Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Kdt7WFxDP6VwPeqgq9OTi42trw.roa
File: 1-Kdt7WFxDP6VwPeqgq9OTi42trw.roa (raw, json)
Hash identifier: Cl6Y2yrhRYCf+d8X/4AQL2N6U1+CnYRW5YFyHltmvHc=
Subject key identifier: F8:A7:6D:ED:61:71:0C:FE:95:C0:F7:AA:82:AF:4E:4E:2E:36:B6:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71817F76
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Kdt7WFxDP6VwPeqgq9OTi42trw.roa
Signing time: Fri 11 Mar 2022 04:08:56 +0000
ROA not before: Fri 11 Mar 2022 04:08:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1904312182 (0x71817f76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 04:08:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8a76ded61710cfe95c0f7aa82af4e4e2e36b6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:95:59:4b:eb:5e:de:37:d9:4c:d0:cc:92:7e:
6b:d7:02:4f:0e:44:57:1f:33:98:6d:df:21:7f:34:
98:0b:bc:18:04:9a:b7:ab:52:d6:6c:bb:0f:09:9b:
76:5b:33:a9:8a:c7:c1:ff:73:6a:a5:d2:22:f9:12:
6b:ee:f0:06:48:e4:19:37:d6:4e:e3:aa:02:1d:30:
b4:09:e5:52:4b:79:3a:be:c7:5d:35:02:08:4d:46:
27:20:e6:b8:46:a2:31:cd:58:d6:3d:36:5b:65:77:
28:3d:f3:d8:62:15:e1:ff:bd:54:ce:49:ff:74:a4:
85:58:59:21:58:dd:87:72:3c:b4:09:96:74:d0:d4:
b9:b6:ea:8b:90:88:4b:67:4f:00:8c:8a:5e:0d:fc:
7a:55:55:31:84:c3:f4:b5:a8:22:35:97:06:25:ff:
de:e2:a0:6a:27:b9:51:c8:ee:a5:53:81:47:ea:e5:
e4:76:01:10:e9:48:e7:47:80:90:1b:06:f5:7c:8c:
44:5d:b3:28:26:65:bd:9f:d2:e9:7e:1e:08:33:68:
ec:a3:3f:60:42:3d:78:c5:e3:91:69:30:f5:0b:67:
9e:8c:4f:04:68:e6:58:d3:2c:1d:1d:56:71:8c:7f:
db:59:3d:db:d4:e8:f3:0c:c9:c5:c7:26:0a:9c:8a:
d8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A7:6D:ED:61:71:0C:FE:95:C0:F7:AA:82:AF:4E:4E:2E:36:B6:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-Kdt7WFxDP6VwPeqgq9OTi42trw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:e9:c1:fe:7c:44:1d:cd:40:29:0f:a5:5a:bd:56:f7:4f:9c:
3d:39:af:bd:28:91:0f:0e:76:63:23:2f:82:ab:df:4a:65:ab:
6e:e3:d1:ac:97:fc:8a:77:d7:9c:6f:f7:2c:86:f7:b4:9b:7e:
e0:7f:fa:a1:00:f2:99:d8:87:7e:27:e4:16:89:dd:c7:6d:0c:
6a:a6:c9:e4:c1:f6:f8:7f:1e:6c:c0:c9:6d:12:6d:fe:67:49:
30:42:0b:f8:2b:b8:95:f8:b4:83:4a:9a:84:4f:90:f1:24:a6:
0c:37:18:0f:f8:58:83:d4:b2:63:76:c1:d0:61:27:fb:e7:1d:
eb:09:c3:38:bc:f4:95:7c:7e:01:67:34:21:5f:ba:4d:b8:b1:
57:3c:bb:75:aa:ed:52:ec:c9:fa:df:8b:cc:a9:41:9a:91:bd:
39:23:81:cd:d0:eb:6d:86:b9:f2:98:88:1c:27:92:a9:d2:07:
72:c4:39:44:a9:4e:81:53:60:8d:6d:3c:78:ee:49:49:c1:94:
82:c7:9d:e4:fb:21:ed:f0:39:b0:33:c4:71:d7:38:29:6b:3a:
81:9c:81:56:81:79:bf:5c:12:96:ec:1a:5f:12:66:80:91:73:
d5:79:c0:9e:7a:c3:9e:a5:69:62:38:ef:2f:7c:9c:b0:1c:a5:
40:6f:02:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:10:23 2025 by rpki-client