Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SUjxG0LFXk4PbPEOzhRK_YIcW3w.roa
File: SUjxG0LFXk4PbPEOzhRK_YIcW3w.roa (raw, json)
Hash identifier: Tc7/1hYsyt2pwq2qReIGJh5a3+jU6cAQXpzs2Z1X1r0=
Subject key identifier: 49:48:F1:1B:42:C5:5E:4E:0F:6C:F1:0E:CE:14:4A:FD:82:1C:5B:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A09DA230960666DD0D93A617A1440FF08
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SUjxG0LFXk4PbPEOzhRK_YIcW3w.roa
Signing time: Fri 18 Aug 2023 18:13:25 +0000
ROA not before: Fri 18 Aug 2023 18:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:09:da:23:09:60:66:6d:d0:d9:3a:61:7a:14:40:ff:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 18:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4948f11b42c55e4e0f6cf10ece144afd821c5b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:3c:28:d2:b4:98:01:85:0e:f6:48:08:0c:
86:1e:c0:c6:f0:be:88:b0:47:0b:5f:cc:69:d6:3b:
e6:d8:29:c8:d4:ce:09:f3:73:1d:83:23:39:bd:40:
0e:bd:94:dc:b9:52:1d:f1:45:45:f3:9b:14:70:52:
97:bb:37:9e:46:e7:4b:f1:70:38:80:62:18:7c:44:
fa:da:e2:9d:7f:1d:1d:9b:52:7a:58:e9:bb:62:22:
a8:f8:39:39:62:2a:c3:10:33:2f:cc:c7:ef:55:88:
5c:6e:84:c0:46:f2:3a:c2:48:12:67:d4:2c:2b:d1:
11:96:45:28:e4:a2:d7:99:86:bd:a7:ed:eb:d9:a8:
c4:5c:53:ed:1e:0a:d7:f7:88:13:7d:7c:62:22:36:
c1:97:86:08:7a:13:58:01:b6:8d:d8:ad:52:da:29:
13:48:f2:20:08:b4:c1:bb:fd:33:10:e4:c9:32:7e:
88:b5:57:f0:26:a2:b8:77:d9:d7:b6:83:71:68:79:
a3:bb:e6:f1:70:00:5d:bd:a9:ae:79:11:88:0f:84:
3b:18:30:f3:7e:f5:5d:f7:2f:3c:b7:b7:bc:09:78:
f9:d4:91:d8:df:e8:38:b4:a0:c3:36:17:86:81:cb:
9e:97:8d:c7:bd:2f:f0:91:95:1b:ed:b4:f0:00:14:
9d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:48:F1:1B:42:C5:5E:4E:0F:6C:F1:0E:CE:14:4A:FD:82:1C:5B:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SUjxG0LFXk4PbPEOzhRK_YIcW3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:aa:23:f9:80:2e:b6:47:b2:f7:2b:49:e0:12:07:6e:37:7c:
92:a6:98:5f:b4:90:99:97:bb:8b:be:1d:e9:c4:57:3d:d8:c3:
82:81:23:f7:c6:3c:46:d6:b2:de:ef:e4:12:48:9f:ab:fd:29:
e8:ef:eb:17:de:78:c1:a1:ed:43:fe:6c:48:ac:70:7f:35:0c:
0a:d4:71:d8:10:6d:15:0e:69:a0:6d:ce:99:a6:3c:0c:0f:69:
d2:5b:80:c1:a4:e5:da:62:5f:a5:47:85:28:78:83:10:73:01:
0f:96:dd:77:3a:63:23:a9:91:bb:30:63:5a:1b:1f:89:65:02:
b1:61:8a:23:e9:56:1e:a8:12:d1:ae:26:a5:42:bd:65:5b:43:
30:54:8f:ca:91:94:ff:9d:46:f8:98:8d:fc:b6:f0:1a:ab:d5:
7f:f1:99:23:ce:26:a4:78:80:a8:36:78:26:54:72:0d:a6:bc:
19:03:b4:fd:27:08:68:8a:9c:0d:57:f9:c3:9d:e7:45:7a:cb:
94:f1:94:e1:a3:83:56:f2:86:55:0b:44:b7:0c:2a:72:62:b3:
4a:32:86:89:6d:f2:d8:27:99:7f:8e:3d:39:48:de:3d:fa:42:
77:48:5d:72:b5:b1:21:bd:26:ed:3e:64:fb:73:40:2a:30:8c:
e1:52:52:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:04:03 2025 by rpki-client