Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x46paCHVgLDbLPG3r7Tr3C8e9dk.roa
File: x46paCHVgLDbLPG3r7Tr3C8e9dk.roa (raw, json)
Hash identifier: hal9zeBdM6HpV9wlzaMGRmPBUrW8SKdWVXDFcGJfa7s=
Subject key identifier: C7:8E:A9:68:21:D5:80:B0:DB:2C:F1:B7:AF:B4:EB:DC:2F:1E:F5:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2512BD4121DEB501D182292C52138BCD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x46paCHVgLDbLPG3r7Tr3C8e9dk.roa
Signing time: Thu 24 Aug 2023 01:04:59 +0000
ROA not before: Thu 24 Aug 2023 01:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:2512:6ff6/128 maxlen: 128
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:25:12:bd:41:21:de:b5:01:d1:82:29:2c:52:13:8b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 24 01:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c78ea96821d580b0db2cf1b7afb4ebdc2f1ef5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a9:9f:d7:32:34:b8:25:51:f2:96:db:5e:c7:
d3:63:14:80:fa:f5:e3:53:6b:80:a2:aa:d3:c1:89:
30:b9:08:62:0c:c9:9d:c0:08:dc:a0:87:1f:c8:85:
59:3b:09:fd:ef:f6:35:9f:ea:c3:68:29:66:c2:f4:
51:ed:59:c2:cb:1d:4a:6c:b3:ad:da:8f:4b:dd:cd:
12:f0:fd:79:c8:66:cd:5a:57:83:6e:ac:4d:7e:c4:
47:15:71:7e:0c:fa:1c:36:f0:d4:ac:3c:ba:b8:42:
ac:ae:ad:f8:c4:2c:32:86:90:a3:4d:46:bc:43:fb:
73:0f:26:f9:c1:81:d2:4b:51:7b:4c:6b:02:ae:a7:
4e:58:bd:94:bc:eb:1b:77:50:77:ac:5f:4f:9f:df:
11:62:cd:c5:87:6d:62:af:1c:b5:34:20:90:2d:a0:
9c:cd:8d:fa:3b:e9:86:c3:88:94:fc:a3:8f:e3:a2:
01:ec:27:1b:3a:d3:e6:06:6d:49:48:8a:6b:1e:08:
c5:49:45:7b:43:73:db:df:54:ee:6e:15:f6:51:51:
d2:62:58:68:63:2b:87:5f:56:d7:e7:93:7c:2b:ee:
2d:9e:19:f8:41:11:01:cb:ff:fb:f6:8c:f7:63:c4:
7d:31:52:14:ef:f7:a7:6f:d2:17:54:ab:3d:83:51:
31:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8E:A9:68:21:D5:80:B0:DB:2C:F1:B7:AF:B4:EB:DC:2F:1E:F5:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x46paCHVgLDbLPG3r7Tr3C8e9dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:ca:51:51:5c:97:51:6f:de:cc:ea:38:d6:0c:32:6e:7c:85:
14:8b:60:9a:de:89:21:df:7b:c8:fe:db:16:21:16:ae:c9:72:
20:ef:9c:3f:89:d6:f2:c2:c5:c4:b6:1e:ae:d7:88:51:6b:ed:
50:c4:4c:03:c6:e6:31:f1:41:a5:18:b7:f1:23:28:5d:40:8e:
80:01:75:69:50:95:9e:fb:e8:97:d0:b3:a2:d4:0e:9a:d1:c9:
e3:d9:4a:be:41:5b:b5:d1:aa:10:72:3b:f7:95:94:99:0b:21:
f1:d7:1b:d1:0e:dc:b1:e4:4c:76:5e:52:10:49:41:23:88:a5:
eb:18:b0:2f:5c:55:de:8b:2d:33:fe:cf:9d:89:9b:9b:97:85:
1e:97:75:74:d3:da:31:bf:85:73:df:c2:a1:62:e4:b7:99:f4:
1e:ab:32:ff:69:43:a3:63:3b:c4:8e:6f:ae:3a:a8:28:42:af:
5d:8b:33:c8:87:cb:31:a2:94:22:1d:33:78:a8:39:e4:92:ca:
a5:c8:75:1a:14:26:4e:87:86:9f:7f:ab:b5:84:2e:c9:75:c9:
62:23:40:74:17:7a:c1:44:2d:2b:b8:8b:13:b9:49:51:dc:74:
ad:dc:6c:01:ea:01:a6:59:1d:e3:09:67:f5:ed:75:97:21:23:
04:f9:21:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:15 2025 by rpki-client