Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-KpOepaLZS9EeTBXxwEGPF9d84E.roa
File: 1-KpOepaLZS9EeTBXxwEGPF9d84E.roa (raw, json)
Hash identifier: zVkZQnczMtroFUaGhAeoOedkZIUagzYEIUN/+0forqE=
Subject key identifier: F8:AA:4E:7A:96:8B:65:2F:44:79:30:57:C7:01:06:3C:5F:5D:F3:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 83E4AA71
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-KpOepaLZS9EeTBXxwEGPF9d84E.roa
Signing time: Sat 14 May 2022 07:12:40 +0000
ROA not before: Sat 14 May 2022 07:12:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212801137 (0x83e4aa71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 14 07:12:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8aa4e7a968b652f44793057c701063c5f5df381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:21:ce:df:20:5d:ef:63:f6:3a:1f:a9:4c:
84:52:11:45:21:f2:8e:7a:29:c9:a3:df:01:d0:92:
82:f1:87:2f:84:3c:52:76:4e:0f:1c:ea:67:82:5e:
5b:5d:0b:0f:5a:16:a4:49:59:1b:e6:e1:c3:e5:16:
f3:55:32:fa:38:7e:e5:de:4a:ed:2c:3f:49:95:d7:
25:bd:c2:55:34:53:94:ff:d5:84:c7:ca:3f:d5:ea:
cf:34:59:b1:c1:65:e1:75:52:09:60:0d:e5:41:0d:
d3:e0:29:90:83:0a:ff:26:88:c9:b0:fd:16:dc:80:
7d:c1:4d:ee:fa:f4:02:9f:9e:ec:c9:9e:50:45:c6:
41:a0:a3:66:38:6f:c2:e0:8b:24:4f:c0:22:6a:d7:
4d:03:2d:2b:ec:e8:9e:ae:a1:69:51:ec:a2:b8:a7:
84:3a:93:e8:0c:0c:22:b4:74:75:3d:c8:72:65:0f:
3c:ca:b8:d1:f2:70:f3:8a:fc:f3:4f:0a:87:67:cf:
5b:89:11:58:87:df:02:09:4c:92:bd:45:74:d9:5c:
bb:e8:2e:34:7a:e6:3d:e4:97:b1:4d:24:38:ee:fc:
61:19:7d:b2:26:54:1d:c4:6a:1d:40:a5:a3:9a:58:
5b:89:25:c1:df:28:0b:c1:3c:9a:8a:b5:28:22:c7:
11:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AA:4E:7A:96:8B:65:2F:44:79:30:57:C7:01:06:3C:5F:5D:F3:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-KpOepaLZS9EeTBXxwEGPF9d84E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:dd:90:a2:3d:30:cf:d9:b5:34:ad:64:a3:da:06:a5:e2:d7:
ea:9b:f4:e0:a3:61:95:27:97:44:3f:e8:0c:1a:dd:60:f7:88:
49:b1:dc:31:23:55:84:79:df:e9:af:32:68:f9:d4:11:c6:b3:
aa:67:3f:f2:20:6d:33:a0:85:5e:d5:44:fa:63:60:53:b9:89:
f6:4a:d6:bc:13:99:61:de:9d:2a:77:39:76:15:21:a2:bd:bf:
53:10:00:f7:f1:72:df:63:f6:d5:24:92:3f:20:2c:79:53:d5:
ee:f4:f5:a7:9b:d1:7e:28:0a:87:d3:d8:3f:39:40:99:53:4b:
a8:db:b2:02:af:0b:ee:8e:34:91:06:f5:2e:3e:8f:37:cd:84:
95:7f:7c:86:ff:c8:fb:b7:98:6f:fa:06:a5:4c:90:52:82:06:
07:c3:43:b6:d1:15:d7:6f:98:42:17:e0:b1:23:97:68:c9:5c:
5e:97:e5:a9:ff:e0:fb:39:51:e7:1a:91:5b:d8:aa:52:de:45:
02:aa:cd:31:6d:31:bc:85:95:f7:44:00:47:99:0c:36:2f:a9:
27:5e:eb:49:33:cc:0a:8c:d7:a6:bc:8f:ee:ac:b1:65:c6:a4:
6f:d8:6b:bc:23:7d:7e:15:76:41:c7:19:ec:1b:4f:46:a2:f9:
ed:04:6d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:33:53 2025 by rpki-client