Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xNHPjyD39eQ9AyCJiM8y7LztcYw.roa
File: xNHPjyD39eQ9AyCJiM8y7LztcYw.roa (raw, json)
Hash identifier: Rv0xVBokUrxrmNUqgnV0pQc6mUBjn1xDoilVKcrry7s=
Subject key identifier: C4:D1:CF:8F:20:F7:F5:E4:3D:03:20:89:88:CF:32:EC:BC:ED:71:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DEB9634EEDC8D925F7A2E9D17D0E22CA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xNHPjyD39eQ9AyCJiM8y7LztcYw.roa
Signing time: Thu 10 Aug 2023 09:13:58 +0000
ROA not before: Thu 10 Aug 2023 09:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:b9:63:4e:ed:c8:d9:25:f7:a2:e9:d1:7d:0e:22:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 09:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4d1cf8f20f7f5e43d03208988cf32ecbced718c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:90:4a:d9:40:03:15:f0:f6:bd:86:8b:04:e8:
b3:07:e3:8e:90:be:2f:62:03:c4:26:84:12:2b:a8:
30:98:47:82:c8:5c:55:8b:9f:5a:3c:4a:48:ae:85:
1f:d4:08:69:46:01:37:fe:e4:dd:67:48:c3:7b:fd:
23:3b:c4:38:d0:47:ad:2f:98:ef:c6:37:c6:27:1e:
3e:85:63:96:10:7f:48:28:9b:f4:5b:11:72:01:45:
b2:45:fd:fc:45:9c:3d:fb:e3:40:97:e7:65:98:a6:
4c:a3:3b:52:05:cf:30:82:04:ae:0e:9f:8c:87:07:
7f:ec:cd:4c:e7:32:15:f4:68:52:9c:99:7a:23:cb:
1b:f5:68:3f:36:57:dd:47:15:9b:5a:b0:e4:a4:20:
b1:09:1c:97:c0:2a:9d:c7:83:3d:e9:4a:fc:85:cb:
d8:9d:4f:5b:84:42:21:38:17:4d:91:63:c2:52:dc:
bc:bf:71:af:ca:b4:e3:b8:a8:79:41:bb:bf:2f:2d:
b7:f2:94:ed:04:c0:c3:05:f1:67:79:46:72:c3:bf:
3f:ca:f9:6c:7b:66:46:16:c0:a0:10:7c:95:2b:41:
79:3c:13:d0:42:2b:cd:a7:35:ee:b4:37:95:90:dc:
0d:bc:57:38:e3:34:e2:eb:e2:09:ca:6e:eb:6a:4c:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D1:CF:8F:20:F7:F5:E4:3D:03:20:89:88:CF:32:EC:BC:ED:71:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/xNHPjyD39eQ9AyCJiM8y7LztcYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:8a:f6:82:5d:7c:2a:f9:00:35:d0:0b:e6:79:fa:00:4f:ed:
7d:02:29:b0:97:c2:cb:1e:fb:b1:66:fb:10:dd:b6:f2:d9:d3:
83:fe:da:5e:ba:f2:d9:41:ed:72:6d:8f:f2:e2:b0:02:ae:4f:
17:da:84:b9:b4:57:bc:e3:15:9f:8c:06:02:10:04:b9:9b:fb:
39:e3:43:01:1b:14:b6:ed:54:32:df:38:f3:53:0d:65:8a:af:
31:cd:ea:ee:35:4e:4f:e6:15:e7:97:62:d9:10:10:c5:d0:08:
66:9b:9d:6f:79:72:f3:b3:06:c8:77:c7:52:02:c0:22:c9:e4:
d6:72:8c:51:c9:c3:67:77:0d:3d:94:f2:88:58:7d:37:47:bc:
77:28:9e:ee:68:01:e7:46:6f:d0:17:0c:49:f9:25:16:2e:06:
63:2a:65:af:8e:e0:8f:ba:27:9b:22:ae:07:6e:11:22:69:51:
4d:8b:6e:b5:2f:09:3a:9e:a2:97:35:4e:95:f0:0c:2a:70:95:
fc:4a:07:d9:21:1b:a5:6e:6f:b0:e5:ed:1d:03:85:73:6a:21:
7c:84:a5:c5:44:b6:05:40:d1:d1:51:df:15:ee:a0:29:3b:50:
17:96:d1:1f:dd:4f:55:99:49:42:7d:7c:3d:89:73:fb:ed:57:
8f:bc:f9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 01:40:24 2025 by rpki-client