Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-OmvfTOr7ZwA3aam6YGArgWFM3k.roa
File: 1-OmvfTOr7ZwA3aam6YGArgWFM3k.roa (raw, json)
Hash identifier: wjmq4NKiKh+X65H0Ywk4eq9fn60Ut/G983ZNoV6/x2k=
Subject key identifier: F8:E9:AF:7D:33:AB:ED:9C:00:DD:A6:A6:E9:81:80:AE:05:85:33:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8FF5612E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-OmvfTOr7ZwA3aam6YGArgWFM3k.roa
Signing time: Sun 26 Jun 2022 10:05:22 +0000
ROA not before: Sun 26 Jun 2022 10:05:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:9f78:3bc2/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2415223086 (0x8ff5612e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 26 10:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8e9af7d33abed9c00dda6a6e98180ae05853379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e7:83:2d:67:09:cf:d9:c4:36:4a:80:39:ae:
04:fe:fc:f4:22:46:2a:ed:29:19:9f:52:88:94:70:
34:90:37:18:98:96:74:4e:d3:5e:75:3e:73:ff:c4:
5d:fc:86:bb:42:91:f5:d7:9a:62:9c:b7:98:1c:96:
5a:a4:1f:15:59:29:e2:6e:a5:cb:13:48:90:9a:3b:
9a:61:c1:49:b9:a4:2c:be:c9:df:93:71:c7:df:3a:
ac:78:03:3c:73:c4:50:e4:3c:ff:e6:38:f2:53:83:
a9:22:47:51:2e:23:14:a4:b3:8d:c3:1d:52:4f:e4:
c9:91:86:1e:3d:ab:d5:4c:ba:f6:93:53:90:e8:56:
2b:c7:e3:e9:a4:cb:19:5c:d7:41:e0:11:a5:73:83:
24:62:41:6a:50:c8:78:1b:ba:3f:37:7e:16:93:53:
41:6f:d0:76:25:ad:4c:9d:ae:83:cc:cb:c8:99:7a:
cd:c5:eb:12:a6:c2:4c:ae:97:a6:89:d5:59:c2:83:
68:0d:3a:33:2b:92:fe:d7:48:7e:df:22:ff:0d:d2:
04:28:dd:3d:00:32:e0:3e:94:ac:a8:06:3f:7f:12:
87:76:0a:d9:41:9c:73:85:43:d1:27:c0:da:39:db:
c2:31:a5:da:67:46:b9:92:99:d1:62:a4:4d:e5:cd:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E9:AF:7D:33:AB:ED:9C:00:DD:A6:A6:E9:81:80:AE:05:85:33:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-OmvfTOr7ZwA3aam6YGArgWFM3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:c7:e4:02:01:ed:f1:07:a0:31:b2:db:ae:70:56:b0:ff:67:
ce:89:4e:ea:61:a4:4f:3c:33:79:83:53:df:d3:8c:ca:e2:7f:
f9:fa:ca:15:6c:b9:ec:6e:dd:e9:33:de:54:b3:18:84:21:cf:
96:cb:ae:d9:54:09:e2:bb:94:90:b5:dc:4a:ac:ea:0c:ad:6a:
2b:5b:90:3d:4f:2a:ea:42:b5:f0:6c:c6:fc:7b:66:89:d0:c5:
c2:9e:f1:ee:fa:78:4f:07:81:b9:ca:8b:14:15:f5:1e:3e:af:
d1:b5:5a:bd:5c:13:78:b3:8a:61:69:7b:02:7f:d3:f8:91:a9:
ee:a4:b1:1f:32:f7:c2:3b:3c:bb:1d:79:f4:bf:e8:6d:4f:4d:
86:a4:3b:6c:97:e4:ab:19:f9:7f:98:0c:c2:92:0b:ae:8f:02:
8d:39:87:70:3e:f7:0b:67:79:11:7e:85:9d:68:18:ed:13:87:
b3:c0:e2:3b:c9:4e:a1:f6:5a:fa:93:8b:ac:8f:ef:f0:fe:b2:
ce:b2:b1:b5:8e:41:a3:a2:a6:13:ee:eb:96:3d:4d:7f:f5:ea:
fd:64:ca:73:3b:07:84:af:46:d7:32:3c:00:a9:6b:e6:5d:7e:
58:92:54:e1:82:97:4e:87:04:21:c6:48:e5:00:a4:69:ba:55:
90:4f:a3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:28:42 2025 by rpki-client