Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xn2dtY2c4yiKFty2xEBGleWe1is.roa
File: xn2dtY2c4yiKFty2xEBGleWe1is.roa (raw, json)
Hash identifier: kYUNFCkzl8Rghxe81izr8VRyskU/E8NjUntIOP8nWus=
Subject key identifier: C6:7D:9D:B5:8D:9C:E3:28:8A:16:DC:B6:C4:40:46:95:E5:9E:D6:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873CF5CD064181A25DC834FCC100C03E87
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xn2dtY2c4yiKFty2xEBGleWe1is.roa
Signing time: Sat 01 Apr 2023 13:15:54 +0000
ROA not before: Sat 01 Apr 2023 13:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3c:f5:cd:06:41:81:a2:5d:c8:34:fc:c1:00:c0:3e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 13:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c67d9db58d9ce3288a16dcb6c4404695e59ed62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:15:bd:8c:34:ee:1d:ad:7d:59:e0:ee:8e:
9a:b8:38:da:c6:44:ba:f8:2d:67:bc:97:1f:87:26:
5e:3a:fd:e5:de:13:ee:e0:c1:4d:cb:ca:63:3f:bc:
ab:3b:44:11:0b:d6:f9:ef:a0:ea:c6:22:d2:f1:35:
4c:ef:77:59:fa:c7:f4:d8:d1:6a:e0:d4:72:d3:e8:
55:98:d1:4d:d5:1f:bb:70:ba:93:75:7e:ae:8b:50:
a2:5a:fd:9e:d6:e6:7d:6b:a2:87:22:d0:bb:69:ba:
ae:2f:a8:d1:c7:70:eb:6b:32:71:54:3d:7c:87:31:
da:e2:3e:c4:14:5c:23:e2:20:e7:32:83:92:10:8a:
15:18:aa:61:5b:d4:34:4f:75:d6:42:b7:b1:c8:32:
2f:7e:22:51:23:94:d1:12:16:41:3a:d0:29:b4:04:
39:53:7d:a1:3a:a6:f2:3f:0c:2e:9c:9a:ed:4d:5d:
5c:e6:86:20:16:6c:e3:98:3d:b3:bc:e1:c6:12:d2:
05:c0:69:4a:59:fa:af:85:2b:8c:80:72:72:de:1d:
38:ae:4c:8d:25:cc:bf:4a:c5:7f:4f:db:2c:9e:ea:
0e:3f:26:58:9c:ad:47:9f:57:b4:a4:65:c4:09:6d:
2a:14:a0:67:01:b1:11:7f:b8:6d:22:64:57:60:25:
63:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7D:9D:B5:8D:9C:E3:28:8A:16:DC:B6:C4:40:46:95:E5:9E:D6:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xn2dtY2c4yiKFty2xEBGleWe1is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
66:f6:37:5f:c7:58:57:f0:f5:ac:5d:4b:01:ae:4f:f1:87:27:
d9:ef:80:b4:8e:65:89:4b:83:5a:d4:74:3e:0d:78:50:f1:e9:
13:5c:50:04:20:5d:8f:b4:b9:15:c8:7a:f1:00:6f:9f:86:b1:
2d:f5:3a:ef:04:e5:6c:59:07:f2:fb:11:3a:69:dc:ba:5d:94:
c2:98:e9:f8:0a:28:00:99:ef:77:6c:b1:ad:96:da:3b:6e:15:
dc:8a:6b:4f:43:39:58:83:66:cb:0b:c0:9c:59:eb:b2:20:f6:
d1:95:b3:0e:07:f3:2a:9e:4e:cc:a5:05:93:f0:b7:26:6a:c4:
24:19:30:d9:e3:b4:2c:3f:a6:d6:b7:bb:06:d4:a5:86:d0:79:
9f:ef:95:19:a3:52:14:f6:9a:43:bb:91:f5:49:1b:a2:16:d1:
9b:f7:3a:50:36:6a:1f:8a:44:c7:ad:d6:60:dd:66:c1:75:e0:
79:b6:0d:09:ab:36:f7:d7:43:30:21:37:5b:21:24:95:51:91:
b7:00:6b:bc:8d:5b:db:57:21:af:ca:a1:20:ac:15:c9:68:b2:
35:fc:67:57:25:f7:f5:ec:07:1c:47:52:21:1a:6a:25:c1:d9:
d2:14:73:ab:7e:b8:cc:65:18:cf:33:b0:9e:86:84:9b:a3:89:
bb:ea:ba:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:38:45 2025 by rpki-client