Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u2lICjLzDZ-vPBAE1iUCrr1vNMw.roa
File: u2lICjLzDZ-vPBAE1iUCrr1vNMw.roa (raw, json)
Hash identifier: 7lQoCOWx+khUFQ+0mFGt7d4hkuNeMBtkiMBST8sRRyk=
Subject key identifier: BB:69:48:0A:32:F3:0D:9F:AF:3C:10:04:D6:25:02:AE:BD:6F:34:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EE9B3C1C76ED50489240267F78A33C9B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u2lICjLzDZ-vPBAE1iUCrr1vNMw.roa
Signing time: Sun 13 Aug 2023 11:14:58 +0000
ROA not before: Sun 13 Aug 2023 11:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ee:9b:3c:1c:76:ed:50:48:92:40:26:7f:78:a3:3c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 11:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb69480a32f30d9faf3c1004d62502aebd6f34cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d7:e3:8a:ab:2e:a1:1d:12:81:28:18:ca:c6:
d7:4a:8e:0b:9d:49:48:7e:1f:89:60:43:03:4e:94:
2e:ff:c6:d1:4a:72:15:84:fe:c7:e8:2b:9b:c2:e6:
7d:f2:5f:99:3b:bb:a7:f6:40:33:28:e6:b5:a0:dc:
1e:3f:ab:a5:00:0f:0b:a0:68:b4:9a:26:8a:82:88:
24:46:da:61:9d:5e:8e:be:fa:13:80:a8:5b:2b:55:
bf:26:16:c9:5b:ca:1b:74:73:45:5a:45:6e:d9:df:
ee:51:a8:b5:65:44:0c:65:df:1b:91:e0:35:2e:8b:
92:55:85:a9:43:1d:23:46:d5:7b:15:df:ee:3b:39:
b8:6e:e4:b6:eb:62:70:e6:e8:b0:a6:5e:e1:4a:0e:
60:80:70:85:f9:78:cf:55:e7:9f:6d:ca:1c:40:c6:
a1:76:b1:9d:a4:30:b2:f8:d6:d4:96:e7:45:60:6f:
e6:03:4d:eb:e2:9f:c2:44:93:1b:7a:9d:20:d7:8b:
16:28:b9:ac:8c:84:84:1d:89:46:80:2d:1d:b1:56:
ba:72:61:0d:f8:b4:7b:f9:4a:83:57:ae:ca:03:6b:
0f:b7:5f:b6:ff:ba:27:2f:bd:45:f0:6a:37:76:6d:
67:1d:1e:0b:ea:c2:2f:15:12:d9:08:b6:68:a0:1a:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:69:48:0A:32:F3:0D:9F:AF:3C:10:04:D6:25:02:AE:BD:6F:34:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u2lICjLzDZ-vPBAE1iUCrr1vNMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:98:21:3d:48:29:31:27:ab:80:ce:2d:6e:82:3c:a7:9f:eb:
0f:dd:96:33:c1:67:c9:75:de:3a:91:84:56:83:77:46:89:74:
62:1f:54:20:e4:9e:a8:13:f6:66:fc:bf:a3:a1:55:c9:b8:4c:
7b:98:c6:79:e6:51:ba:bc:ef:33:38:1f:f3:1c:ac:25:dd:a1:
d8:1d:bb:c3:ae:90:58:85:3d:2d:bd:6c:fc:1d:15:58:ce:67:
81:1e:6c:35:28:5c:ac:91:fb:b8:a6:e0:fa:b4:52:f0:b9:48:
ec:6b:3c:49:01:7a:d8:b4:73:f1:b0:0d:95:55:d1:2b:eb:6a:
ca:0a:7c:70:34:29:1d:f3:91:14:73:75:47:d1:eb:ef:de:61:
20:d8:d6:34:d3:8e:bf:5b:1c:b8:8a:76:fe:09:ed:f0:1e:b9:
79:d9:69:c2:45:ae:55:97:98:73:37:89:4f:df:a1:44:38:fb:
38:c3:cd:c1:d2:88:dc:fe:9b:25:4a:02:1c:46:9c:d9:3d:52:
74:18:68:ee:49:9d:13:c5:dd:0a:7d:c5:b6:f7:ae:1d:06:4e:
7e:88:29:a3:98:af:18:f1:f0:11:f5:6c:05:75:a7:56:ea:20:
f7:f8:b8:1b:c9:df:48:c5:0e:8b:36:2c:35:6d:ab:b3:f9:d1:
15:a6:59:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:13:32 2025 by rpki-client