Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/02duhXmy6eTf3GnSJ6C9LPTNV7Y.roa
File: 02duhXmy6eTf3GnSJ6C9LPTNV7Y.roa (raw, json)
Hash identifier: kMyAN5oDNpQHqlRp5kAETKawkQy58NNcvAm1ae/4eZk=
Subject key identifier: D3:67:6E:85:79:B2:E9:E4:DF:DC:69:D2:27:A0:BD:2C:F4:CD:57:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018519910F18817247D9672C7553E86BFEDB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/02duhXmy6eTf3GnSJ6C9LPTNV7Y.roa
Signing time: Fri 16 Dec 2022 06:13:34 +0000
ROA not before: Fri 16 Dec 2022 06:13:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:19:91:0f:18:81:72:47:d9:67:2c:75:53:e8:6b:fe:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 06:13:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3676e8579b2e9e4dfdc69d227a0bd2cf4cd57b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:62:ab:22:77:72:ee:cb:cc:2e:2c:73:ce:
2d:4e:5a:ea:68:16:98:f0:bd:1d:91:3b:64:11:47:
60:bb:18:41:3d:0f:d4:49:0b:2f:9b:03:68:d3:e3:
8f:e1:9a:34:01:c3:0b:ea:52:c3:f0:93:e8:c1:d2:
10:e6:f1:65:46:eb:1c:da:c6:d6:3a:39:81:3a:51:
94:22:25:fd:59:26:b1:67:9f:fe:71:c4:4e:4a:c1:
5e:4c:16:12:34:50:75:af:0e:fe:34:92:06:14:18:
48:4b:42:1b:70:62:2c:64:95:a7:4b:a8:bd:6e:f3:
45:b4:42:18:d4:02:99:33:60:30:78:fe:8f:da:75:
9d:66:e3:fe:cb:20:d8:5c:ef:5d:e6:88:49:1e:0d:
63:f1:c9:be:34:a5:44:16:da:79:4b:70:c7:45:40:
fa:0a:d8:62:6b:61:56:5c:dd:39:36:8f:0a:94:6f:
8e:a0:6f:a3:c4:cb:01:6c:fd:fb:ef:03:95:fb:ae:
59:01:ec:8f:ea:6a:67:f4:8d:75:e7:b6:b0:ff:90:
f1:6c:4d:e7:4c:b1:9a:5b:95:47:a8:86:1f:47:e8:
5a:9a:f7:7c:f2:4b:e5:b4:10:6f:08:a5:2a:78:08:
19:9b:f5:ac:55:91:55:f0:08:0f:36:d4:73:40:fe:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:67:6E:85:79:B2:E9:E4:DF:DC:69:D2:27:A0:BD:2C:F4:CD:57:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/02duhXmy6eTf3GnSJ6C9LPTNV7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
86:24:72:0d:e3:f5:e5:0d:3e:9a:48:60:7c:87:7c:bf:ff:24:
7f:85:ef:d5:05:9d:ce:14:9e:f1:d9:58:26:d8:6b:17:ae:cf:
7a:ac:b6:84:b7:8e:5c:2f:d7:98:ab:8e:01:7b:9f:36:d1:8c:
57:ca:7d:05:bb:9a:6f:34:28:22:1a:db:62:cd:de:c0:a0:b1:
5a:2d:64:e0:dc:19:1f:eb:52:95:37:1d:87:af:73:53:6a:a8:
0f:b3:69:df:9f:59:c3:74:44:98:eb:e9:56:b0:b8:92:ca:44:
be:64:92:80:90:73:8f:9c:1b:41:90:0a:b9:c9:29:4f:09:c9:
37:bd:9b:c3:a7:ce:96:fa:8c:e9:cf:8d:8f:d7:81:65:4d:fd:
e7:6b:71:6e:2a:c3:4a:48:16:a4:f0:84:10:27:03:d6:a6:cc:
68:45:36:f7:3f:2a:03:c1:b3:da:86:0d:ee:5e:9c:e7:54:b1:
9f:c2:8d:b8:c5:f7:15:b3:97:a5:79:79:5c:e6:15:ee:d5:ce:
0a:73:6d:7f:c3:d4:78:fc:8d:43:06:ea:68:91:37:c7:22:8e:
8d:ee:f2:dd:c3:7c:af:59:bd:22:a9:19:72:49:44:3a:4a:58:
b5:46:6e:f8:dc:2b:f4:63:32:29:c1:c9:86:7b:8d:c2:cf:63:
7f:6c:6b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:20:43 2025 by rpki-client