Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v1YcuPL6Ul5ftRUmwT4OYdwAF98.roa
File: v1YcuPL6Ul5ftRUmwT4OYdwAF98.roa (raw, json)
Hash identifier: u2wQktDmnKFITo1D+h0U147BBB3KtUxzM84N+xmxwZg=
Subject key identifier: BF:56:1C:B8:F2:FA:52:5E:5F:B5:15:26:C1:3E:0E:61:DC:00:17:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01830B6C7C53FE973935A3218EEB6B5B56EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v1YcuPL6Ul5ftRUmwT4OYdwAF98.roa
Signing time: Mon 05 Sep 2022 02:13:22 +0000
ROA not before: Mon 05 Sep 2022 02:13:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0b:6c:7c:53:fe:97:39:35:a3:21:8e:eb:6b:5b:56:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 5 02:13:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf561cb8f2fa525e5fb51526c13e0e61dc0017df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:6c:31:4a:2d:1c:3c:44:7d:4e:31:15:b9:
56:5f:d6:9e:a6:82:30:8c:e6:cf:09:75:69:94:1e:
25:93:20:26:45:14:0a:24:fd:03:c8:ac:59:68:49:
59:a6:f6:b4:15:9a:78:86:15:3a:27:5b:3d:f6:34:
f8:0c:c0:86:0b:db:00:00:df:a2:36:b9:37:19:a9:
db:80:e3:21:97:16:ff:da:e9:ca:fb:39:98:15:93:
8d:68:0e:90:3e:0f:86:6d:62:8b:e6:75:9e:1b:c1:
45:d9:92:f5:a1:b9:81:20:8a:02:40:03:6b:e9:d5:
b8:25:d6:0e:bf:aa:a6:51:bb:71:4a:f1:d2:39:75:
c0:1e:3c:6e:34:35:03:a6:0e:08:78:e4:07:a9:a9:
ff:2e:bc:83:37:9f:43:66:2a:9e:66:50:69:08:b3:
35:57:05:d5:52:99:cc:50:71:a5:5f:7a:9f:00:21:
e8:85:f1:39:4c:41:16:1e:61:e9:c2:15:be:95:6b:
ad:91:56:c1:55:ee:72:5c:27:db:66:95:3a:38:16:
af:d1:f7:77:3e:94:12:4f:b8:60:07:14:b6:04:ea:
20:a9:16:18:68:d9:db:3a:44:ae:22:1a:1d:d9:61:
0d:25:67:17:d9:99:a0:89:cb:89:55:07:4d:3f:28:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:56:1C:B8:F2:FA:52:5E:5F:B5:15:26:C1:3E:0E:61:DC:00:17:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/v1YcuPL6Ul5ftRUmwT4OYdwAF98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:91:1c:ab:85:74:e3:80:f2:fd:38:fe:5a:87:50:7c:7d:57:
c8:ab:84:cb:b4:b4:af:31:05:0e:0a:86:16:fc:7b:71:50:0e:
9f:06:2b:da:cf:80:ff:a5:c7:5d:64:8e:0a:ab:99:1d:bb:47:
ad:f7:e4:68:65:6b:ca:8c:99:1a:61:e1:3a:06:47:5e:6e:5f:
f6:d4:5a:d3:18:f6:4e:48:e3:88:ba:9c:b8:0d:78:be:09:1f:
1a:4c:b3:93:90:73:83:bb:09:78:93:01:b1:a9:38:7b:26:e9:
72:33:3b:c4:d6:ed:55:f6:c2:ee:88:e0:15:de:e4:6a:50:62:
02:11:9e:c0:b5:ab:29:ca:10:22:9a:0a:c4:f5:e3:ae:be:23:
28:57:dc:38:f3:fc:ca:a8:31:ab:ac:d7:bb:f4:d8:2e:88:b0:
ab:6b:e9:07:d1:08:fc:ae:76:2f:bd:d3:2c:08:be:93:1e:f6:
e0:b7:b8:5c:c4:7a:7f:6d:1a:cb:a1:cf:e4:e7:66:92:cf:dc:
67:cf:2d:ae:37:43:40:e3:72:43:6f:03:76:31:c3:54:a5:b4:
5a:2b:0d:8d:80:4a:ad:fe:07:9a:55:4b:77:07:c3:42:5a:d1:
b9:61:6e:86:d0:0b:bf:9f:2c:aa:72:c0:b1:46:08:a5:6b:e3:
cd:f4:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:19 2025 by rpki-client