Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xP776RQIyz1sXMuRE2mzY7ewqIE.roa
File: xP776RQIyz1sXMuRE2mzY7ewqIE.roa (raw, json)
Hash identifier: UG3r7kO/g4fsi/u2QQcsqIyo2YgWpV2HRxGoCpxxB3A=
Subject key identifier: C4:FE:FB:E9:14:08:CB:3D:6C:5C:CB:91:13:69:B3:63:B7:B0:A8:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018940967CF637AF7DA73CBB1D31ADF978C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xP776RQIyz1sXMuRE2mzY7ewqIE.roa
Signing time: Mon 10 Jul 2023 16:15:51 +0000
ROA not before: Mon 10 Jul 2023 16:15:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:96:7c:f6:37:af:7d:a7:3c:bb:1d:31:ad:f9:78:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 16:15:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4fefbe91408cb3d6c5ccb911369b363b7b0a881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2d:f5:b2:41:fd:ae:99:66:76:2b:0d:6d:b3:
5e:24:45:16:bf:12:ed:97:04:a0:1d:e9:62:ae:99:
89:72:bf:1f:a1:a7:e4:80:ea:f4:95:94:b2:fa:f2:
5a:4f:ea:72:45:0c:62:fe:d0:8c:14:34:39:62:97:
4a:e1:c7:3a:0b:44:6d:74:65:59:e7:6d:1d:fe:76:
bb:a8:2e:8a:fb:40:c3:ea:50:de:e1:ff:83:7b:32:
52:17:88:44:b7:01:00:27:55:65:e7:5e:3e:d9:e1:
6f:08:61:3b:9c:2a:c7:7b:48:a5:24:83:a8:b3:93:
18:aa:7f:e8:1f:55:14:9b:15:1c:24:ed:cf:ef:d3:
71:14:a7:b5:3c:e4:6c:d1:ee:69:ed:26:3c:3d:3a:
6f:b4:10:15:92:83:bb:b4:a3:cf:c9:48:68:bd:f5:
37:bd:3f:76:a6:57:4d:28:52:e2:11:d1:2b:e7:8a:
3f:4d:49:13:da:3f:a1:20:cf:c4:78:20:9d:8c:81:
51:fd:a8:09:4d:17:c3:4e:ef:01:96:a4:f2:7b:68:
c1:8c:9f:43:21:30:d8:0d:07:a5:7c:c4:9d:bd:47:
48:7e:80:74:22:8c:83:c3:57:da:56:99:76:30:5c:
4f:dc:84:e3:19:27:23:34:31:41:d3:0c:4a:0f:05:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FE:FB:E9:14:08:CB:3D:6C:5C:CB:91:13:69:B3:63:B7:B0:A8:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xP776RQIyz1sXMuRE2mzY7ewqIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:15:db:04:72:3f:8a:48:7c:0c:0c:3c:c8:ec:b5:e9:f5:5c:
24:12:ac:e5:eb:fa:17:f8:c7:e9:1d:c0:bf:5f:80:68:72:35:
85:b3:81:20:f0:15:96:55:0d:53:bf:f5:0d:3d:cc:73:89:af:
2a:89:de:5e:b8:73:db:15:c0:ec:56:a1:2d:fe:96:f9:fb:36:
e5:ce:38:69:5a:b8:e2:60:d7:42:2f:f4:ae:04:b5:20:dd:92:
3c:81:a2:cc:65:ae:de:df:81:22:ba:39:fd:27:6f:3b:2a:f0:
78:bc:1c:be:64:09:05:41:77:68:a5:ca:06:be:45:36:6b:3a:
6b:c3:4c:d3:b7:0a:f0:0c:63:59:e8:b0:46:31:ca:db:e7:7b:
1b:cd:eb:2b:fc:d8:df:42:3b:ba:f1:22:84:89:7a:06:b6:2f:
69:ce:9b:20:8f:70:7f:f6:be:87:96:21:ac:d8:6f:f3:61:fc:
05:e6:19:72:72:1d:7b:e8:e1:a6:7e:6a:1b:f1:91:26:2a:de:
37:d6:aa:85:be:cc:8a:21:50:5f:b7:5a:41:d3:10:d9:43:f2:
71:43:07:8f:1f:70:30:2f:b9:17:a7:10:1f:d8:87:04:7a:dc:
87:38:bb:37:e6:c6:ff:0e:27:d7:3d:7b:10:fa:f0:41:80:de:
f6:5d:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:46:15 2025 by rpki-client