Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1wPKctvqLUeDzizOCzSH-ue35gU.roa
File: 1wPKctvqLUeDzizOCzSH-ue35gU.roa (raw, json)
Hash identifier: PMyoTKq+oeqYkJxleaRg422hvTe1+vBNcZl/KQtCal4=
Subject key identifier: D7:03:CA:72:DB:EA:2D:47:83:CE:2C:CE:0B:34:87:FA:E7:B7:E6:05
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018530F11CA3BDE6B88C8C5E0C59FCC6F612
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1wPKctvqLUeDzizOCzSH-ue35gU.roa
Signing time: Tue 20 Dec 2022 19:09:45 +0000
ROA not before: Tue 20 Dec 2022 19:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:30:f1:1c:a3:bd:e6:b8:8c:8c:5e:0c:59:fc:c6:f6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 20 19:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d703ca72dbea2d4783ce2cce0b3487fae7b7e605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:d8:6d:90:e8:dd:5d:d2:7a:2a:67:1a:aa:
25:4a:a6:fe:8b:98:30:0d:f9:7e:86:3f:94:97:04:
c3:00:79:ab:82:fd:ef:ca:2f:08:b5:36:67:3f:ca:
fd:50:47:f9:dc:4f:8a:68:13:26:9b:0f:98:be:92:
70:d5:c4:7d:ef:96:fb:6f:42:46:d7:5d:c3:52:b3:
e5:ef:ca:4e:59:56:c9:69:bf:bb:54:d9:66:1a:88:
7a:85:7f:85:d1:81:00:f1:3f:3a:c2:81:ca:09:3b:
53:a7:4e:5e:e5:e6:68:5d:26:cf:a6:46:08:f6:de:
37:d1:e6:8c:d8:d4:2e:ff:23:71:bb:72:5e:c4:5f:
b8:c1:a4:5d:ec:6f:a0:e1:28:1d:a5:e9:82:a5:db:
f8:78:16:f6:60:59:83:21:aa:1c:ce:74:b4:ab:3b:
13:96:f8:1b:66:5c:29:af:4a:3d:03:59:6d:27:b6:
9a:79:d7:58:a9:4d:d2:ba:5f:66:40:44:56:5d:b9:
2e:3c:80:2d:0c:1e:df:0a:4e:c9:c3:30:85:66:95:
38:cc:13:5b:f7:06:f4:34:a9:66:51:b6:f0:21:2a:
03:13:77:0e:cd:a4:d9:68:0f:b3:62:ff:99:a1:1b:
6c:75:84:11:86:0d:92:d5:43:86:fd:8f:8b:2f:27:
6f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:03:CA:72:DB:EA:2D:47:83:CE:2C:CE:0B:34:87:FA:E7:B7:E6:05
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1wPKctvqLUeDzizOCzSH-ue35gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:70:44:1f:91:77:b9:16:28:e3:41:4e:b7:db:af:7c:b6:92:
08:ca:77:b6:71:68:80:5d:66:45:9c:66:00:15:54:f0:d5:5f:
08:07:06:68:7c:f4:f5:bd:1d:2e:6b:a4:c2:b2:b2:5d:e7:83:
50:12:7f:f1:54:69:c9:26:43:89:3c:42:32:76:01:a7:b8:49:
0d:d8:31:05:e2:6a:30:ec:0a:a1:e1:b2:be:8e:0a:89:a8:13:
cd:ec:91:86:23:8b:6e:8c:28:d4:66:33:6a:b4:99:ab:12:2e:
00:47:02:3f:9c:9e:a3:5a:64:c1:e3:df:8b:69:c9:bd:a3:7d:
5b:be:77:0e:3d:53:e7:7e:14:0d:1d:03:c1:ac:5d:19:ae:27:
7f:12:34:27:6b:55:38:00:1d:1e:c2:04:30:5c:19:da:ea:3d:
f3:42:9b:6b:f4:56:d5:d3:f3:c8:10:54:31:62:fc:b6:3e:b7:
00:d2:9a:42:6b:7b:1b:96:bd:28:1b:38:6c:ef:2f:a5:77:fd:
e8:fe:c8:da:e1:9c:9e:cd:37:cd:65:3e:44:5f:13:bd:fa:71:
f0:69:8f:3f:3f:45:3d:11:39:7c:d1:7a:cf:b1:92:da:58:fe:
40:cc:9a:34:41:ce:dd:10:c5:7c:96:da:73:86:7c:82:c4:6f:
5e:ec:c5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:14 2025 by rpki-client