Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-2kWzMVGKhgVg46jOkbgBInN-Ls.roa
File: 1-2kWzMVGKhgVg46jOkbgBInN-Ls.roa (raw, json)
Hash identifier: /mbIu3WN1kFgUf5+2yPpKBn26HuFgbBYpH28K5OF6qE=
Subject key identifier: FB:69:16:CC:C5:46:2A:18:15:83:8E:A3:3A:46:E0:04:89:CD:F8:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01822F0576335C3537C5EE387AC47CF09CFC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-2kWzMVGKhgVg46jOkbgBInN-Ls.roa
Signing time: Sun 24 Jul 2022 07:04:23 +0000
ROA not before: Sun 24 Jul 2022 07:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:2f05:4f8a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2f:05:76:33:5c:35:37:c5:ee:38:7a:c4:7c:f0:9c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 07:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb6916ccc5462a1815838ea33a46e00489cdf8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:78:28:d9:74:cd:20:6a:cc:f3:b0:20:f9:
df:e4:35:0c:83:22:f7:6d:f9:ac:69:1d:9b:f6:c3:
0f:4d:05:d9:2a:9b:8e:5a:4d:2b:b8:19:50:c8:03:
a7:28:0c:95:fa:9f:b7:87:5b:94:f5:23:f1:de:75:
e7:1c:6c:4a:e7:20:00:98:c6:0a:5c:0e:bb:e3:c9:
fd:8f:96:2f:e4:98:67:11:ec:8d:9a:6e:fb:10:6b:
b7:60:7b:ea:64:83:20:35:36:6a:dd:37:44:18:72:
3b:fe:64:be:26:73:c5:22:2b:64:3f:b6:7a:85:c0:
9d:75:cc:96:8b:2e:4d:38:92:19:43:b0:a4:0c:dc:
9b:df:c8:a7:18:3b:bd:87:25:cd:fe:71:97:c0:cc:
4e:68:01:f9:ec:93:81:a1:95:8c:d4:f7:d6:ac:54:
9b:bf:f8:14:fd:76:bb:cb:be:17:26:fa:27:8b:8a:
31:f4:74:48:e2:da:b1:16:0e:ed:d3:00:b2:87:99:
ce:b0:a1:c2:f8:f3:e4:76:f1:80:d0:31:77:b7:14:
3c:55:95:1e:3a:50:5d:43:d5:be:65:c6:4d:8b:47:
1e:c4:20:cc:f4:ab:b6:60:61:03:6e:0c:17:c1:dc:
73:13:0a:d1:68:50:ff:82:3f:dc:04:2c:96:7f:74:
86:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:69:16:CC:C5:46:2A:18:15:83:8E:A3:3A:46:E0:04:89:CD:F8:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-2kWzMVGKhgVg46jOkbgBInN-Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:e3:cd:cf:a1:3f:79:80:6a:bd:0e:61:9e:e9:1f:cc:14:73:
6b:3c:1f:9d:f4:87:cd:46:a7:55:71:42:cd:73:b3:0e:a5:92:
bb:db:ca:ae:0c:49:94:94:8a:ad:b7:76:ff:35:56:28:f0:8d:
44:78:30:d8:1b:0a:50:25:1d:11:15:4d:ec:eb:d5:26:c2:25:
77:4a:c8:94:af:69:a1:79:c1:93:6f:1c:c6:64:69:a0:48:e0:
87:f4:73:30:6e:62:1e:93:bd:00:86:f4:bf:91:ab:27:42:df:
f5:c3:67:17:63:03:29:47:d8:40:ec:8d:80:ca:05:7c:b3:48:
78:08:27:67:95:fd:fc:78:50:15:c7:a7:9d:d6:ca:b8:b0:f3:
a0:da:a2:46:81:3f:06:0c:fa:09:ab:c2:06:d5:75:65:45:82:
3f:00:5d:ab:ad:45:69:5a:ea:e7:ae:5a:1e:c6:3f:a8:43:1e:
c4:1a:39:08:25:45:7f:f0:42:f4:c0:3f:a9:af:cf:6a:4f:7d:
2c:c9:e3:03:88:0a:20:bb:82:ab:2b:f6:d0:e5:6b:16:d1:d4:
60:e9:30:26:da:7c:d1:7f:ad:9a:fa:b5:22:34:d5:e7:f6:7d:
42:e0:12:71:d9:50:21:8c:3d:48:ed:b9:91:eb:9c:c8:f7:2c:
0b:de:d6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:32:14 2025 by rpki-client