Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-bLlUW_qoGwnS5RtaDyBpiny_ro.roa
File: 1-bLlUW_qoGwnS5RtaDyBpiny_ro.roa (raw, json)
Hash identifier: yir5cKFa6CXqb5j62aF8fiuoEVkQugvyZULR2gLN/OI=
Subject key identifier: F9:B2:E5:51:6F:EA:A0:6C:27:4B:94:6D:68:3C:81:A6:29:F2:FE:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01849A1C4B0452A393B753751690B328D32E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-bLlUW_qoGwnS5RtaDyBpiny_ro.roa
Signing time: Mon 21 Nov 2022 12:14:16 +0000
ROA not before: Mon 21 Nov 2022 12:14:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:1c:4b:04:52:a3:93:b7:53:75:16:90:b3:28:d3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 21 12:14:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9b2e5516feaa06c274b946d683c81a629f2feba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:b1:a9:ca:c4:08:0c:3e:56:51:f9:67:51:
5c:3a:fc:50:15:c7:7e:3d:49:54:b5:22:70:67:c2:
b2:fc:3d:96:bc:ad:b0:73:38:41:50:d5:66:8d:59:
67:7d:9a:da:dd:62:00:87:3a:fb:c9:87:56:e1:6c:
0c:27:05:99:06:74:cf:81:7f:24:00:4f:a8:53:ac:
4d:dd:ef:02:eb:00:fd:a8:96:a4:f7:16:12:c5:e0:
7b:e5:6e:82:36:fd:a5:10:74:0c:95:e2:75:9e:60:
13:73:e3:4b:b8:0d:8c:b6:4a:b4:41:c6:e0:f3:2c:
e0:19:6d:67:ff:f6:7f:99:76:c3:5f:70:04:ca:41:
8b:d6:5d:78:29:a7:e9:94:1c:9d:c4:db:8b:89:e7:
c9:0a:00:37:41:c7:4b:31:60:31:18:7f:52:86:98:
90:30:c5:b0:f3:ce:e2:e7:6a:3f:56:f8:72:1f:dc:
e0:f2:7d:8e:00:97:5a:0c:17:2c:d0:25:65:6c:1d:
e0:00:91:2a:97:6a:9d:9b:37:29:1f:e4:30:07:ec:
7e:88:fd:8b:ed:7f:79:2f:9b:65:55:61:9e:d8:2b:
96:f6:a9:a4:67:33:90:5b:56:fa:eb:b8:79:62:09:
6c:fb:78:e3:8b:07:7f:bf:77:b5:51:69:08:21:bf:
57:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B2:E5:51:6F:EA:A0:6C:27:4B:94:6D:68:3C:81:A6:29:F2:FE:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-bLlUW_qoGwnS5RtaDyBpiny_ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
15:a3:55:f2:1e:ae:f6:bc:41:b5:51:3b:da:86:c5:85:85:c1:
9c:3c:03:b2:55:6c:d7:2a:59:4c:70:bd:3d:26:a2:1b:81:28:
24:da:e5:63:50:26:67:93:9b:91:b3:25:bd:cd:30:10:d4:11:
32:87:99:fb:6f:f7:51:28:a4:64:89:5e:1e:a0:9c:fc:38:9e:
da:20:e7:83:38:9f:e6:e5:a9:6a:96:64:40:45:c3:52:06:dc:
47:d3:d0:34:4b:61:0c:b1:6b:78:bd:c3:24:70:74:04:56:98:
02:58:a8:2f:8d:e6:9b:44:13:9d:d2:6a:05:3e:ce:18:ab:a6:
82:60:5a:75:48:d4:79:05:5c:61:68:ab:8f:f6:f6:3e:58:c7:
fe:df:df:a4:cd:6a:3a:b6:40:45:7b:5a:67:a1:93:e4:ec:6b:
c9:96:b1:e3:8c:23:e2:92:a3:e4:ba:23:a4:e2:34:06:33:e9:
1c:5b:42:b3:a2:60:33:b3:72:ff:7c:74:f9:59:9a:f0:c4:d8:
df:2b:46:9b:72:49:15:54:17:28:27:6a:c7:4b:e7:5a:e3:13:
ef:de:27:fc:56:f8:b1:0f:b7:41:3c:ea:ec:2c:ab:5a:ef:52:
79:b5:c1:86:22:8e:a7:b7:a9:4a:70:9c:13:0d:2b:92:6d:68:
3d:e0:27:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:38:41 2025 by rpki-client