Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1oV7YtKZdToOqpeS5KCfioRffi0.roa
File: 1oV7YtKZdToOqpeS5KCfioRffi0.roa (raw, json)
Hash identifier: LfjWqTFRrDs5JmZctfo4Mib/0eGideeUmwmUZRatXuM=
Subject key identifier: D6:85:7B:62:D2:99:75:3A:0E:AA:97:92:E4:A0:9F:8A:84:5F:7E:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018591B90C8476210F14E6303C01D3CF51A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1oV7YtKZdToOqpeS5KCfioRffi0.roa
Signing time: Sun 08 Jan 2023 14:11:41 +0000
ROA not before: Sun 08 Jan 2023 14:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:91:b9:0c:84:76:21:0f:14:e6:30:3c:01:d3:cf:51:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 8 14:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6857b62d299753a0eaa9792e4a09f8a845f7e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a9:8c:f6:52:f9:ff:24:64:e8:8d:ed:96:24:
de:82:03:e1:50:01:56:e7:ca:82:c6:c3:83:74:cc:
1a:6f:f9:13:2b:fa:9d:8c:71:31:f2:27:9b:2e:a1:
5c:13:ec:b6:de:ff:18:ea:6c:c4:69:e0:5a:4a:dc:
a9:46:f9:e6:6e:ad:be:81:f7:95:12:cc:f1:a1:69:
ba:82:97:61:c5:e8:ea:94:09:8e:62:11:9a:d0:da:
ca:c0:0f:b5:5a:f3:33:79:60:a3:e0:29:c5:66:a5:
74:57:a1:42:a8:27:56:a3:25:ad:7f:b2:a0:9a:4a:
44:45:a8:be:63:a3:a1:8d:74:a8:4e:16:5d:8c:08:
e1:14:d7:7b:5e:3c:fe:f2:a5:1a:17:35:b0:4d:1d:
5d:de:b2:be:8e:cc:e2:c4:82:2a:a3:fa:4f:a2:f1:
50:07:06:6f:64:ad:f1:97:b2:00:54:30:7f:67:90:
33:e5:15:64:68:2a:fd:b7:f8:a0:d9:f2:2f:65:01:
46:cf:20:48:7e:b0:e8:de:e0:23:c5:a3:0b:6f:3f:
ff:76:e7:7f:a2:af:10:eb:b1:1d:c6:86:b8:92:04:
ee:70:6f:04:7e:a4:f9:d9:c3:7b:59:b2:a7:25:48:
66:70:5d:4c:e4:24:a9:d1:73:89:c7:72:56:c4:e9:
8b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:85:7B:62:D2:99:75:3A:0E:AA:97:92:E4:A0:9F:8A:84:5F:7E:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1oV7YtKZdToOqpeS5KCfioRffi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:67:55:bd:71:3d:76:8d:5f:9e:68:41:45:12:94:a4:88:a5:
9f:b6:09:e0:8a:8e:ab:ae:6e:80:c0:9f:01:ae:12:f3:c1:22:
8d:89:ed:90:69:25:80:9e:2a:e8:de:cd:19:70:ef:33:88:c3:
d8:d0:d5:2c:61:c4:c3:45:49:01:83:80:28:cc:c5:d7:09:b3:
a6:ad:f3:de:75:78:c0:b8:38:39:2d:d7:0a:22:40:36:da:42:
c4:06:7e:79:90:e1:8f:ba:dc:38:6c:18:d2:41:3a:70:39:66:
60:0a:15:22:be:fb:63:f1:a8:24:d2:dc:a9:98:9e:a0:a2:9f:
72:a8:3c:2f:04:b9:d6:c5:56:b5:c7:0c:0a:dc:69:15:ab:ea:
d0:65:4f:4c:9b:3a:69:18:41:2d:0c:5c:35:af:65:40:47:2b:
5a:77:21:b5:ac:61:e6:c4:e8:d0:d9:52:0b:09:ce:69:ce:56:
e3:6e:60:2c:1a:f7:9a:65:24:9d:b2:29:bc:8f:bb:d5:b4:4a:
16:8a:7e:5f:6c:42:7d:ca:c6:50:28:54:d8:5a:d1:db:93:e5:
f7:d1:29:b7:12:48:1a:7e:a8:b9:8e:06:45:08:78:8d:b5:1d:
fe:27:00:12:1e:83:22:b0:2f:bc:4a:28:0e:74:a0:10:e1:73:
81:0c:07:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:22:35 2025 by rpki-client