Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/27VU2NJHhPWX32alaqXNp7kZBvA.roa
File: 27VU2NJHhPWX32alaqXNp7kZBvA.roa (raw, json)
Hash identifier: oLZeHJwrwRqvvcOndYRpBg9hQSmXXLtdkiRwjBA8GFU=
Subject key identifier: DB:B5:54:D8:D2:47:84:F5:97:DF:66:A5:6A:A5:CD:A7:B9:19:06:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7A27AD98
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/27VU2NJHhPWX32alaqXNp7kZBvA.roa
Signing time: Sun 10 Apr 2022 14:09:34 +0000
ROA not before: Sun 10 Apr 2022 14:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2049420696 (0x7a27ad98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 14:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbb554d8d24784f597df66a56aa5cda7b91906f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bc:d0:2a:0b:22:b1:ea:f3:cc:15:34:a4:d9:
f3:48:7b:cf:05:01:0f:0c:49:38:f2:e4:07:cc:3e:
86:d2:e3:10:aa:ea:b2:b8:3b:47:b5:96:1f:0c:79:
e7:06:4d:c2:74:15:8d:a2:38:27:45:0f:0c:c5:be:
ce:b6:b2:21:17:1d:ca:a4:65:fa:f2:f8:24:5b:da:
20:5c:ea:ba:3d:d5:1e:c7:cd:f3:b6:55:85:02:e5:
21:51:f1:6e:ec:2a:94:87:43:95:15:d0:12:7f:5c:
a7:ef:4c:7d:5d:68:7a:cc:5b:6b:85:21:53:89:93:
8f:cd:62:d9:35:1c:49:83:a9:9c:d7:49:d2:b4:59:
cf:a2:76:a6:86:80:2b:9a:e0:91:7d:ff:56:2f:c5:
98:1c:df:73:47:f7:45:ff:c0:5d:a2:80:ab:6f:82:
14:e2:dd:b3:59:88:ea:3c:1c:f2:99:02:b5:8c:06:
01:62:f5:a4:5b:02:c2:d6:3c:05:18:70:2c:1d:5e:
f5:54:26:ec:de:c8:fb:2a:f5:db:40:b6:d9:9b:fb:
de:55:eb:d5:f0:20:ed:dd:a1:1e:ca:cd:f2:28:61:
11:ca:f8:e7:7e:01:75:e5:0b:85:c9:52:a6:01:1c:
54:42:63:ac:09:88:8c:ad:6b:45:25:fb:55:86:b7:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B5:54:D8:D2:47:84:F5:97:DF:66:A5:6A:A5:CD:A7:B9:19:06:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/27VU2NJHhPWX32alaqXNp7kZBvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:44:46:dc:d2:03:08:5b:78:aa:89:fe:7b:f5:c7:d6:53:97:
c8:16:ee:55:26:b6:4f:e8:73:3a:22:28:f0:43:e3:9d:fd:00:
f4:d6:2a:da:46:cd:84:e2:c3:51:11:4d:46:f2:76:6f:e6:41:
2b:0e:a2:c1:5d:d8:ca:29:51:0b:ec:f7:81:13:26:a3:ed:e9:
6a:08:1a:f4:33:87:f5:4f:e2:0e:95:d9:4f:df:25:42:f8:e5:
28:17:b3:5b:4e:99:a4:d0:fc:b1:69:91:7f:28:a7:1e:57:bd:
b4:66:25:70:3a:48:9a:ad:38:38:4e:f5:40:3a:a1:d3:27:7a:
2a:86:3a:df:c4:a8:f1:f0:c3:52:83:40:0c:81:58:39:09:cb:
16:08:9a:27:fd:7e:82:9e:ac:1f:ff:cf:79:97:93:16:ca:cd:
a7:3c:cc:97:c7:31:87:eb:40:ee:54:f3:7c:70:8a:d8:1b:8d:
65:62:5f:b9:93:20:6d:0a:f5:18:9c:ed:10:98:49:9b:2b:43:
bf:e5:89:9c:e5:9a:e0:43:ef:e4:57:59:b9:a5:96:da:f2:10:
24:ff:e6:fe:98:60:84:8d:dc:70:1c:8a:53:6b:55:62:e8:e5:
10:c7:10:d0:3b:49:00:a3:ca:4b:4c:39:1b:d2:60:8f:df:64:
54:3a:0d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:05:44 2025 by rpki-client