZX6UqLxqwZ7EVZtLz75hWYP4xo/6RQnZsLKA=
Subject key identifier: B4:E2:66:7D:63:CD:10:77:82:52:92:A8:A7:1A:D1:37:91:41:E7:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CE32BA10D35314241F1BD1B57B2CFEB1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tOJmfWPNEHeCUpKopxrRN5FB5y8.roa
Signing time: Mon 07 Aug 2023 04:12:58 +0000
ROA not before: Mon 07 Aug 2023 04:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:32:ba:10:d3:53:14:24:1f:1b:d1:b5:7b:2c:fe:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 04:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4e2667d63cd1077825292a8a71ad1379141e72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:15:16:cf:e2:de:98:2d:d3:80:c2:e2:d0:
78:26:c4:a3:64:e3:70:ab:8b:d0:5e:2d:d7:92:22:
77:ed:bd:d3:01:e2:0b:07:b9:90:46:84:00:dc:49:
5f:34:5a:a5:3d:0d:fb:06:dc:bb:5b:50:9a:9f:96:
e6:ec:b8:a2:1a:3b:df:22:22:84:5c:41:13:62:50:
d6:42:2e:7d:92:c0:44:d7:d5:ef:af:22:22:45:9d:
5b:41:dd:45:40:9b:6a:7d:54:5f:ff:4d:17:f6:09:
7d:f9:49:17:dd:86:0f:2c:fc:81:08:92:ba:72:7a:
05:2c:09:b0:b0:68:e6:ec:28:95:b8:74:95:7c:2f:
75:6a:17:3d:4e:24:8a:bc:8f:f8:54:25:dd:37:b8:
47:45:a3:c6:cd:ce:d6:2e:13:e6:16:d2:86:45:49:
96:b7:69:ea:3e:e4:50:3d:5b:a3:d5:88:b6:b4:80:
6e:9c:74:c7:74:28:d0:ad:02:62:fd:81:92:44:7d:
1e:78:fe:82:28:88:b1:73:be:4c:8f:d6:a7:4a:72:
4d:e8:14:51:50:18:49:92:08:d9:26:8b:cd:2a:26:
9b:6a:8b:3d:d5:c2:ea:98:9f:5c:f7:c2:d1:9d:97:
4c:0e:92:b8:b8:a7:14:c6:84:12:f5:b0:59:95:e7:
1d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E2:66:7D:63:CD:10:77:82:52:92:A8:A7:1A:D1:37:91:41:E7:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tOJmfWPNEHeCUpKopxrRN5FB5y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:fc:7d:f6:76:47:c0:db:10:7c:6b:bf:b4:3e:6a:41:fc:e1:
96:05:f5:2b:ab:ad:dd:92:18:39:6f:04:97:f9:20:64:17:13:
b6:0e:53:9b:1a:06:79:85:17:0e:d9:cd:7d:7b:f5:38:72:98:
7c:5b:67:fa:90:f2:b3:ea:84:11:6c:1f:97:6d:ac:77:db:3b:
53:67:57:5e:ec:fa:9d:46:75:91:cd:e3:0d:5e:e0:0a:eb:0b:
4e:7c:cf:85:80:78:ca:c1:e4:dc:de:db:19:86:d3:41:ac:32:
49:94:3f:81:2f:7d:83:66:cc:df:50:6c:12:a5:33:12:9f:76:
ae:5c:a2:70:b6:f0:5f:39:c3:60:b5:6a:af:53:a3:0e:e3:c3:
1d:5b:88:46:8d:ac:6e:8a:c4:af:dc:f9:23:3e:db:c6:fd:60:
24:32:6e:28:73:e1:b5:b3:ae:6a:de:96:fc:b7:c9:74:4c:20:
e5:c9:be:ea:56:c4:83:90:9e:56:2c:fe:83:d1:b1:d2:9e:38:
c0:83:65:22:22:eb:89:4b:76:9b:c4:b4:c7:aa:c2:f5:09:2a:
93:cb:bb:d7:dd:52:81:05:55:b0:fb:35:d8:55:60:ef:0f:78:
63:79:55:a9:9d:06:b3:aa:2e:55:c4:6b:25:12:95:43:15:05:
c6:90:2c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:48 2025 by rpki-client