Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vRjqEjr3r3jI4gvP5tjMDbyBxkY.roa
File: vRjqEjr3r3jI4gvP5tjMDbyBxkY.roa (raw, json)
Hash identifier: HvNrJzLeN3CumRLrLD2584tYRGgqG8hNGDDowqeB59s=
Subject key identifier: BD:18:EA:12:3A:F7:AF:78:C8:E2:0B:CF:E6:D8:CC:0D:BC:81:C6:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018860C3CEAFF6174C0F629843DD3B596E8D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vRjqEjr3r3jI4gvP5tjMDbyBxkY.roa
Signing time: Sun 28 May 2023 05:10:25 +0000
ROA not before: Sun 28 May 2023 05:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:60:c3:ce:af:f6:17:4c:0f:62:98:43:dd:3b:59:6e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 05:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd18ea123af7af78c8e20bcfe6d8cc0dbc81c646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:34:34:eb:ad:44:90:6a:b6:80:50:01:6e:
56:77:e1:88:54:f1:b3:6c:ba:25:ff:ea:9e:ed:f8:
ff:6c:59:89:b1:f7:36:a4:9f:c2:bd:ab:cd:ab:89:
a0:83:22:48:de:9b:b6:ca:fe:32:60:a9:b8:8a:b1:
b2:b1:54:64:4e:2d:ca:1d:15:19:04:1a:f9:6e:e8:
61:a1:e2:81:76:de:d4:dc:9a:be:b1:4b:02:09:0e:
49:81:3a:b9:a0:77:2b:74:ac:ab:b7:3d:de:9e:2c:
17:43:14:7a:7b:ef:b7:6b:a4:3a:c6:3a:38:bd:c0:
1b:ad:c1:a8:c5:10:ce:27:5d:3c:fc:53:f6:4d:01:
d1:8f:5f:78:bd:af:58:69:e0:5b:3e:01:9c:16:99:
f0:6e:74:a6:bc:45:66:4f:4f:26:57:3d:5f:75:fc:
82:16:2a:a6:4e:50:e7:ea:8e:c5:b5:aa:e9:a1:b7:
ab:02:d6:ec:90:7c:9b:6c:d9:a6:30:f3:a8:6e:3b:
19:21:27:61:ef:65:6b:27:7c:21:4b:00:68:43:4f:
63:81:08:69:28:31:f3:ae:8e:ee:c2:c3:c3:dc:a8:
c9:8e:25:86:ea:43:22:67:2b:ae:c6:03:fd:d3:9d:
b6:a6:71:b7:45:79:8d:7b:84:a5:8b:4d:d2:5d:09:
4d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:18:EA:12:3A:F7:AF:78:C8:E2:0B:CF:E6:D8:CC:0D:BC:81:C6:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vRjqEjr3r3jI4gvP5tjMDbyBxkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:9e:9c:0d:66:78:40:f2:45:41:23:aa:53:6d:25:be:32:c7:
7e:23:16:38:85:57:a5:f0:be:cd:25:99:3c:72:9e:3d:d1:ce:
d8:90:32:47:e4:a6:d1:3a:4f:df:2b:2f:8a:6e:fb:55:ab:fb:
6a:a5:e9:ef:8d:bd:f1:f5:1a:2e:30:a1:c8:d8:01:9f:b8:0e:
96:a8:72:0b:d1:db:7d:b3:5f:8a:7a:f9:15:20:6d:0c:e0:4d:
d4:22:c6:6f:b7:97:20:1d:a9:fb:e1:29:25:46:28:f3:92:e0:
47:17:b6:05:48:8e:63:19:66:96:9d:76:8f:08:65:73:76:b7:
3c:cb:04:d8:08:66:93:15:2d:64:11:45:00:5b:1b:12:48:4b:
3e:05:d2:81:93:88:62:ef:74:b0:7e:c7:4a:bc:17:a8:49:a3:
5c:a4:20:3f:ac:10:8b:69:2b:d5:23:b7:e5:1b:14:f5:9d:0f:
9c:5a:ac:48:b2:7c:44:94:2c:ae:f4:4c:c5:be:80:08:90:ba:
79:2d:68:28:15:b2:39:60:85:4d:99:2a:d2:b4:8a:e1:ee:9d:
c0:1c:62:93:52:21:ae:19:4d:fe:e1:b4:01:18:09:1b:a0:84:
fa:fb:dd:3e:63:f1:e0:03:13:26:3b:82:ed:2e:1f:b3:8d:10:
2c:25:78:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 00:51:41 2025 by rpki-client