Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1CWEiCkNofy2_XkPdlYs-ufezsA.roa
File: 1CWEiCkNofy2_XkPdlYs-ufezsA.roa (raw, json)
Hash identifier: F9Gahl8RhLfeqhlxv76xFPkASZB7D72edBFcpEe5gY4=
Subject key identifier: D4:25:84:88:29:0D:A1:FC:B6:FD:79:0F:76:56:2C:FA:E7:DE:CE:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 685E7601
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1CWEiCkNofy2_XkPdlYs-ufezsA.roa
Signing time: Sun 06 Feb 2022 08:13:32 +0000
ROA not before: Sun 06 Feb 2022 08:13:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1751021057 (0x685e7601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 6 08:13:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4258488290da1fcb6fd790f76562cfae7decec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:7a:f3:80:05:60:ec:02:b5:39:c7:0e:8b:
af:02:08:c3:6d:53:21:3c:4d:3a:4d:64:b9:58:cb:
f3:95:5b:0a:8d:56:86:46:7c:69:11:f0:26:de:91:
42:91:e3:bc:ad:57:88:6a:0a:f7:16:0f:9e:bb:61:
d6:9a:8d:4b:5e:cb:31:c6:11:76:53:4f:9f:c3:0f:
32:cf:bb:37:44:cd:7d:3e:54:c7:16:dc:f5:67:54:
06:57:3a:55:32:44:88:30:34:2a:a8:4f:c1:a4:da:
e6:ae:00:c2:7f:3a:e1:9b:64:d4:90:5d:ec:ef:82:
71:4c:a5:1a:3b:17:f9:9f:89:74:5b:42:70:d9:8b:
8a:bb:41:b8:53:31:ef:b0:a6:a8:b1:5d:e4:71:30:
ea:8d:00:38:00:cf:6d:c2:a5:a6:4e:b7:22:28:49:
02:f5:f3:c7:ad:25:6b:e3:d9:3e:09:2b:d1:c6:ec:
e1:7f:a9:3f:13:f7:73:d7:b7:c5:9e:f7:0c:36:49:
04:23:4f:94:7b:61:05:0f:8d:6a:50:eb:38:c2:c0:
15:04:89:66:58:9e:d7:d1:72:bb:62:83:f1:e4:ae:
fe:b6:e9:e6:38:b3:4d:90:e7:73:18:f7:9e:11:81:
83:9f:86:da:3e:62:6d:2b:e8:88:ee:4e:56:ac:d9:
f9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:25:84:88:29:0D:A1:FC:B6:FD:79:0F:76:56:2C:FA:E7:DE:CE:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1CWEiCkNofy2_XkPdlYs-ufezsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:7a:19:cf:af:5c:e8:e0:a4:f1:16:33:f5:aa:90:96:f7:51:
18:f9:aa:3e:d3:d1:ae:d3:01:d8:d6:7f:00:c2:16:c6:e1:94:
2b:be:09:44:9a:64:af:04:e5:7c:bb:9f:03:0c:5b:84:8e:30:
91:3c:99:a5:4f:0c:49:a4:7f:95:5b:a4:fd:32:3f:a5:60:c0:
97:66:dd:24:f1:a4:8d:47:d9:aa:39:d3:cf:03:ff:6f:ff:fd:
ab:5b:29:48:de:cc:0a:ec:80:03:8a:84:c0:c0:73:79:f6:3a:
c5:d4:12:09:0c:84:fc:e0:41:cf:cf:a3:83:1f:d5:f8:59:52:
fb:e3:8f:2b:1b:27:68:5f:a8:5c:73:a0:aa:c8:12:58:b8:d8:
c8:f2:4e:6a:3d:e7:53:4f:bf:32:d9:e4:63:68:ca:a5:20:0c:
e5:e0:eb:9a:bb:58:7b:1c:4a:cc:d8:5b:fa:ac:4f:e2:cd:03:
19:cc:c3:25:a5:29:af:fe:eb:f9:da:cc:3c:13:b4:36:07:96:
17:c5:49:9d:f6:a2:61:84:33:80:1a:92:69:aa:0b:c5:2e:2f:
47:5c:42:a0:1d:ae:20:0f:a7:91:01:07:53:3a:a0:a2:7b:e3:
18:7d:c6:66:dd:99:2b:90:a6:be:c2:44:c8:66:84:59:0d:ca:
cf:08:6c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 18:12:34 2025 by rpki-client