Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lTXtM0JmW8QDvoSwwmuMIOZkTNQ.roa
File: lTXtM0JmW8QDvoSwwmuMIOZkTNQ.roa (raw, json)
Hash identifier: 1eMQtEnnZEuGIRTNmlSRB5bMksDsZmka0REm3fgMDts=
Subject key identifier: 95:35:ED:33:42:66:5B:C4:03:BE:84:B0:C2:6B:8C:20:E6:64:4C:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B5BC8552688EE33EB9469A83CD127FDA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lTXtM0JmW8QDvoSwwmuMIOZkTNQ.roa
Signing time: Wed 02 Aug 2023 10:12:58 +0000
ROA not before: Wed 02 Aug 2023 10:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:bc:85:52:68:8e:e3:3e:b9:46:9a:83:cd:12:7f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 10:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9535ed3342665bc403be84b0c26b8c20e6644cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bf:c8:bb:12:47:15:bf:66:63:27:69:e2:4f:
9d:7c:b6:78:8a:06:a4:67:2a:39:72:a8:92:57:01:
8c:c2:41:4d:0f:0a:50:44:48:29:98:28:c3:4b:bf:
73:8a:e8:5e:ce:7e:8c:8b:b7:c4:d2:27:33:7d:4c:
05:ad:2f:10:03:a2:2f:35:f2:0d:61:7c:64:0d:8c:
3a:b2:62:0d:2a:67:3b:49:d9:80:5e:d3:0f:f8:9d:
31:26:f9:9f:52:11:f9:e2:ba:0a:de:0c:cf:21:52:
82:aa:03:21:8d:77:15:33:69:a3:a2:5d:d9:5a:27:
cd:09:5a:55:1d:2d:f9:ce:5a:37:53:6d:2a:72:7e:
9f:d6:38:50:7f:bd:06:59:34:b3:8b:7a:d1:c6:05:
fd:29:81:16:ad:4e:6f:32:de:26:28:16:7a:42:9b:
33:8d:7e:da:e6:11:5a:01:16:f8:b2:00:7d:ff:6c:
05:57:66:db:64:fd:5b:25:0f:fb:0b:95:de:60:87:
4e:5e:62:40:a1:1f:68:b5:f6:06:a2:83:21:4f:d4:
d7:53:16:85:1c:f2:20:26:c4:57:d4:15:7d:ae:10:
7b:20:20:ba:16:97:ac:6c:91:61:8c:1f:a0:59:cf:
e2:16:21:9f:31:b3:80:66:6a:da:8a:e4:92:b2:4a:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:35:ED:33:42:66:5B:C4:03:BE:84:B0:C2:6B:8C:20:E6:64:4C:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/lTXtM0JmW8QDvoSwwmuMIOZkTNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:60:23:b9:d3:a6:0f:a6:74:67:d8:fd:04:d3:7d:83:cc:f7:
1a:b8:1e:f2:0b:c4:43:23:a0:ea:7d:50:9e:d1:12:ec:28:b2:
e0:4f:8e:a9:83:7e:99:db:22:6f:bf:67:77:5f:78:34:eb:9f:
d0:18:d8:2c:1a:dc:f7:ff:c7:95:dd:70:bd:9c:58:b8:31:1b:
5e:e6:55:40:a4:69:4d:5f:16:05:f8:6a:24:d7:f5:f1:77:8a:
3a:2e:cd:4e:3a:d3:d3:9c:15:08:de:b4:36:18:72:46:b8:2b:
0a:67:7c:56:2d:34:ec:3b:45:34:e4:49:ea:ec:92:eb:bf:c5:
97:c0:90:1d:89:45:00:a1:72:cd:c9:e8:ad:ad:8b:f9:19:8c:
73:de:3c:1f:af:be:da:a7:f3:4f:c7:f1:bc:77:5c:58:00:1c:
41:76:6d:c4:f7:02:f5:69:9b:f4:26:cd:78:03:18:91:6e:d2:
5d:90:88:d8:b8:51:92:e5:72:84:c6:cf:9d:21:9e:a8:05:88:
f7:2f:bb:02:fd:53:56:f8:c9:71:6f:3c:5c:7e:3a:d9:c9:da:
b3:3e:a5:eb:c2:70:38:07:c1:be:e5:0e:ae:51:6b:cd:67:27:
7e:be:a6:91:30:bc:68:f1:8d:2e:75:52:0d:77:95:0e:25:15:
71:e1:70:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:20:39 2025 by rpki-client