Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dM99rqGnvOk_zt4AbeZ_PvfvJi4.roa
File: dM99rqGnvOk_zt4AbeZ_PvfvJi4.roa (raw, json)
Hash identifier: N2FRtpONnSclV6FzNXo8JWCIid5HQ8ENiS/wgXl0MgY=
Subject key identifier: 74:CF:7D:AE:A1:A7:BC:E9:3F:CE:DE:00:6D:E6:7F:3E:F7:EF:26:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868F93B4FCCE36F86B5B0284D25882B11D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dM99rqGnvOk_zt4AbeZ_PvfvJi4.roa
Signing time: Sun 26 Feb 2023 21:14:27 +0000
ROA not before: Sun 26 Feb 2023 21:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8f:93:b4:fc:ce:36:f8:6b:5b:02:84:d2:58:82:b1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 21:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74cf7daea1a7bce93fcede006de67f3ef7ef262e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:38:1e:08:e3:22:52:9c:da:ae:e9:de:77:c9:
f9:96:58:ce:f2:6d:5a:2b:f0:83:9e:fa:7e:bf:4a:
07:dc:6c:b9:fe:6c:92:ce:d9:41:40:fa:7a:6e:94:
df:20:4f:08:b6:88:8a:fe:66:d9:51:9a:b0:4f:80:
a8:0d:a7:30:11:49:a4:c9:e8:76:43:27:30:3d:b6:
65:21:56:33:8b:8b:c7:83:33:8a:8e:44:f2:bc:70:
a6:42:27:b9:c7:08:b2:70:2c:66:fa:f0:e7:4f:8c:
8a:89:b7:94:fd:c9:e7:a5:2b:50:58:58:a5:a2:ac:
21:e5:5b:45:7b:44:70:47:04:55:4b:71:05:f4:17:
42:ed:e6:86:7a:94:35:d3:01:10:db:c7:fe:e8:3e:
e0:21:5b:6e:d9:58:8f:59:a6:ac:ec:41:df:6d:a6:
21:c9:ba:d7:bb:23:41:47:ea:70:ec:07:37:68:09:
ac:a1:c8:9f:8a:5d:d8:8c:cc:f1:39:54:84:48:7f:
79:30:16:28:f5:12:42:9b:45:61:82:d1:9d:33:60:
68:de:47:86:2e:16:af:bc:84:91:0b:c6:e0:a1:df:
73:23:2d:7c:27:c6:c6:93:67:4d:ef:ba:c8:38:ef:
ac:07:89:ec:3d:60:e3:49:84:13:f7:99:97:a8:c4:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CF:7D:AE:A1:A7:BC:E9:3F:CE:DE:00:6D:E6:7F:3E:F7:EF:26:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dM99rqGnvOk_zt4AbeZ_PvfvJi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:34:cb:0f:ce:67:20:65:83:b9:71:5f:c0:75:83:79:4c:70:
aa:6b:b9:c0:8a:92:ce:50:1e:39:48:86:56:8c:45:fa:90:a1:
a2:8b:47:d7:0d:6e:29:cd:70:0c:fa:5a:16:f2:ae:e6:ae:45:
4f:c9:d2:0b:ad:b9:65:59:e8:92:b0:a4:f9:d8:8a:de:14:a9:
20:4c:f8:9e:b3:67:8b:7d:7c:71:a4:54:70:b5:0e:bc:2f:95:
43:1e:40:91:55:b5:03:52:e2:f3:1c:93:09:de:93:17:c6:17:
60:08:6d:c0:9c:00:e6:a1:a1:81:43:44:b5:34:9c:8c:64:0d:
72:59:b2:39:95:27:ed:70:1e:fc:c0:dd:bf:ac:6a:ee:c6:9d:
f1:30:ef:15:93:ec:6d:ba:2a:d2:eb:92:8f:52:25:8e:b2:c4:
64:23:7e:38:66:c0:16:24:6e:29:9c:df:8c:eb:43:f0:12:dc:
3e:58:9a:ee:d1:ea:8c:4c:bd:0c:75:e5:da:c5:59:07:d4:e7:
25:d5:87:43:16:d3:dd:f5:50:be:4c:c6:f1:95:99:0c:d0:d5:
ba:2f:ae:0e:a1:45:e0:7b:72:47:33:8f:37:3e:1b:5a:c3:24:
75:08:ce:20:ca:0e:15:c8:64:95:1d:7c:39:54:b2:2b:60:e2:
0c:44:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:52:29 2025 by rpki-client