Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N482EbwepgS0bTyv1L7ezHWavlI.roa
File: N482EbwepgS0bTyv1L7ezHWavlI.roa (raw, json)
Hash identifier: zBtFv04d/a8HBCyLBDpzC5fbvXK+xsCT1y/T5Xrl1DA=
Subject key identifier: 37:8F:36:11:BC:1E:A6:04:B4:6D:3C:AF:D4:BE:DE:CC:75:9A:BE:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D1A1A4403EF7F24005039E405EEDDCF9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N482EbwepgS0bTyv1L7ezHWavlI.roa
Signing time: Mon 07 Aug 2023 20:12:58 +0000
ROA not before: Mon 07 Aug 2023 20:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d1:a1:a4:40:3e:f7:f2:40:05:03:9e:40:5e:ed:dc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 20:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=378f3611bc1ea604b46d3cafd4bedecc759abe52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:05:81:f8:a5:0b:fd:aa:88:49:1f:1e:03:3c:
e0:f2:54:d7:2b:ae:4b:ba:5e:ec:47:58:2a:65:97:
f9:fe:86:6e:6f:98:1e:f5:fc:b7:16:3f:42:f4:ef:
12:7e:ab:45:c2:0c:ba:a3:b7:e4:13:a6:2c:be:ce:
42:a3:5c:a3:9f:89:0f:9d:09:af:df:79:ab:be:e4:
b0:75:d0:80:1e:26:61:9a:e6:56:72:8c:3f:a6:e6:
4b:21:80:d5:7c:6a:c0:03:0f:9e:ac:5f:1c:e9:80:
fe:c0:74:f3:3f:5d:14:47:39:2f:64:5c:3f:5b:3b:
ed:eb:5a:64:3f:8a:8c:cb:57:33:9c:82:e2:dd:64:
ba:00:4d:8e:a2:e5:82:83:e9:81:9b:d3:b4:0f:52:
23:67:81:72:03:90:b0:99:99:48:43:02:b5:10:b3:
1a:8a:75:7a:7d:7f:42:d2:c6:cc:3a:07:b3:fb:c3:
59:2a:35:b1:3d:6d:3a:83:84:37:70:8f:40:07:11:
73:4a:65:49:aa:3e:05:df:49:1e:f7:4e:64:f2:38:
11:81:74:5e:e2:6e:71:24:52:e8:c4:dc:72:79:23:
19:90:54:7d:43:80:ac:f6:b2:c3:bd:da:d0:dd:db:
ce:58:ef:07:81:eb:6a:aa:c8:53:6c:4a:db:99:d1:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8F:36:11:BC:1E:A6:04:B4:6D:3C:AF:D4:BE:DE:CC:75:9A:BE:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N482EbwepgS0bTyv1L7ezHWavlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:48:17:d7:4f:21:db:db:e3:27:9b:1e:a9:1e:92:df:43:df:
73:55:ee:8e:77:e7:c9:0e:b4:c3:70:b7:93:d8:30:59:6f:a7:
a4:47:4f:0c:0b:2d:c9:e1:63:a6:87:48:86:a7:48:e7:cf:35:
26:78:59:6c:dd:c1:54:05:4f:5f:87:5a:f1:c1:44:d3:e0:23:
6b:13:a8:c3:cf:94:b6:15:51:c4:ed:62:6d:72:1e:f7:e6:e3:
cf:a5:a9:45:cb:f5:9a:e1:fd:7d:1f:8b:5c:53:0c:39:e1:3a:
a7:2b:4d:8e:8c:8f:00:ba:72:18:ef:b9:71:e3:71:3a:52:94:
9c:b0:ae:2c:e2:4d:35:22:1d:b8:4c:c0:71:41:14:b8:89:b1:
2c:4e:79:ce:3a:0e:d7:68:17:74:ae:fe:fa:8e:cc:1f:bb:81:
b6:4a:81:d6:5c:f1:2e:50:3a:da:bb:05:0e:e2:51:27:1b:1a:
9d:15:70:60:18:fd:95:a3:ee:9b:90:4b:18:27:9f:4d:4c:b3:
f9:54:f6:f0:50:2e:96:31:d6:1c:b0:3f:8d:3c:0e:fa:7d:0f:
ab:f0:73:4b:3c:f4:5f:17:b2:7c:ab:80:d3:64:4c:b1:ec:27:
f0:b9:78:53:fc:8c:e3:f9:58:57:5d:05:2d:8a:35:a8:0a:98:
25:49:f4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:09 2025 by rpki-client