Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u7gA_UR48Z9hUW7pSrrc7IB2HJk.roa
File: u7gA_UR48Z9hUW7pSrrc7IB2HJk.roa (raw, json)
Hash identifier: SnGGDkplMIdKaXPrxLf9BEt1iaDNtmJI8sXKWXfk3qY=
Subject key identifier: BB:B8:00:FD:44:78:F1:9F:61:51:6E:E9:4A:BA:DC:EC:80:76:1C:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018863FADCFB7E4C7F4607E41C3D1FFB9A9E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u7gA_UR48Z9hUW7pSrrc7IB2HJk.roa
Signing time: Sun 28 May 2023 20:09:24 +0000
ROA not before: Sun 28 May 2023 20:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:63:fa:dc:fb:7e:4c:7f:46:07:e4:1c:3d:1f:fb:9a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 20:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbb800fd4478f19f61516ee94abadcec80761c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:cf:2b:b3:c7:5d:a4:2e:9e:33:cb:3c:f3:
53:a2:eb:23:e6:ad:a0:31:80:88:11:8f:77:f7:99:
cc:96:19:5e:3b:81:48:85:99:0a:c6:61:de:46:4e:
35:ab:11:c4:2a:72:6f:04:dd:78:75:41:a9:05:e7:
f3:44:69:51:95:ea:86:3b:19:4e:ff:5d:a9:af:92:
72:28:81:fd:72:56:35:4f:e8:70:fc:ee:53:e9:4b:
d0:17:a3:4f:aa:e4:cb:b7:76:bf:e5:74:cd:5d:8a:
ec:0e:b8:96:ec:5b:d9:27:ee:bc:7c:d6:6a:1c:e3:
c0:77:8b:e3:ab:21:e8:ab:fc:d3:68:cf:a7:25:0a:
9d:5c:0d:ad:2a:c7:8a:9c:60:a7:cc:51:0f:d9:75:
68:9d:d6:57:28:4e:75:3c:30:ad:89:84:fa:18:ff:
8b:ad:b2:33:59:06:2a:86:81:7d:72:99:12:71:a4:
96:32:ea:82:5a:3c:00:e8:6b:9b:a7:83:65:d1:b4:
fb:53:67:ea:ef:c0:e1:15:cb:d1:c8:a3:6b:6c:12:
be:2f:cb:60:d3:c8:7e:a0:d8:da:08:82:07:61:9f:
89:4d:71:a9:c1:e4:05:97:a0:b8:5c:cd:c1:7a:82:
cf:91:1a:e8:ad:e8:32:85:8a:85:30:5b:ed:cc:a0:
bd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B8:00:FD:44:78:F1:9F:61:51:6E:E9:4A:BA:DC:EC:80:76:1C:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/u7gA_UR48Z9hUW7pSrrc7IB2HJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:71:86:72:63:61:f2:8c:f4:95:fb:99:bb:cd:e6:ce:1c:36:
f7:52:4b:ae:62:2e:bf:b8:d8:96:dd:bc:5f:e9:db:0c:62:68:
f2:0b:d6:7c:03:69:a3:de:a7:db:82:c7:94:59:05:4e:e6:50:
ba:63:2c:5f:c2:7a:d1:5a:c8:a2:61:8e:9a:1c:ab:e6:d6:4b:
73:d9:f4:10:d4:76:4b:e6:f0:81:25:cf:b5:d7:bd:a8:70:a8:
5d:95:f3:ab:e3:ec:d2:67:22:dd:38:ce:a8:35:73:74:6a:c8:
6d:41:6f:80:dd:2d:24:d2:eb:f1:23:33:ab:4d:ee:ae:a8:88:
ac:88:4d:88:ce:0f:72:d0:fb:24:f7:ba:b2:ee:18:d9:06:c4:
22:f2:75:c7:fa:ee:4c:e6:bf:76:b6:6f:8a:af:39:9b:40:5f:
6a:44:3b:b1:f6:00:5a:76:b7:74:88:b7:ac:06:28:d6:87:4e:
98:ca:39:40:66:42:d9:7c:b1:fe:b6:41:60:a7:61:4e:28:e9:
c1:75:7e:50:3b:b4:4e:fc:dc:22:1a:aa:ed:20:aa:c8:93:ed:
64:7e:4b:5c:bb:2f:26:64:53:79:23:8a:00:f0:dd:e6:04:61:
25:da:11:1f:46:a6:2b:41:9d:fe:cd:dc:4d:bc:f2:cc:46:bf:
6d:12:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:55:45 2025 by rpki-client