Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1wPmxi1u_hPx_IUh6Vujfsrn_sU.roa
File: 1wPmxi1u_hPx_IUh6Vujfsrn_sU.roa (raw, json)
Hash identifier: kPSiP/uUERds9JO86DW3LdSvxDfqOqrkDRD9Z6dwrs0=
Subject key identifier: D7:03:E6:C6:2D:6E:FE:13:F1:FC:85:21:E9:5B:A3:7E:CA:E7:FE:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186823D8DC3F8DFC8B8532143DCDEC26644
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1wPmxi1u_hPx_IUh6Vujfsrn_sU.roa
Signing time: Fri 24 Feb 2023 07:05:17 +0000
ROA not before: Fri 24 Feb 2023 07:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:823c:afa1/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:3d:8d:c3:f8:df:c8:b8:53:21:43:dc:de:c2:66:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 24 07:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d703e6c62d6efe13f1fc8521e95ba37ecae7fec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:d3:0f:7c:46:46:86:b2:15:d1:5a:6f:e7:
00:53:aa:03:e5:74:77:56:03:0a:0a:cf:17:c0:9d:
2c:70:ed:fb:49:1a:b2:95:ac:ce:d7:93:7f:69:ba:
89:64:f3:71:83:01:99:2a:6e:8e:bb:ec:b9:11:a9:
78:b2:e9:6e:27:a0:0f:f5:84:56:6f:8c:cc:f9:12:
e4:7b:05:28:dd:9a:d2:54:66:d0:f1:dd:10:a9:33:
6f:03:33:fe:28:7a:70:04:95:87:3d:e1:dd:59:b5:
f3:2e:5d:ee:01:73:16:33:f8:b1:a4:cc:94:a7:28:
17:e8:51:47:18:5c:db:7f:f6:a1:35:a0:d7:ef:3c:
41:c7:9f:16:7f:85:39:33:02:c9:ce:32:6b:5c:1d:
25:8b:7c:e1:2e:dc:00:aa:c6:40:02:ae:87:ae:44:
9d:7e:54:21:12:54:76:c8:5b:94:c6:d1:7a:5d:b8:
16:c2:60:03:cc:6f:2a:12:b5:e5:26:59:21:00:13:
b7:a0:54:37:88:a5:21:f7:37:4c:51:c5:0d:21:6b:
b3:bb:14:68:db:5d:d9:59:39:83:b9:81:f3:4b:82:
9c:a5:33:59:c5:77:06:2e:29:26:f4:67:aa:1d:71:
30:fc:78:0c:0b:26:13:86:d5:90:b8:8e:a8:4a:03:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:03:E6:C6:2D:6E:FE:13:F1:FC:85:21:E9:5B:A3:7E:CA:E7:FE:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1wPmxi1u_hPx_IUh6Vujfsrn_sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:24:1b:d1:2f:64:2d:9b:4f:71:ea:eb:55:73:2c:6f:f6:9c:
c5:50:e3:be:77:3b:83:8b:2a:c1:39:45:cf:f9:e9:96:12:4b:
93:0c:df:0f:42:d8:1d:f6:62:bb:1e:8d:bd:ba:9a:a1:ec:71:
93:92:59:78:c2:a0:04:34:d7:17:88:c5:a0:6f:23:bb:49:26:
d2:46:ab:1a:6a:9a:22:19:f4:5b:2c:4f:e6:80:71:2f:f7:eb:
c8:bc:8f:fd:79:94:2d:04:de:30:9d:d2:f7:8b:95:f1:47:0b:
6e:e2:3c:bf:d1:62:1a:b3:c3:e8:54:70:f6:fc:bd:c8:85:3e:
09:a7:99:59:72:88:b4:62:5e:27:50:a3:84:fe:8a:c6:ce:c6:
ca:8d:a3:26:2a:c4:40:54:6f:29:5f:2d:fe:c7:e0:f0:bb:a3:
51:ec:c2:03:d6:54:ab:ec:e0:2e:e6:29:38:04:99:3f:e1:94:
03:e9:08:8a:54:32:59:b9:bb:b1:19:c4:ce:0b:df:ca:22:9d:
63:fc:ff:a0:f8:fd:60:76:86:41:7b:61:fe:19:02:aa:2d:98:
36:b7:40:e5:10:26:6b:e6:23:ab:d7:f2:0f:49:0d:79:bf:62:
94:92:f1:79:42:e7:1a:0e:a3:6d:17:ae:6c:b6:d9:6f:cf:56:
19:59:df:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:22:36 2025 by rpki-client