Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0ntU4iP7LG2WiU62b6vVnuun31Y.roa
File: 0ntU4iP7LG2WiU62b6vVnuun31Y.roa (raw, json)
Hash identifier: k1c1txQesjriWPriSbbDfzJiCzFZg64PYn3F42Ct6/E=
Subject key identifier: D2:7B:54:E2:23:FB:2C:6D:96:89:4E:B6:6F:AB:D5:9E:EB:A7:DF:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F42FEA6C4150E8662284173D39CD0771
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0ntU4iP7LG2WiU62b6vVnuun31Y.roa
Signing time: Mon 14 Aug 2023 13:15:28 +0000
ROA not before: Mon 14 Aug 2023 13:15:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:2f:ea:6c:41:50:e8:66:22:84:17:3d:39:cd:07:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 13:15:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d27b54e223fb2c6d96894eb66fabd59eeba7df56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:f6:9d:4e:5f:6e:e9:7e:4f:e1:1e:d6:02:
2e:a1:ef:a6:81:ab:3d:4c:7d:5b:67:a2:7d:ea:54:
e2:d8:0f:47:08:d8:4e:ce:13:25:55:d7:ad:4d:75:
e1:e2:7d:a6:ca:f8:3f:34:08:af:22:98:70:9f:a5:
e7:45:6b:6d:d3:f3:82:ac:d3:21:3b:62:3e:17:7b:
3a:ee:47:02:20:a5:7e:ef:99:b2:1f:5a:36:63:f6:
b4:d6:9d:6d:36:ae:d7:a9:db:b6:ec:2e:b8:b4:4f:
b8:b9:d5:ad:5f:bd:a7:45:45:76:83:69:fc:41:a7:
d2:6d:8f:12:0d:b4:40:2c:0b:97:f5:7e:d1:ce:f0:
b6:8e:a5:6f:ee:50:ae:82:14:b2:16:6a:20:4f:94:
81:41:3b:05:50:4d:ed:43:10:54:c9:50:ca:6f:ce:
2e:23:77:c0:30:dc:de:16:f5:7d:68:ae:b1:f7:d9:
c4:fc:4f:2d:a3:d5:fa:1c:a2:ce:18:bc:21:bc:ef:
68:f7:de:e1:bd:61:9c:d1:a6:92:36:4c:ef:af:b0:
dd:8e:2b:e6:b8:74:69:04:c9:dd:bf:ae:c8:03:f3:
31:31:6e:74:fd:05:89:dc:59:fc:00:be:c6:e1:00:
16:e0:d0:1f:a9:76:48:43:7d:1c:0e:c3:10:79:df:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7B:54:E2:23:FB:2C:6D:96:89:4E:B6:6F:AB:D5:9E:EB:A7:DF:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0ntU4iP7LG2WiU62b6vVnuun31Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:ca:07:b1:c4:22:2a:42:4d:35:43:4a:ca:e0:0f:dc:df:e6:
54:ff:94:fd:2c:50:f3:c8:6d:6c:78:eb:98:03:a3:46:1c:00:
19:c8:a5:9c:ae:99:e9:af:a1:79:30:43:da:52:e7:bb:fe:96:
5c:cf:6d:4f:fe:3e:55:64:dc:98:6c:bc:96:f2:07:02:7c:5f:
43:83:ab:c8:20:bc:fd:5e:e9:7c:a3:67:d1:48:ce:86:5e:2a:
d0:8c:ca:9a:46:8b:94:cf:72:32:2e:1f:d2:65:8d:8a:99:7c:
14:d7:55:c0:35:bf:ba:98:57:b9:09:81:f5:83:4c:62:2c:16:
22:c2:1b:5f:1f:e7:61:69:8f:37:7b:e1:36:d4:f6:23:09:6c:
64:60:94:61:df:77:26:2a:ca:c8:80:93:31:58:82:4d:de:2d:
b9:7c:83:5c:7d:41:4c:ee:8f:5b:ea:2f:15:f2:ee:57:56:1a:
9d:da:cd:e6:48:aa:a4:1f:02:42:ec:1e:fb:8d:2c:b1:61:06:
06:4d:96:83:49:75:8a:5a:7d:69:3b:7f:35:3a:b1:20:64:39:
e2:a1:08:ca:e7:5e:c6:21:89:78:d4:38:13:4e:6c:d3:32:de:
60:42:cc:fa:7c:d1:29:33:92:4b:6d:89:b9:c3:76:3a:e1:10:
ee:e4:0d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:27:45 2025 by rpki-client