Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x5vNp1m9TM7pqQiNuItb-mIv4FA.roa
File: x5vNp1m9TM7pqQiNuItb-mIv4FA.roa (raw, json)
Hash identifier: A6rWslzYv87E8ubZAgSo0QdL9zT+fdYlkvnqiiCWn2E=
Subject key identifier: C7:9B:CD:A7:59:BD:4C:CE:E9:A9:08:8D:B8:8B:5B:FA:62:2F:E0:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899E881C2BF43AC8D12EFC047C6801E293
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x5vNp1m9TM7pqQiNuItb-mIv4FA.roa
Signing time: Fri 28 Jul 2023 22:04:27 +0000
ROA not before: Fri 28 Jul 2023 22:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:9e87:e07d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9e:88:1c:2b:f4:3a:c8:d1:2e:fc:04:7c:68:01:e2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 22:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c79bcda759bd4ccee9a9088db88b5bfa622fe050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:57:30:48:ea:11:16:5c:29:a5:5a:fc:22:
16:e6:2a:d7:30:9f:49:ce:ca:9d:ff:c7:51:93:f5:
88:e3:bf:9a:c7:69:26:b0:d9:25:b7:5e:09:71:e8:
99:6b:25:fc:de:8c:6f:1b:3b:ed:04:be:97:93:21:
db:e8:e8:ce:2f:e2:89:a9:c8:1e:f4:3a:9b:8b:8f:
49:a8:68:21:26:a0:40:f1:98:3e:e5:40:49:d0:50:
75:aa:bb:0a:33:0a:c4:e6:d0:4a:a3:73:bd:10:df:
b7:72:a4:c5:de:b5:a8:d9:3f:39:1f:45:34:37:cd:
59:77:e1:e1:fb:79:2a:6d:38:ed:85:ff:2e:9e:ae:
06:09:3d:ce:f0:2c:ca:e3:96:63:6e:dd:3e:6b:d3:
9c:9a:c9:3c:9e:82:ea:fc:17:3c:e4:cc:c7:1c:26:
6a:94:11:fb:64:8a:b5:cc:2a:74:d7:95:25:a4:7f:
4f:9d:6d:6c:9a:53:15:eb:88:54:30:39:a9:77:47:
d4:82:9f:ba:d5:21:29:ee:64:d1:db:6f:e3:85:9c:
92:77:f0:f9:c4:e8:d0:f8:1b:61:85:f8:52:97:97:
82:75:4f:c9:a5:51:67:9a:da:ad:45:2c:f1:8a:b8:
da:aa:e2:80:86:06:b3:79:9a:56:02:15:f5:93:c1:
be:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9B:CD:A7:59:BD:4C:CE:E9:A9:08:8D:B8:8B:5B:FA:62:2F:E0:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x5vNp1m9TM7pqQiNuItb-mIv4FA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:5d:12:f8:49:ac:ad:5b:00:6b:d5:de:8a:ab:13:a9:24:e7:
21:70:2f:9f:05:65:59:e3:66:78:d6:c6:0a:e7:52:d8:f6:ce:
af:0d:0d:1a:83:2e:a7:ec:bb:e0:f9:32:ac:5b:4c:36:0b:3f:
0c:81:f0:ec:ff:b5:7f:be:e6:3c:a8:e2:53:55:57:f6:47:b7:
19:d2:35:6a:10:7b:1c:ca:c8:08:5e:fe:fa:39:e7:57:f0:26:
b2:5f:30:92:44:52:c6:57:43:54:fc:28:46:68:a5:3c:e4:af:
a1:e3:9d:c7:be:51:fb:33:b2:15:60:e6:d9:be:f4:f3:99:0f:
90:3f:cf:df:28:b9:9e:34:ac:92:63:e3:c3:44:57:2a:d3:8e:
7e:85:94:4c:c3:3a:7b:3e:9c:06:84:e2:32:4f:70:25:f5:32:
84:cb:6b:d1:f0:79:80:df:7f:af:07:5b:c5:bc:7a:e3:aa:ea:
9d:8a:ab:8d:db:1c:1b:f0:8c:c0:d0:6c:d8:d8:50:c2:8f:85:
bf:2a:e4:d6:cd:47:f2:f4:43:c0:bc:2b:f5:4b:7a:93:cf:7e:
f0:c9:43:2d:7e:50:aa:a3:30:fb:55:3c:19:c2:31:e4:17:4c:
ea:17:b2:45:55:b3:0e:f4:f3:53:2c:0d:9d:ce:10:f2:48:7a:
74:ac:b0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:31:46 2025 by rpki-client