Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/18A1jCqj5udbNR3UwHXusVVD9_8.roa
File: 18A1jCqj5udbNR3UwHXusVVD9_8.roa (raw, json)
Hash identifier: vOlsAIwogWjzRYpMr2JMn2St11YKe6ZjX+DXs7keSDY=
Subject key identifier: D7:C0:35:8C:2A:A3:E6:E7:5B:35:1D:D4:C0:75:EE:B1:55:43:F7:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018223AD691F1B2C1231B5C2DC1CF3A4786C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/18A1jCqj5udbNR3UwHXusVVD9_8.roa
Signing time: Fri 22 Jul 2022 02:12:23 +0000
ROA not before: Fri 22 Jul 2022 02:12:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:23:ad:69:1f:1b:2c:12:31:b5:c2:dc:1c:f3:a4:78:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 02:12:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7c0358c2aa3e6e75b351dd4c075eeb15543f7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b9:40:2e:af:23:7c:99:ac:4b:f8:6d:97:50:
e7:15:cb:be:d1:fa:e3:26:71:ab:de:c7:a1:6f:24:
ec:e7:c0:81:d5:58:32:2d:2a:27:41:b8:82:09:24:
b5:5a:20:9b:a2:4f:e5:40:45:73:f5:a5:12:17:b1:
98:8d:84:91:e1:d8:91:a3:21:3e:e2:6c:5c:63:89:
65:be:c3:0d:d6:a7:a4:90:1e:cf:e1:fa:17:62:66:
e2:56:80:93:2a:12:21:d5:f4:36:85:00:25:30:d9:
4c:63:b3:09:6b:4e:70:22:24:d5:a1:e5:cd:6b:3b:
57:df:d7:79:be:d9:60:c8:f7:5a:29:3e:c6:f6:ad:
c8:fa:23:22:de:aa:37:e7:40:9f:fb:9e:7c:ae:22:
3b:2b:3f:b4:ba:05:df:89:c6:a5:6a:38:83:92:65:
19:ca:cb:63:78:a1:e3:7b:1e:07:67:4a:27:8b:dc:
a9:b6:5c:15:e0:fb:83:43:59:95:d6:a7:2d:a0:d9:
2e:be:25:2c:bf:8e:a6:57:43:86:54:fe:34:ee:95:
c4:c6:b3:c4:16:8e:d4:2a:8a:82:57:a5:60:35:7c:
76:4c:9d:2b:83:0a:ca:16:72:64:b8:e0:22:ee:96:
69:cd:ab:9c:37:e1:7c:42:ba:d0:92:e4:60:f2:21:
b8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C0:35:8C:2A:A3:E6:E7:5B:35:1D:D4:C0:75:EE:B1:55:43:F7:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/18A1jCqj5udbNR3UwHXusVVD9_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:b3:c5:28:5a:7e:09:70:96:24:86:bd:84:9e:6e:df:bf:b6:
bb:93:a1:68:37:10:1b:ff:7e:b9:04:46:2e:18:16:de:d3:31:
4a:aa:95:f8:b3:4a:af:6e:51:14:cb:94:a6:a5:69:e6:cf:b9:
e0:18:0d:e9:47:73:07:dd:91:75:b0:cb:f6:a0:73:7f:e9:3d:
38:82:3c:bc:c0:f0:29:89:e5:99:02:fe:42:83:f6:82:b5:92:
9d:fe:5e:b1:6f:73:11:59:2f:73:5f:73:52:01:dc:18:e6:19:
99:54:ae:6e:b3:bf:71:2a:ea:f9:ae:78:8c:8e:21:19:3d:56:
b2:ce:19:f6:bb:dc:d5:82:9f:7c:9e:33:2e:6d:8d:44:4f:33:
a9:b7:08:c7:cf:0f:11:28:da:df:15:e1:42:05:6f:63:76:73:
2d:b9:28:d7:94:cb:54:6c:ff:a3:fd:c2:4a:a8:7d:62:57:0a:
88:72:15:f9:b8:64:f8:8b:7c:8c:c9:2a:f9:9c:27:19:55:c5:
a3:07:7b:3c:3d:f8:fc:57:62:cd:69:da:61:05:13:db:9d:de:
d1:ec:1e:a7:b9:d2:3e:31:13:07:7d:3c:70:d0:d9:83:fa:17:
ea:9d:fe:61:76:76:be:7e:da:51:1f:97:a2:5d:79:4e:c3:2b:
b0:ae:8f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:47 2025 by rpki-client