Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1KD0Ksb5UoOQId8bI89LaBHLOw0.roa
File: 1KD0Ksb5UoOQId8bI89LaBHLOw0.roa (raw, json)
Hash identifier: h+eUbwZ8bz5bdmSF5rnY+VOQEqDnzG5ZLDj+x1mTAWw=
Subject key identifier: D4:A0:F4:2A:C6:F9:52:83:90:21:DF:1B:23:CF:4B:68:11:CB:3B:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850ABD4143BF9E4DFFBB92E8434B4EFA5C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1KD0Ksb5UoOQId8bI89LaBHLOw0.roa
Signing time: Tue 13 Dec 2022 09:07:33 +0000
ROA not before: Tue 13 Dec 2022 09:07:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:abc:5fe6/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:bd:41:43:bf:9e:4d:ff:bb:92:e8:43:4b:4e:fa:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 09:07:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4a0f42ac6f952839021df1b23cf4b6811cb3b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:e7:b9:04:4a:ec:1b:73:a3:f0:b5:41:ae:
ba:d7:1b:1d:e5:2a:64:6f:aa:f0:cb:cc:fc:ae:86:
39:99:af:47:13:c5:cd:0a:73:cf:86:43:78:65:0d:
34:76:71:48:81:a2:53:6f:5f:9d:d3:19:53:28:af:
c5:19:28:b9:4f:ba:c9:f4:a1:b1:cd:1e:f6:43:fa:
ad:a0:72:eb:da:13:9e:b9:cc:bd:9f:c7:e3:e0:a1:
9f:69:68:80:86:9f:23:eb:ff:a4:9a:4f:d4:73:3a:
ca:91:0d:ec:b5:03:08:f8:df:52:0d:eb:79:c5:de:
88:4f:3b:a7:b8:99:0f:25:15:33:e3:c1:a9:20:e2:
c5:60:38:78:2a:53:b0:8e:0a:e3:ac:8d:87:6f:04:
9a:02:b1:7e:86:3d:5f:00:8d:21:6c:aa:9a:ae:b0:
44:a5:f8:39:38:ce:27:72:5e:fc:02:b2:b1:91:09:
1c:70:82:ae:87:04:fc:1c:4a:f0:47:3f:c2:05:1e:
20:8d:9f:1e:21:3d:a8:57:72:f8:76:87:42:ec:58:
92:95:eb:49:b6:37:7f:86:41:c6:ab:01:57:11:bd:
ca:03:cb:6d:44:84:71:38:37:56:10:10:82:d5:de:
7c:bf:f6:11:98:29:3c:9f:23:dd:ff:46:0f:fd:a3:
a5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A0:F4:2A:C6:F9:52:83:90:21:DF:1B:23:CF:4B:68:11:CB:3B:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1KD0Ksb5UoOQId8bI89LaBHLOw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:a0:db:02:a9:d1:df:09:42:a8:6b:b8:73:85:09:4a:80:37:
c3:78:ad:fc:3a:58:91:4d:73:2a:37:ef:b7:f8:20:c5:4a:8b:
8d:49:42:02:ed:2b:2d:7f:6c:48:2a:36:78:98:32:db:66:64:
ab:b2:d5:b9:e5:b5:d0:4f:c1:b0:43:12:23:aa:12:84:85:6e:
9b:ba:86:d1:59:62:10:30:51:e9:1a:54:a9:65:c5:f3:b9:8c:
1d:ce:07:e2:c7:fa:7b:71:a5:86:cb:51:40:5b:41:d3:30:dd:
50:c3:92:d4:cc:32:fe:7d:dd:ac:32:22:88:a4:dc:68:34:45:
1f:95:e2:bb:49:d8:58:c6:18:03:2a:cb:95:cb:00:9f:a7:87:
58:81:ac:c5:9c:47:41:03:7e:08:c2:b5:48:ce:02:0c:3c:aa:
0a:3c:82:c6:f1:5d:e7:42:37:f0:71:ff:d8:b8:f7:59:fa:5f:
9b:09:00:40:a6:d7:4f:b1:d7:14:0a:1d:6d:80:7e:69:e9:c1:
ab:1d:ca:30:f6:13:04:c5:4f:de:65:c1:47:38:15:3d:83:86:
1c:3b:f6:51:b8:c9:9a:7f:f4:ad:92:e9:b8:16:f5:d7:31:90:
83:6a:82:8a:89:6b:96:56:31:ca:ff:c5:0e:d7:7e:1a:fe:1d:
de:e0:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:25:33 2025 by rpki-client