Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-_Yeu6t_ehnOxrXgtuYy9nZ5TI.roa
File: 1-_Yeu6t_ehnOxrXgtuYy9nZ5TI.roa (raw, json)
Hash identifier: IK4LU0PW7pzSboFZizkNu772gyfHaXJfPteJjWqhZng=
Subject key identifier: D7:EF:D8:7A:EE:AD:FD:E8:67:3B:1A:D7:82:DB:98:CB:D9:D9:E5:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01841A6EAB311F68B802435F0977AE6D4F20
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-_Yeu6t_ehnOxrXgtuYy9nZ5TI.roa
Signing time: Thu 27 Oct 2022 17:12:51 +0000
ROA not before: Thu 27 Oct 2022 17:12:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1a:6e:ab:31:1f:68:b8:02:43:5f:09:77:ae:6d:4f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 27 17:12:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7efd87aeeadfde8673b1ad782db98cbd9d9e532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:d5:0e:5f:14:f8:27:3b:07:42:82:18:da:
4f:a8:00:2f:7f:e1:39:91:07:f9:4b:7b:2d:2b:c4:
e0:56:be:23:5d:e6:b4:a7:c9:1e:0f:1a:2e:3b:4f:
c8:a0:5d:10:56:cb:73:49:97:b6:7c:7d:f1:2d:d1:
96:93:2e:1d:1f:aa:15:a2:58:6d:cf:ed:d2:33:37:
36:47:16:3f:da:5a:65:e9:e5:58:b3:18:f0:01:32:
02:27:01:6d:ce:fb:4a:21:5b:4e:d0:9e:1a:4c:d2:
88:e0:d7:b7:4c:41:d7:22:01:08:02:2f:7d:f1:af:
4a:14:83:74:cb:95:10:e2:62:81:1f:eb:3e:59:0e:
8c:34:38:bf:06:cd:b8:45:fa:c3:6e:79:84:f0:61:
b3:12:d8:0c:22:6b:e1:cf:c3:fc:39:49:b7:91:02:
bc:ed:2a:d8:f6:97:c5:a4:6e:23:b6:6f:8b:38:b6:
c7:35:39:7e:9b:57:45:9b:a6:17:7b:6a:c0:b3:70:
23:f6:e5:82:40:94:26:5a:90:d6:e8:2a:b3:5d:fa:
9f:51:47:fc:7a:d3:fb:69:6a:f0:5d:6b:d8:b4:f8:
07:30:c4:e9:24:b7:1e:fe:5c:26:ad:6b:67:4d:f6:
38:3c:d5:7f:e4:39:2a:26:5e:d6:f4:89:58:44:ae:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EF:D8:7A:EE:AD:FD:E8:67:3B:1A:D7:82:DB:98:CB:D9:D9:E5:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-_Yeu6t_ehnOxrXgtuYy9nZ5TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0b:cf:a4:c9:80:14:b3:90:03:5a:e3:38:ea:b4:dc:f4:bf:c0:
db:a1:90:71:04:1f:e0:ee:5e:16:25:93:87:12:76:e7:0b:6c:
b4:39:19:96:52:93:fc:8f:83:10:02:57:c4:2a:1c:cb:e3:60:
d4:bc:ef:c5:14:cf:d5:a5:d7:a0:8a:a9:1f:ed:4d:5f:d3:ad:
0c:b5:38:d3:35:66:a4:de:90:3c:23:25:9b:37:4f:ab:38:9b:
88:ee:6c:06:73:4f:42:0b:b2:6b:6d:ec:e1:e8:f4:85:56:9c:
41:b6:cb:43:0b:0c:fd:07:ba:48:43:cc:fa:1c:21:24:b4:d1:
86:3f:a9:8b:0f:90:2b:a7:94:0f:27:fe:38:e8:ab:02:e6:55:
4d:da:66:4b:30:66:1e:a2:c1:45:29:e7:58:71:c8:a3:02:11:
d2:b5:31:1c:88:74:e3:40:fb:24:48:d1:db:b3:cb:89:60:2a:
3d:36:20:3f:cf:db:47:4b:32:b4:6d:67:77:b8:47:fd:a9:42:
8e:c3:4f:5b:74:4f:a6:8f:92:00:92:98:d3:13:52:68:ac:03:
7a:a6:35:3c:8c:73:9b:2a:d0:b0:15:c1:87:0b:bf:93:35:04:
d5:e4:a2:0b:76:4a:34:dd:05:8c:48:ea:f1:c1:6f:65:61:61:
6a:24:3c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:11 2025 by rpki-client