Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0a73ZivmFC1Gokn9-rPT9nKqwts.roa
File: 0a73ZivmFC1Gokn9-rPT9nKqwts.roa (raw, json)
Hash identifier: l4sj2M0Uq4FUs8zMEjY8EZ9NzIpljhMeFfCvTzW7YlA=
Subject key identifier: D1:AE:F7:66:2B:E6:14:2D:46:A2:49:FD:FA:B3:D3:F6:72:AA:C2:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181EB7727767C8D03A1BDC772FA412ACD1C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0a73ZivmFC1Gokn9-rPT9nKqwts.roa
Signing time: Mon 11 Jul 2022 04:14:23 +0000
ROA not before: Mon 11 Jul 2022 04:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:eb:77:27:76:7c:8d:03:a1:bd:c7:72:fa:41:2a:cd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 04:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1aef7662be6142d46a249fdfab3d3f672aac2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:eb:69:bf:ca:af:1c:fb:4d:3b:ce:6c:d2:
cc:7f:ba:5b:19:5d:16:1e:c8:52:8a:31:93:64:ff:
3c:6e:7a:56:e2:16:1b:a7:01:97:ee:ff:7e:dc:5b:
28:86:73:cc:fb:71:ac:d5:61:fe:99:70:66:69:37:
7c:d8:5e:36:b5:03:ae:87:13:f6:9f:fc:a7:88:3d:
36:28:0c:9f:22:63:1a:91:ad:f9:55:c1:c6:cf:eb:
7d:7b:b0:5e:1d:06:2d:71:74:63:1f:14:09:ba:8b:
66:6c:c0:a7:4f:4b:18:9d:ff:df:02:e1:7d:55:04:
57:b1:7b:9f:35:35:b7:e9:07:ec:f8:08:fc:ba:2d:
4d:1c:fe:75:94:ef:50:54:ae:a9:8e:d5:a0:1e:3c:
a0:28:cf:c0:41:da:9c:1d:24:df:35:2f:13:aa:64:
ce:fd:75:21:f0:17:50:15:69:d8:6c:8a:48:81:3b:
e4:61:20:a4:03:a4:fd:ea:0b:b1:62:7b:0c:5e:5f:
3c:db:5f:d3:3e:fd:a9:ef:15:80:13:7c:21:44:ad:
85:8c:e4:72:de:1e:54:e1:88:df:b5:cd:51:9b:a0:
64:ba:e5:43:6a:55:e2:16:03:0d:28:36:6f:8b:a3:
d4:f1:71:36:93:c5:fb:28:02:07:62:a9:a3:f9:d8:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AE:F7:66:2B:E6:14:2D:46:A2:49:FD:FA:B3:D3:F6:72:AA:C2:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0a73ZivmFC1Gokn9-rPT9nKqwts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:6f:9a:07:71:4c:7e:df:f3:0c:f1:8e:75:68:71:0c:a2:48:
70:83:ce:30:f5:34:51:ed:65:33:f2:69:8f:35:b4:ed:9f:7f:
6a:34:43:f9:17:43:ef:f0:ee:8d:95:71:13:0f:24:de:3b:29:
5a:b8:06:c1:ed:c4:6f:df:01:f6:3d:57:25:97:f3:d2:57:a9:
87:6b:53:e3:75:5b:19:eb:e1:24:4e:c1:82:57:be:62:7e:05:
95:a5:31:67:72:af:4c:d3:da:c2:1f:86:59:c7:d6:0b:19:84:
e3:1b:af:dc:55:49:43:7f:e2:c6:7d:98:89:22:d3:9e:a6:ff:
2b:bd:86:49:ae:f0:59:19:52:c4:3e:af:29:0d:18:ad:62:87:
81:de:77:12:b2:db:97:4b:76:68:ed:b2:18:8b:40:35:e4:b1:
26:fc:28:3f:9e:9a:91:74:32:1b:e7:21:2d:06:db:d1:51:63:
f9:b0:9c:91:6a:07:8b:47:7d:82:70:84:1f:42:da:a6:c7:90:
66:b6:9f:01:ea:54:40:b8:0c:49:80:c2:34:ba:65:7f:37:d7:
8c:0b:4f:40:6c:cc:78:f5:cb:81:57:ef:1e:75:39:a4:a8:3e:
de:60:76:92:07:9b:47:ab:bb:60:58:d1:11:aa:5e:2d:91:58:
99:22:18:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:10:43 2025 by rpki-client