Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RlaDhsiklpThbBpLKkD1lqLYmFs.roa
File: RlaDhsiklpThbBpLKkD1lqLYmFs.roa (raw, json)
Hash identifier: 3gwwlwcz3FQIyLELw0n0Jc+qoQfv8EzyZitN8iMbGNU=
Subject key identifier: 46:56:83:86:C8:A4:96:94:E1:6C:1A:4B:2A:40:F5:96:A2:D8:98:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189744290E91BA8A42E1B1382D4C69084B8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RlaDhsiklpThbBpLKkD1lqLYmFs.roa
Signing time: Thu 20 Jul 2023 17:04:26 +0000
ROA not before: Thu 20 Jul 2023 17:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:189:7442:6075/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:74:42:90:e9:1b:a8:a4:2e:1b:13:82:d4:c6:90:84:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 20 17:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46568386c8a49694e16c1a4b2a40f596a2d8985b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:50:7d:6e:d0:3b:5b:0f:d9:5b:f5:e5:de:d0:
ea:2a:9c:e3:db:0f:55:a9:08:0a:b8:ca:39:a9:3b:
25:63:5c:07:48:97:e0:11:49:1e:a8:44:ac:15:e2:
9c:91:27:c6:a8:a8:38:a1:82:8d:c3:d3:bf:49:b3:
ff:6b:9c:56:e7:f3:86:70:fa:62:91:e2:a5:25:86:
3e:39:23:a5:6f:31:9e:da:58:a5:48:82:fc:c1:54:
9b:e2:fb:df:0e:0f:bc:5d:e4:8c:ee:21:50:fe:6a:
d0:da:9b:5e:d8:54:3a:1c:1f:3d:6e:67:d9:bf:2f:
28:3d:78:58:fa:c8:91:75:ac:88:09:02:40:6a:df:
16:ca:37:cd:2e:a2:8b:c8:7e:73:99:6a:db:6c:2a:
4f:5d:0e:b0:42:00:c1:2b:0a:ec:a0:68:d0:24:aa:
48:9a:6a:cf:9a:9a:2c:46:1b:b8:75:5f:b3:ae:5f:
e6:ca:e9:16:39:d6:cf:5e:1a:d3:41:61:ec:06:d5:
c0:07:a6:4d:41:49:ac:21:bb:31:25:91:e2:f0:1b:
6e:94:84:a8:bd:05:35:1e:66:d1:be:35:6d:1b:04:
04:3a:ff:d0:43:1b:1b:bf:fe:c1:48:7f:e7:64:3d:
e4:f0:76:e7:04:e6:6f:95:a9:80:aa:12:b2:b8:46:
ef:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:56:83:86:C8:A4:96:94:E1:6C:1A:4B:2A:40:F5:96:A2:D8:98:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RlaDhsiklpThbBpLKkD1lqLYmFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:eb:b2:a7:4d:c5:3b:ed:a0:9e:7d:f9:09:c8:29:17:5d:65:
55:94:57:b7:f0:2b:a7:82:1e:1d:99:60:36:03:22:18:d3:bc:
f6:54:53:f0:d3:bd:16:34:f8:48:a5:11:96:e7:70:3a:94:8a:
3a:9c:90:ab:d9:8d:e6:a2:80:dc:86:17:89:d5:59:28:f6:ce:
06:4e:6b:5e:4a:e2:fe:1e:65:8b:80:bd:7b:2d:27:44:1d:1b:
e6:b7:68:64:db:f3:eb:dd:fb:34:1a:a5:9d:15:21:c5:9f:25:
7e:0b:b2:95:1e:b5:51:88:02:9e:3c:ab:de:42:c2:32:0d:c0:
6a:39:4b:76:3d:52:fa:0f:fc:72:f0:85:16:fc:bd:75:30:1a:
7b:87:c2:fa:1a:a4:30:ec:56:64:87:29:59:bb:1c:c7:54:a2:
bc:c6:51:5c:b7:93:06:9a:96:8c:89:72:59:c9:d0:49:06:c8:
4a:e7:a6:99:a9:ce:0c:09:1a:b6:c6:8f:35:73:ab:3a:85:6e:
c8:83:6c:87:55:5f:87:34:c0:a8:ae:9f:b2:da:1a:eb:a6:37:
d3:0a:b5:83:e4:86:9d:93:e7:3d:07:86:27:75:67:13:5b:04:
5c:b9:1c:bc:bb:50:5a:ba:af:c4:e2:71:7a:20:0f:9b:45:4f:
86:d7:16:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:08:02 2025 by rpki-client