Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/21IfgV6dkPoWN4usC5aseVGr8o4.roa
File: 21IfgV6dkPoWN4usC5aseVGr8o4.roa (raw, json)
Hash identifier: LpkOBjVs9hp+GFvquUpVEfydxoVxkObtnUWQ21/sto4=
Subject key identifier: DB:52:1F:81:5E:9D:90:FA:16:37:8B:AC:0B:96:AC:79:51:AB:F2:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850D532E095AA4090E94378F055FFB3F24
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/21IfgV6dkPoWN4usC5aseVGr8o4.roa
Signing time: Tue 13 Dec 2022 21:10:33 +0000
ROA not before: Tue 13 Dec 2022 21:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0d:53:2e:09:5a:a4:09:0e:94:37:8f:05:5f:fb:3f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 21:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db521f815e9d90fa16378bac0b96ac7951abf28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:ed:ab:b3:d0:9a:90:2d:8a:ef:cc:df:d2:
35:8b:75:68:93:33:e6:85:d8:2b:1e:51:ec:39:3a:
13:96:df:c2:b5:7c:80:76:f4:c5:ba:9f:8a:7f:1b:
81:80:f8:02:b8:0b:a4:42:d5:e9:54:ae:d9:9a:e1:
88:fd:d1:0e:6c:1e:93:45:9e:0c:c9:76:b3:cb:8c:
67:14:37:7d:26:e5:47:46:aa:02:bf:df:be:a5:95:
b9:61:85:cd:3e:55:b9:97:c3:ff:9d:8d:41:03:44:
a7:1d:f5:4c:1e:46:c1:66:87:76:ae:1e:87:9f:61:
46:c1:f0:60:48:63:95:37:9a:8a:bf:b0:6e:0f:03:
31:ea:d8:58:94:77:cf:c1:d6:0e:93:35:ae:c6:44:
65:d5:95:35:22:69:48:2d:a6:ef:3c:7d:44:25:b2:
a4:61:3e:a7:31:cf:87:e9:10:18:f6:ec:f6:fb:8f:
9b:b4:75:22:a3:98:05:cb:31:b0:24:66:ef:31:1f:
8e:60:13:7c:00:d1:b4:49:16:17:32:e5:2e:8e:96:
d6:18:19:3a:c7:5f:a1:31:c9:d7:64:b1:aa:37:ba:
78:b9:43:2b:b3:94:4d:f7:4d:6e:52:a3:27:0c:a6:
34:03:9a:05:ac:7c:6d:dd:2c:88:78:5e:69:85:69:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:52:1F:81:5E:9D:90:FA:16:37:8B:AC:0B:96:AC:79:51:AB:F2:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/21IfgV6dkPoWN4usC5aseVGr8o4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:c5:4e:fa:d7:47:81:5c:b5:f2:cb:db:59:70:a3:0d:e9:1b:
e5:d8:cc:54:e9:26:8c:94:86:63:e3:cc:9c:4e:29:f9:a9:fe:
86:48:20:a0:d7:68:e8:a9:b8:47:82:8e:72:09:06:01:58:ab:
0d:e7:3b:bb:4c:f4:45:f6:08:08:4a:d7:68:0a:98:77:03:e5:
3e:64:de:dd:19:da:7a:3e:4e:cb:ed:25:07:f0:66:eb:aa:23:
7b:de:a3:b3:da:58:83:95:a7:32:5c:89:8b:8d:5f:d9:f6:6d:
99:6e:1f:f0:e4:1a:94:14:fb:5d:d6:91:b7:67:2d:b5:52:37:
30:1a:e9:21:3e:00:e6:05:2a:d7:c0:61:44:02:1e:7c:81:d7:
04:7e:35:38:4a:8a:c8:b9:3b:ad:07:67:a9:24:08:2b:01:d2:
9e:1a:2b:c9:d6:82:c3:a1:01:ea:ed:cb:8a:3f:68:88:12:3d:
83:d2:12:41:46:e6:2b:cd:d2:7e:46:a9:1e:5e:91:3d:b0:c2:
f8:bc:a9:dd:92:38:12:88:a9:c6:45:af:85:22:53:5b:33:b5:
d8:92:09:26:03:2a:a8:2e:5d:b6:9b:04:01:46:27:d4:2c:c0:
9c:0c:13:5d:2a:78:a6:c7:a0:74:e6:e4:31:fb:7a:d3:34:47:
4b:23:2b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:43 2025 by rpki-client