Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/222cAvhpiqITlOGThZ9UooLQ4U8.roa
File: 222cAvhpiqITlOGThZ9UooLQ4U8.roa (raw, json)
Hash identifier: 1tSiimEWghJmU7d5prFS+tc/9tlaCADloZIKUJesp2Q=
Subject key identifier: DB:6D:9C:02:F8:69:8A:A2:13:94:E1:93:85:9F:54:A2:82:D0:E1:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873D2BD15607C606780EBF5B2ABE554BAC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/222cAvhpiqITlOGThZ9UooLQ4U8.roa
Signing time: Sat 01 Apr 2023 14:14:54 +0000
ROA not before: Sat 01 Apr 2023 14:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3d:2b:d1:56:07:c6:06:78:0e:bf:5b:2a:be:55:4b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 14:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db6d9c02f8698aa21394e193859f54a282d0e14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:07:18:6b:da:3f:bd:49:af:f1:b5:72:52:df:
77:21:5d:9a:40:14:cd:a7:e9:ad:68:67:9b:88:cb:
d9:38:3f:03:01:f2:fe:93:34:1f:22:6f:f5:ce:fd:
3b:ce:41:ed:f8:40:eb:8b:a8:da:06:b4:8f:e1:e0:
d2:e7:4d:0a:3a:d9:12:4b:2f:87:61:75:17:f4:8a:
ae:df:20:62:87:40:19:99:ab:52:4b:7a:f3:cc:8c:
b1:2e:41:63:96:14:c7:96:2e:e2:9e:33:34:67:ff:
a4:a6:d3:03:57:a4:fb:1f:c3:fd:c1:fb:6a:22:5f:
0f:53:04:df:53:3e:43:aa:c0:34:2b:00:a9:44:1c:
4a:48:10:bc:1c:24:e2:51:16:f6:96:e8:25:83:a6:
ae:67:32:04:7f:02:c9:91:53:7a:f3:f3:9b:01:d7:
78:b9:48:8d:ef:b5:e6:7a:88:d0:8e:db:21:e9:f5:
9e:2d:91:76:a0:fb:45:67:f2:ae:7f:bb:64:27:02:
2a:a4:80:0d:4f:24:17:c4:3e:03:da:79:d0:7e:62:
8a:05:54:9f:8c:47:c8:8a:fa:88:a4:32:0a:1d:21:
a9:6b:bd:05:4b:cb:c6:af:f1:08:4b:cb:09:b2:6d:
93:8e:96:93:8b:0a:c2:49:99:02:f9:0d:ff:97:45:
8a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6D:9C:02:F8:69:8A:A2:13:94:E1:93:85:9F:54:A2:82:D0:E1:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/222cAvhpiqITlOGThZ9UooLQ4U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:a6:6e:76:7f:16:a2:fc:95:c5:ac:a1:70:5a:42:5b:8e:47:
4d:5f:b5:61:59:46:1c:3d:c4:6c:b3:6a:ed:62:45:a7:b6:61:
a8:ba:ef:23:a3:27:6e:c5:00:ee:2c:18:d0:c9:a4:8e:00:e6:
09:3c:fa:1c:86:db:39:f4:7b:c2:43:56:78:59:f6:db:6d:2e:
16:d6:4e:78:c3:ab:a9:67:04:54:e5:39:e9:c7:d7:74:a8:0d:
b5:d1:c7:1f:16:89:0a:7a:55:af:86:62:32:ab:c9:cd:10:0c:
62:a4:5a:e0:83:cf:62:70:fc:17:ef:78:86:b4:34:50:f5:47:
cb:23:61:cf:5f:38:31:55:bc:00:ee:46:cb:66:be:8a:6d:32:
7e:47:85:83:75:c9:55:e7:ef:19:cf:8f:f7:ba:40:b4:5c:19:
cc:fa:de:16:40:72:95:a4:99:bb:2a:77:06:27:5e:35:69:03:
2e:c5:60:9a:d3:ed:f3:d8:c7:34:5c:e5:25:69:e2:e4:49:07:
c4:ff:f2:e2:7e:32:81:17:00:eb:e6:15:99:d9:81:46:3a:ea:
96:6a:fd:e7:20:a6:60:3d:29:37:15:a7:3b:d7:03:a5:76:d1:
3a:d4:a8:22:cd:25:de:27:7b:f0:3d:b3:b5:5c:a5:6f:b1:a5:
d0:4d:c8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:20:24 2025 by rpki-client