Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/26_wEoLgSYm2RijZ65BQxcnU1D0.roa
File: 26_wEoLgSYm2RijZ65BQxcnU1D0.roa (raw, json)
Hash identifier: BNRDdmkvt/1/vSg96nNoy98svGuncBl56TiWAg5zbo4=
Subject key identifier: DB:AF:F0:12:82:E0:49:89:B6:46:28:D9:EB:90:50:C5:C9:D4:D4:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855A23ECAB9047D1417FB94415A6FBB149
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/26_wEoLgSYm2RijZ65BQxcnU1D0.roa
Signing time: Wed 28 Dec 2022 19:09:41 +0000
ROA not before: Wed 28 Dec 2022 19:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5a:23:ec:ab:90:47:d1:41:7f:b9:44:15:a6:fb:b1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 19:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbaff01282e04989b64628d9eb9050c5c9d4d43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2a:ac:e9:53:b3:82:df:95:d4:42:87:a2:e1:
9a:18:61:db:73:6f:08:88:00:6d:d2:bd:1d:5f:ce:
17:81:ad:cd:a4:81:fc:cd:8b:d2:d8:b8:2b:44:08:
dc:6f:58:51:5c:5f:b2:6c:ac:32:76:a5:9b:19:ed:
4a:10:e6:5a:b6:b0:68:12:dc:ee:92:f2:6a:43:c2:
67:cd:89:45:97:dd:7a:ba:ba:43:61:72:90:78:cf:
94:61:92:82:37:9f:17:99:10:73:d8:42:5a:71:99:
58:31:41:67:ef:b7:1e:ae:21:a1:49:fd:16:98:99:
2b:6e:e5:d0:da:3e:dd:b9:8f:f6:99:c1:55:1b:c9:
e4:9c:36:e0:c3:82:47:87:1d:e8:98:b6:9f:41:1a:
de:ec:a9:0e:1f:59:4d:41:22:83:00:d9:37:3d:2b:
94:d7:5d:11:1e:3b:27:ac:c4:76:6b:74:28:e0:11:
2e:7d:02:14:ea:b5:7a:53:f6:30:7a:58:1d:27:7b:
9b:6b:a0:a9:5a:50:a3:c3:d8:e5:c3:ba:74:73:d3:
dc:b0:15:59:2a:de:5e:9e:28:f1:54:5f:bc:69:dc:
68:4b:6a:80:e4:a9:b9:8e:ca:6f:96:c9:65:9b:d5:
cf:66:1f:45:d0:71:5a:1a:d9:d9:a3:8d:b1:57:43:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AF:F0:12:82:E0:49:89:B6:46:28:D9:EB:90:50:C5:C9:D4:D4:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/26_wEoLgSYm2RijZ65BQxcnU1D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:54:77:0b:84:2b:96:cc:90:6f:15:64:ea:1a:f7:09:0d:93:
3c:d0:37:4e:a4:b5:4b:d6:d8:53:6d:c5:c6:00:49:22:f9:9d:
72:71:31:cc:1c:ad:6f:fc:30:dc:96:62:7e:f9:f2:c0:41:77:
2b:1a:9c:65:da:f2:ef:4a:fd:9a:b6:e3:39:b7:24:96:5a:70:
85:0d:fe:14:20:58:ef:7a:ff:cd:04:7f:12:e7:ec:0c:b3:b5:
0c:96:f5:03:70:2a:db:4b:01:ab:c4:81:88:cf:ef:f9:21:0b:
ce:68:cc:60:db:1b:79:b2:1b:3d:f6:c7:86:e3:cd:da:70:c2:
79:26:28:ef:b2:91:51:6e:46:39:c7:6a:17:14:b4:1d:41:fb:
83:07:44:73:dd:03:da:c3:17:f2:f5:57:db:dc:98:ba:0c:8e:
ef:30:9d:72:ee:46:21:8f:c0:86:eb:be:b0:4a:10:d0:45:4e:
fc:6f:4a:37:7f:ae:18:23:b7:1a:19:91:b7:19:8c:2c:e0:33:
d5:19:87:3b:6b:8a:4a:94:60:21:56:1b:dc:c7:42:0c:5e:ee:
f6:10:a9:34:bd:fb:4d:51:be:f7:0d:80:e9:62:03:99:26:28:
13:97:ef:a8:5d:e9:7e:5b:1b:dd:bf:0a:7f:2d:22:2b:c3:53:
80:7b:bd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:23:38 2025 by rpki-client