Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1QfrTRKLEMX5zVF3MqgnE4n_dH4.roa
File: 1QfrTRKLEMX5zVF3MqgnE4n_dH4.roa (raw, json)
Hash identifier: K3dsan39JDWhDlQPUZAGehd6OquTIPMqkoyAzrHYvlY=
Subject key identifier: D5:07:EB:4D:12:8B:10:C5:F9:CD:51:77:32:A8:27:13:89:FF:74:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183E795B5A18BF17EEFF6F04A5F4B04FCED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1QfrTRKLEMX5zVF3MqgnE4n_dH4.roa
Signing time: Mon 17 Oct 2022 20:14:51 +0000
ROA not before: Mon 17 Oct 2022 20:14:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e7:95:b5:a1:8b:f1:7e:ef:f6:f0:4a:5f:4b:04:fc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 17 20:14:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d507eb4d128b10c5f9cd517732a8271389ff747e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:00:d6:95:54:01:e1:66:f6:5b:b9:aa:51:
38:e9:ac:09:9e:04:c9:12:b8:26:46:49:1d:ed:19:
2d:05:4f:7f:d0:e7:37:15:4b:63:15:4f:16:17:02:
aa:72:d2:43:a2:51:aa:af:f6:57:cf:7c:03:0e:76:
e4:e2:c5:13:fb:51:21:d3:28:a5:9e:81:52:e5:94:
c3:3e:8e:eb:c9:e5:df:ae:15:49:ee:e1:f4:af:93:
47:57:cd:a6:26:b5:b6:78:39:9b:d2:fe:e7:27:38:
59:b6:54:8e:93:6e:03:7b:d8:90:47:46:01:a7:46:
2d:7d:64:1e:40:f2:67:ce:0b:35:e7:29:0e:f2:05:
10:38:42:95:73:53:ca:fe:7a:7b:83:eb:e9:61:32:
66:bf:be:9c:aa:6b:e0:90:50:42:67:98:0e:47:ef:
aa:0e:6a:b8:45:3d:d5:e7:43:4b:d3:30:61:c1:07:
a3:17:b8:7b:33:2b:08:68:7c:70:24:c9:6d:09:48:
cc:04:33:a7:25:2c:d9:ff:97:57:bd:34:3e:94:cd:
72:ca:78:b8:1e:de:e0:ab:dc:8e:ae:2e:09:fe:2d:
b6:61:d7:d7:86:28:53:c0:4a:38:ff:0f:07:92:82:
8e:23:c4:c3:27:dc:ac:1d:63:48:ff:0e:ea:19:00:
a9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:07:EB:4D:12:8B:10:C5:F9:CD:51:77:32:A8:27:13:89:FF:74:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1QfrTRKLEMX5zVF3MqgnE4n_dH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:23:9a:11:99:b8:a9:d9:5f:09:5f:68:d7:bf:b9:75:f9:75:
c3:d4:01:32:c1:4a:f3:fa:b2:4d:3c:22:26:8e:7e:57:76:c8:
00:15:e5:74:0d:a1:02:9e:e4:7b:f4:2c:d1:b6:06:56:9f:eb:
4d:3b:50:04:99:e2:5e:91:55:e6:8b:05:1e:28:3d:e4:3a:07:
f1:ad:1e:99:f8:b7:ab:3d:72:47:9c:0b:de:66:19:e4:36:77:
6d:8b:f7:80:06:4c:f9:d9:5f:52:9e:33:7f:90:96:23:07:f8:
e8:2b:ae:d7:42:ed:38:2f:45:fc:a1:af:65:af:4c:13:d2:ff:
64:ba:d0:43:b9:79:13:33:76:ea:28:b0:b9:ba:fc:18:e5:db:
40:38:20:e4:fa:f7:5b:6b:6b:d6:d3:fd:d6:83:87:29:5c:d4:
b5:32:3e:49:1e:62:10:3b:c4:2e:28:65:d8:00:b8:0b:16:9a:
a8:aa:2c:6a:98:dc:71:f3:f6:13:29:59:69:d7:76:c1:ec:27:
34:00:5a:73:2d:97:0d:31:dc:e2:7f:37:b9:23:61:fd:77:a7:
6c:75:7c:73:89:27:35:58:f3:60:7d:5b:4c:a9:01:85:98:40:
55:82:2b:89:b7:47:42:36:2c:31:5a:53:8b:b7:5c:9a:9d:4e:
d2:a1:cb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:43:56 2025 by rpki-client