Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/056p9V4EZn_J-sL_6pnKq-1m1MM.roa
File: 056p9V4EZn_J-sL_6pnKq-1m1MM.roa (raw, json)
Hash identifier: ShQvuTy7ilUYbcHZ4RoU89d2piwoiiLW/ElJdmAL93E=
Subject key identifier: D3:9E:A9:F5:5E:04:66:7F:C9:FA:C2:FF:EA:99:CA:AB:ED:66:D4:C3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 753FAB0B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/056p9V4EZn_J-sL_6pnKq-1m1MM.roa
Signing time: Thu 24 Mar 2022 07:10:16 +0000
ROA not before: Thu 24 Mar 2022 07:10:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1967106827 (0x753fab0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 07:10:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d39ea9f55e04667fc9fac2ffea99caabed66d4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:e0:72:18:76:71:0b:21:c1:ea:97:1c:8e:
95:1c:2d:1f:8d:16:8f:2d:3f:18:75:21:06:1b:e1:
bf:54:04:f3:10:be:a3:e6:3f:38:06:2e:7e:83:e0:
9e:fb:ed:b5:cf:26:24:30:52:4f:41:1c:fc:62:92:
b7:f4:d2:74:39:a6:70:98:a9:9d:f8:9f:f0:dd:64:
f1:f0:ed:12:e6:12:db:b0:dd:3c:95:f2:a4:11:39:
9b:f3:de:93:26:d9:8d:2b:75:23:ed:d3:7a:d3:c1:
73:40:7c:87:ba:b9:b3:81:62:8d:71:8a:ac:88:b4:
a5:5c:69:f6:96:f4:f1:60:49:cf:e5:12:23:53:e3:
0d:4d:09:bc:81:ad:a9:58:b8:15:3c:16:25:4f:60:
be:1e:a6:53:1d:d3:af:a0:8a:37:28:b9:dd:a3:40:
e8:24:ed:6b:96:c3:0e:af:d5:1a:c1:fa:4b:ba:69:
db:1d:83:c2:91:26:77:f4:2c:a0:bb:b2:37:a6:02:
6a:bf:de:ce:02:6a:6b:2d:ae:fe:05:ed:c0:13:5c:
94:7c:7b:1d:3e:e3:9c:e4:7b:63:aa:28:e6:09:26:
1f:be:80:53:10:48:ef:67:4a:d6:5f:c6:79:88:5d:
af:74:04:ef:b9:b2:db:10:db:ba:3a:8a:1c:0f:e2:
15:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9E:A9:F5:5E:04:66:7F:C9:FA:C2:FF:EA:99:CA:AB:ED:66:D4:C3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/056p9V4EZn_J-sL_6pnKq-1m1MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:d9:ce:8b:c0:da:25:d1:89:51:b6:39:e9:53:d3:c9:88:ff:
94:62:ed:28:01:36:31:cc:cd:ba:aa:c5:ae:f5:80:56:95:00:
bd:8b:35:af:6e:68:69:70:8f:94:68:27:42:5b:1d:74:e3:65:
e7:c9:42:47:f4:49:87:83:77:13:12:55:68:a1:17:a2:1a:0e:
7e:43:4d:44:c1:c2:97:43:9f:70:38:83:1c:4b:bb:a9:ea:3d:
80:15:9b:57:54:c0:89:81:0d:ac:95:82:68:16:22:ce:a6:c7:
44:88:c5:25:1c:1f:9f:28:93:0c:e0:4d:b1:f2:58:ef:a8:31:
0c:40:64:2c:59:23:d9:f0:43:6c:e3:b4:06:89:cd:ca:81:90:
c2:d9:06:18:32:c9:2c:1b:6e:d5:4a:29:97:00:4b:65:82:86:
30:db:21:c2:c2:96:b0:f2:49:d7:78:b2:d0:15:db:0a:dd:6e:
24:bf:ba:e7:1d:4b:a6:ab:c2:ec:72:48:76:1b:5e:31:56:ec:
93:78:1e:cc:22:ff:de:b5:69:fb:fa:b6:61:10:1f:0f:e8:33:
0b:38:14:83:b6:b6:b2:23:2c:97:7b:f0:e0:8c:5b:66:6e:b0:
1c:07:78:f5:58:2f:a3:5e:cd:fe:8a:fa:d0:31:f5:05:e3:4b:
c9:8a:97:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:48 2025 by rpki-client