Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2udI0K1l_nOsOP5034SLJY3l6J8.roa
File: 2udI0K1l_nOsOP5034SLJY3l6J8.roa (raw, json)
Hash identifier: LLQ24hTmwrD7eI8BlcmswoJRL6kJH86NRB7IB+fZ0hY=
Subject key identifier: DA:E7:48:D0:AD:65:FE:73:AC:38:FE:74:DF:84:8B:25:8D:E5:E8:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C52848E46A106896C40853257D2C3427
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2udI0K1l_nOsOP5034SLJY3l6J8.roa
Signing time: Sat 05 Aug 2023 10:04:58 +0000
ROA not before: Sat 05 Aug 2023 10:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:c527:ccd6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c5:28:48:e4:6a:10:68:96:c4:08:53:25:7d:2c:34:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 10:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dae748d0ad65fe73ac38fe74df848b258de5e89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:75:a2:6a:bc:4d:38:dd:4b:a9:75:95:0c:
6f:05:8e:d2:0d:b9:8d:59:53:ed:77:37:c1:04:45:
67:b6:9b:4c:cd:97:e5:75:ad:62:77:fe:ae:2a:86:
18:c8:a4:bd:03:80:34:b3:51:e6:c1:6c:6e:7d:3f:
e6:96:4c:ca:6a:d0:2e:b3:b9:62:f6:0d:fd:53:90:
80:17:b2:ee:9e:e7:44:3c:fb:be:6f:d1:90:0a:8f:
a7:31:c1:bb:bb:3b:8c:97:3a:ca:9e:52:79:bf:ba:
67:2c:e4:25:7c:43:23:99:7d:d1:4d:c9:70:fd:79:
c5:32:c6:ba:ed:6e:bc:5e:1b:de:66:88:87:3a:70:
c4:69:2b:2d:1e:ec:d8:82:d8:bd:f4:aa:91:76:3e:
e0:38:49:fd:b3:c3:a7:b8:96:bb:e1:0f:21:c7:58:
8e:17:c6:dd:86:19:94:b5:80:f1:c8:fb:fb:c6:f8:
e6:f1:c4:eb:b9:da:ad:ab:a1:7d:b5:31:40:33:b2:
6a:36:53:20:30:8c:4e:86:92:d9:02:63:a5:4e:1d:
2a:ac:a8:23:07:74:f8:cf:45:7c:83:44:39:62:d7:
b9:af:93:db:c0:e8:f8:be:75:19:7f:1e:6c:bc:a3:
88:0b:da:33:b1:b5:39:be:da:20:ab:48:d9:67:de:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E7:48:D0:AD:65:FE:73:AC:38:FE:74:DF:84:8B:25:8D:E5:E8:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2udI0K1l_nOsOP5034SLJY3l6J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:22:97:a6:5a:12:19:43:69:21:5b:5e:f9:39:d7:9e:70:ea:
d7:57:8d:31:4b:a9:4c:a8:d4:e9:3c:19:38:82:bc:f6:3e:73:
97:0f:c4:d8:c7:bd:7b:66:af:49:c4:79:0a:28:72:c1:68:06:
44:c2:eb:5c:e2:7b:56:70:bd:5e:2e:93:c0:cc:83:3c:84:b3:
49:07:46:ab:55:de:1a:12:7c:6e:e5:c5:65:93:86:fb:d0:c9:
4c:78:f1:92:c2:8d:b1:c1:37:18:83:64:11:7d:38:aa:8d:c7:
44:cf:15:00:36:60:8b:2b:ca:d0:be:25:6d:1b:3f:81:01:a8:
81:57:df:23:bc:85:30:d8:3d:b4:45:24:4f:66:73:d0:84:2e:
f4:ca:c0:44:aa:d3:c0:fb:f9:f6:57:7a:8f:7f:97:f1:5c:dc:
c8:5e:4b:18:7b:5c:dd:5b:75:57:59:6f:31:47:f3:82:e7:bf:
71:ad:f3:ad:97:d9:20:ea:77:80:df:45:fb:bd:36:8d:35:3d:
07:de:e5:8d:ca:04:1c:36:82:fe:86:91:15:32:ae:08:c9:99:
3d:0e:8b:10:67:ac:7c:1e:57:bc:e6:85:8a:07:a1:9d:4e:89:
ef:07:62:74:be:4d:8c:cb:23:26:e5:ce:7e:ad:40:62:cd:35:
87:a9:39:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:35:35 2025 by rpki-client