Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-h2dPscCtVSaC7Hd9RLwRqd-vxA.roa
File: 1-h2dPscCtVSaC7Hd9RLwRqd-vxA.roa (raw, json)
Hash identifier: dy7ojoMTrZD56ZXY51OGZoSlNh2WuIY1gh4XNRwtv4g=
Subject key identifier: FA:1D:9D:3E:C7:02:B5:54:9A:0B:B1:DD:F5:12:F0:46:A7:7E:BF:10
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01823763CBF0054EC991BE82465AF1BB1A82
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-h2dPscCtVSaC7Hd9RLwRqd-vxA.roa
Signing time: Mon 25 Jul 2022 22:04:23 +0000
ROA not before: Mon 25 Jul 2022 22:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3763:b7e9/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:37:63:cb:f0:05:4e:c9:91:be:82:46:5a:f1:bb:1a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 22:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa1d9d3ec702b5549a0bb1ddf512f046a77ebf10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:9f:90:de:82:6d:9a:30:11:c6:ee:e6:82:
fd:80:63:c2:b6:63:f5:30:32:c5:93:3f:cf:b4:c7:
13:4b:21:79:75:90:df:e3:94:eb:88:d8:87:a9:77:
8c:b3:a7:bb:a6:ce:a9:28:fa:b1:b5:a6:d9:c3:78:
f8:06:13:5d:90:74:4b:b0:8a:11:9b:a1:7c:65:ea:
bc:f2:f8:70:5f:7c:6f:39:9a:8a:09:fd:ac:93:b8:
61:7b:86:a3:c0:66:a0:60:7c:0c:14:06:9a:1a:57:
bf:c7:97:21:ed:30:0a:cc:71:ab:55:66:80:a5:af:
7a:33:b5:b6:91:04:66:0f:2a:de:c9:e7:6e:f3:86:
19:ef:57:6c:4b:57:d3:ea:a2:fb:f0:fe:82:06:45:
d8:cd:e7:83:6e:58:f0:8b:75:fa:c6:9c:84:6b:2b:
90:ee:a2:0c:07:55:f1:82:85:6e:0f:00:a1:43:df:
03:6e:47:fb:9b:8a:1c:6b:10:63:72:98:3f:5a:74:
01:99:be:8b:98:4b:4f:7a:68:e3:4b:77:02:7a:2a:
af:67:8a:de:76:de:2d:7b:bd:30:13:26:2c:3f:1f:
06:b0:bf:9b:f8:82:e8:6b:63:9a:6f:c7:d9:61:d6:
46:4a:9d:dc:ec:60:de:b4:46:71:d5:c1:7f:dd:42:
96:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1D:9D:3E:C7:02:B5:54:9A:0B:B1:DD:F5:12:F0:46:A7:7E:BF:10
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-h2dPscCtVSaC7Hd9RLwRqd-vxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:1f:cd:a6:5d:a2:46:e3:33:48:ef:2f:d8:f5:0c:a1:34:97:
03:0a:d6:f5:e2:b1:a6:bd:7e:7d:e7:00:32:07:9e:d7:1b:70:
b4:ff:0f:1f:b3:fe:02:6e:ae:c5:41:09:46:c7:29:31:90:59:
98:de:5f:50:da:1b:08:49:90:3d:b3:7c:49:ba:ee:cc:e6:2b:
5d:ad:2d:46:9b:1e:42:49:76:f3:9e:40:42:1a:75:7e:cc:33:
70:c1:52:e8:93:d5:64:f8:cb:ea:df:23:2a:14:9e:b0:98:8d:
c0:d6:78:ce:c5:bc:ec:1e:e9:58:ea:fc:ba:04:9d:f9:6e:51:
6d:a2:4b:49:0b:96:3a:18:c2:f8:a0:de:b6:75:32:fa:52:95:
66:a5:f5:b5:cf:61:81:13:6d:3a:55:47:32:81:5b:bd:e0:62:
d4:54:e2:57:60:15:e4:b2:26:ee:c2:30:1b:81:47:c3:3b:3d:
d3:7a:ee:5e:2b:47:89:11:fd:8e:9b:3e:3a:b8:e0:a9:b1:d8:
1a:7d:1b:e9:5d:94:36:08:ea:1c:e5:87:38:23:4b:42:57:30:
ac:c9:7e:08:28:ab:0c:c1:fd:78:52:94:bb:d5:03:ad:5d:bd:
76:ca:47:66:d6:3b:b1:3c:cb:f9:a3:3b:c2:28:05:1c:d1:2c:
50:f1:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:07 2025 by rpki-client