Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/20Z35o70WCzj0zHUn8RXsW-EYts.roa
File: 20Z35o70WCzj0zHUn8RXsW-EYts.roa (raw, json)
Hash identifier: N0jx58mdx/oY7B4+DB/HYl5nk0+TyRkU8fGfYsaCCxU=
Subject key identifier: DB:46:77:E6:8E:F4:58:2C:E3:D3:31:D4:9F:C4:57:B1:6F:84:62:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018200457C8DC8BA8E13573D0A7860E3A068
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/20Z35o70WCzj0zHUn8RXsW-EYts.roa
Signing time: Fri 15 Jul 2022 05:12:09 +0000
ROA not before: Fri 15 Jul 2022 05:12:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:00:45:7c:8d:c8:ba:8e:13:57:3d:0a:78:60:e3:a0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 05:12:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db4677e68ef4582ce3d331d49fc457b16f8462db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:be:ca:5e:6c:55:ec:cf:c6:dc:93:a0:2e:
77:02:ab:f1:d4:40:11:96:65:51:54:1f:12:46:db:
ed:16:7e:7f:64:d0:36:f6:8c:9e:95:ea:0a:ba:f3:
fe:c3:7e:dc:1b:54:97:b4:9a:57:a5:c4:3a:fb:00:
20:af:24:8c:a2:9b:d9:25:e4:17:ae:9c:9e:e9:f3:
65:62:79:4d:ec:3d:33:81:8b:c8:4e:3e:d3:c5:40:
38:08:4e:9a:28:91:5b:81:3f:fc:8e:93:e9:d6:9e:
80:20:1d:39:ff:7e:70:fe:89:c1:ae:e2:75:45:3c:
db:06:a4:f0:53:c1:ad:98:02:19:28:8d:c8:42:c9:
f6:bf:3b:ad:c9:31:58:d0:b1:f3:fd:e2:1e:08:88:
4d:65:04:ae:01:c0:95:e0:a0:42:40:17:17:9f:f5:
8b:47:b0:aa:71:05:ba:d2:d1:fa:8e:08:38:18:a6:
1d:f8:97:fb:fa:4e:01:80:99:e1:d1:ff:c9:29:04:
e7:3e:1a:15:30:81:59:f3:94:c1:59:9a:20:d5:b5:
47:66:52:94:57:57:4b:68:23:53:c7:a4:0c:aa:3b:
76:42:73:f6:cf:dd:a7:76:aa:e8:75:00:21:87:d8:
e9:78:ff:a1:f2:63:37:e0:b4:27:6e:4c:b7:29:5d:
0c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:46:77:E6:8E:F4:58:2C:E3:D3:31:D4:9F:C4:57:B1:6F:84:62:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/20Z35o70WCzj0zHUn8RXsW-EYts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:08:f9:dd:19:15:42:bd:3d:d4:03:9c:36:a8:bd:29:8c:4c:
2e:26:d2:da:8c:ef:97:db:eb:bc:90:36:58:90:63:76:8a:6d:
15:e0:3c:10:47:c8:57:c7:f3:0d:41:b2:aa:85:51:82:a2:9d:
5e:d4:59:64:76:fb:17:3a:1b:02:71:f8:ea:f9:52:3e:41:63:
1d:ba:11:db:3a:57:ec:bd:87:91:8f:3c:36:38:ac:2e:b6:14:
56:a7:59:48:fd:da:63:2f:a8:34:e4:96:77:0f:70:58:c3:43:
c1:e0:07:e0:03:67:f2:f1:a2:f8:eb:61:d8:3a:22:30:64:63:
70:30:00:8d:df:a3:89:e4:98:75:8f:14:2f:57:86:af:d7:a2:
c0:42:e9:2d:16:86:e2:68:c9:2e:d0:f4:93:48:a5:7f:e0:08:
95:62:f7:0d:36:92:e4:45:1e:2b:0f:73:ae:83:5c:0b:b4:a5:
bd:7f:93:6f:32:1a:cf:7d:ec:a1:4f:5a:3e:f6:29:d3:7d:0e:
19:ff:f9:df:bf:cd:ec:b1:cd:17:e1:f7:b0:ee:54:f9:44:4e:
e2:bb:20:84:37:43:30:fb:e6:83:d8:36:96:66:e3:6e:bc:be:
c8:ac:7a:7d:4e:85:35:61:c2:88:5b:72:af:72:d1:08:df:43:
0b:22:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:32:40 2025 by rpki-client