Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1M8_Vn6qPlKsr52izbO7ju5DYzo.roa
File: 1M8_Vn6qPlKsr52izbO7ju5DYzo.roa (raw, json)
Hash identifier: xlgOW7T8apRn6zjXJ5N4yUg3KDO7keB4F8we5fw1llQ=
Subject key identifier: D4:CF:3F:56:7E:AA:3E:52:AC:AF:9D:A2:CD:B3:BB:8E:EE:43:63:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184EE007D8F71D3912DDB4E3995373FF952
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1M8_Vn6qPlKsr52izbO7ju5DYzo.roa
Signing time: Wed 07 Dec 2022 19:12:00 +0000
ROA not before: Wed 07 Dec 2022 19:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:00:7d:8f:71:d3:91:2d:db:4e:39:95:37:3f:f9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 7 19:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4cf3f567eaa3e52acaf9da2cdb3bb8eee43633a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:11:38:f6:ad:8f:ba:d3:3e:68:1d:3d:61:
6c:97:35:2d:be:ff:f7:34:cc:74:cc:97:27:b4:df:
7e:39:1f:ab:aa:a1:0f:93:43:6a:84:80:fd:71:6d:
9c:a5:2e:4d:19:86:da:6e:e0:c9:48:64:91:1f:ca:
3a:a4:5c:84:b4:85:f8:cb:4b:4d:97:ab:8d:4b:4a:
ef:59:e7:56:c3:5c:68:8a:f0:6f:2a:68:a3:ee:88:
8a:1e:e1:2d:2c:d9:bf:da:75:c6:90:a9:02:68:ef:
2a:10:9f:c7:5e:6a:2c:39:72:40:46:52:2f:0a:0c:
09:69:59:80:39:92:f8:bf:0d:a0:d7:39:ca:1d:45:
16:e2:ff:25:00:7b:fe:18:e0:0a:ec:5b:97:49:eb:
16:a3:e2:35:b3:61:33:f6:c4:16:ee:16:3c:31:42:
ae:59:3b:75:e0:28:08:93:fc:22:d2:80:fe:90:50:
9f:5c:44:a2:5a:72:1a:b4:f8:76:33:68:41:4e:23:
cc:fb:51:2a:81:bb:54:c8:63:cd:40:3e:89:65:5b:
38:b8:d4:6e:a3:2b:5b:44:8d:85:d2:78:b4:a1:5b:
02:b4:b3:f9:08:52:77:96:74:2d:7a:8a:f1:74:47:
1d:a5:ff:d8:9f:52:70:05:ef:5e:a9:d5:93:78:64:
56:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CF:3F:56:7E:AA:3E:52:AC:AF:9D:A2:CD:B3:BB:8E:EE:43:63:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1M8_Vn6qPlKsr52izbO7ju5DYzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:6c:5d:9b:b9:e2:58:0b:f5:b6:65:14:90:73:74:8c:a2:78:
6e:da:da:57:39:da:91:2e:ba:1a:fa:08:4d:4f:e5:b5:94:58:
5a:6e:98:af:21:9d:a8:dc:7f:c4:bf:88:fe:43:0a:64:46:44:
96:29:d9:17:d1:5b:6b:2d:91:82:50:78:bd:5d:01:23:23:3d:
d2:b5:2a:99:81:ef:99:f1:d3:3c:84:21:72:23:ff:5b:58:d5:
89:bd:76:6d:33:5f:05:70:dd:7f:18:a9:7e:38:b7:3a:22:8c:
a2:65:bb:90:d6:f5:6e:1a:5f:0a:77:2d:b1:48:00:72:5c:5d:
02:86:33:00:50:c1:e6:a5:db:72:55:44:c2:78:98:77:9c:3f:
2c:1a:5e:25:8f:9e:91:80:b3:99:dd:04:f1:e8:27:8c:aa:11:
51:87:b8:20:1c:e7:f7:d7:2a:26:26:6d:c1:71:34:20:b3:53:
c3:1d:a8:c6:e1:74:26:08:18:65:a6:0b:ed:32:21:58:ee:41:
6d:83:0f:1f:8f:9c:6e:65:b8:dd:88:02:be:79:7d:1e:62:cf:
26:67:c6:c7:5f:41:f6:bf:05:97:55:9a:70:ad:f3:10:a6:ef:
94:bf:f6:0d:d9:47:b2:08:ec:09:8e:31:a9:07:7b:5c:65:b3:
30:86:69:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:14:44 2025 by rpki-client