Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1PR7UtHrSdcQxN84MA4sXLWvrF4.roa
File: 1PR7UtHrSdcQxN84MA4sXLWvrF4.roa (raw, json)
Hash identifier: nkMlKVH2Rp0MJyTiMQ55ZyYWi8CDQvvmQC2zxUT5qbc=
Subject key identifier: D4:F4:7B:52:D1:EB:49:D7:10:C4:DF:38:30:0E:2C:5C:B5:AF:AC:5E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854BC2993F7EEE2F989D5B25D82E2BA9BD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1PR7UtHrSdcQxN84MA4sXLWvrF4.roa
Signing time: Mon 26 Dec 2022 00:08:42 +0000
ROA not before: Mon 26 Dec 2022 00:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4b:c2:99:3f:7e:ee:2f:98:9d:5b:25:d8:2e:2b:a9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 00:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4f47b52d1eb49d710c4df38300e2c5cb5afac5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:0b:ad:de:c0:de:82:52:5d:d1:ae:68:06:
50:7c:81:65:eb:25:ae:ea:24:1c:34:3c:31:4f:0e:
94:99:b7:31:32:c2:72:81:a2:ee:07:a8:cc:4f:24:
e7:20:05:81:f0:b6:11:c2:0c:4c:12:9b:d3:33:88:
5e:de:35:a9:2f:44:19:11:55:37:d4:f9:91:ce:05:
8c:eb:a7:99:4e:a2:a8:83:e4:10:12:30:8a:4e:6a:
4a:bb:a0:28:7d:6b:76:43:12:34:91:61:3d:b9:55:
b4:9f:6c:4c:6b:30:76:43:49:c1:52:aa:a7:5c:a4:
a9:67:e0:3d:4d:fc:e7:95:3d:07:ca:47:47:fd:82:
d2:0c:87:81:cc:bf:07:5b:c7:40:da:c6:60:bd:61:
36:56:dd:30:ca:d1:83:6b:f8:bc:a2:10:28:76:df:
9b:cf:cb:75:3b:d5:f5:73:a9:d5:62:5e:2f:18:68:
a8:b6:bd:eb:b1:25:69:af:0e:b7:67:06:b8:0f:76:
d0:86:88:75:8c:b9:ed:b0:20:63:8e:8d:06:35:8b:
3d:0c:80:d3:98:13:bc:43:a4:47:7c:28:2a:f4:9a:
ad:f7:af:32:f5:db:5f:c8:04:c1:b0:19:1a:b5:a2:
fe:83:61:6f:32:80:d2:ce:6b:e7:72:8e:41:a5:24:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F4:7B:52:D1:EB:49:D7:10:C4:DF:38:30:0E:2C:5C:B5:AF:AC:5E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1PR7UtHrSdcQxN84MA4sXLWvrF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:5e:51:8b:59:5b:bc:ac:42:fa:22:20:5b:a9:f6:cd:1d:7a:
f1:fd:14:bf:44:ec:08:76:8d:97:5a:f5:20:7e:5f:50:f5:e4:
63:9d:27:8d:3a:e9:52:38:f0:af:24:38:07:57:ec:27:79:9c:
d8:ed:22:05:0f:0a:ed:b3:36:30:19:4c:00:7a:ab:ec:f4:11:
b4:73:ef:9a:56:42:a4:7a:dc:e6:a7:b3:81:3f:ab:e1:0f:ae:
d6:91:d2:df:51:6f:cd:8d:0d:56:75:93:c4:64:b9:f3:59:90:
ee:4d:4d:e1:e5:3e:ff:14:9d:f1:7e:53:de:91:6b:b3:37:9c:
8c:2e:e5:89:3d:93:cd:4a:d4:9a:66:69:a2:7b:e4:54:04:48:
83:79:01:cd:4d:82:78:71:cb:a2:6d:aa:84:27:2d:da:b3:6c:
71:de:fd:dd:2e:96:d2:d7:d2:c2:f7:a6:23:1c:b9:ab:74:17:
87:25:7e:c5:70:b5:34:6e:45:ab:cc:77:fd:3e:d5:54:c8:0d:
68:09:59:f0:91:f6:85:d6:92:67:92:81:f4:35:a1:0c:1f:d2:
5d:06:02:18:03:3a:7c:f6:4e:e4:f3:1b:c6:97:46:cd:0d:6a:
26:5a:04:d5:28:73:34:68:5b:63:c7:7d:31:35:4b:e8:09:57:
f4:69:5d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:29:47 2025 by rpki-client