Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2D7c1dVXmlLL57yQ9HpNMeUo0OU.roa
File: 2D7c1dVXmlLL57yQ9HpNMeUo0OU.roa (raw, json)
Hash identifier: h2WXR8FBCa0Q9y5AYBFvD1lMNPeIzXU7EL6m/Xoi8Ew=
Subject key identifier: D8:3E:DC:D5:D5:57:9A:52:CB:E7:BC:90:F4:7A:4D:31:E5:28:D0:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 689996BF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2D7c1dVXmlLL57yQ9HpNMeUo0OU.roa
Signing time: Mon 07 Feb 2022 03:09:47 +0000
ROA not before: Mon 07 Feb 2022 03:09:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1754896063 (0x689996bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 03:09:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d83edcd5d5579a52cbe7bc90f47a4d31e528d0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:e4:2c:38:d6:ed:a4:8a:4a:3d:16:ec:ae:
80:b6:62:58:04:03:b6:59:b6:04:22:c7:b3:fc:7c:
a0:30:80:3a:6b:d1:46:61:8d:21:bc:b7:ec:8c:61:
fa:6d:ca:a0:ce:f6:f9:8d:30:23:c8:d3:19:54:36:
66:0f:8c:f8:3b:ee:82:cd:69:4b:99:a3:f0:d7:c0:
7a:6f:8a:44:17:1d:57:6b:81:d3:cb:ce:71:ae:7c:
01:08:35:a1:ab:a1:cf:43:d8:47:22:19:a9:8d:df:
46:92:56:e5:3d:3d:70:09:49:cb:8f:1e:d5:29:17:
f6:d9:b8:c6:31:81:09:28:03:40:da:f9:98:9a:69:
1b:52:75:f1:da:0b:fd:00:7f:89:53:1c:d3:fd:83:
bd:29:72:00:34:33:0f:aa:c7:b7:5e:81:c8:56:3d:
26:87:70:63:1b:5b:0a:a1:2e:b2:37:29:7e:58:a1:
6f:db:c7:1a:44:c8:b8:a1:10:37:24:c7:7a:c2:bf:
3e:74:61:f6:97:1e:66:9d:89:3d:f5:dd:b2:2c:ae:
a7:ef:62:98:34:91:68:e7:11:93:9f:a3:07:e3:97:
82:2e:90:b5:34:c8:94:6f:e6:41:bc:c8:2d:b5:f4:
62:c8:d6:7f:d6:89:fd:b1:92:f9:7a:8e:5f:3d:28:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3E:DC:D5:D5:57:9A:52:CB:E7:BC:90:F4:7A:4D:31:E5:28:D0:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2D7c1dVXmlLL57yQ9HpNMeUo0OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:10:e4:17:03:10:8e:76:89:96:be:15:fb:69:1a:73:d9:d0:
a9:f1:34:75:d1:fc:08:4e:1d:9d:03:18:b9:12:d7:1d:2b:70:
3f:da:21:b8:12:a5:e4:91:27:b8:1d:8c:b7:dc:db:19:5a:10:
89:27:60:b7:76:07:65:0a:7a:d8:87:b5:77:65:61:6f:64:73:
ab:d6:b4:09:ee:55:3b:50:47:f6:51:76:b4:a3:11:76:35:49:
8f:a6:f2:fe:3a:2d:62:c6:e9:01:f2:a7:27:4b:3b:46:1e:f9:
ec:2d:23:8e:0b:a9:8c:df:47:f8:76:96:c4:53:b9:de:c2:6b:
aa:da:1d:53:47:58:0f:86:54:64:02:30:97:39:a4:09:27:3f:
96:04:57:74:e3:e0:8e:7b:f8:d5:cf:85:05:b8:34:10:f7:c6:
67:59:13:6e:4d:62:8a:ec:83:72:b8:96:68:09:b1:97:96:db:
91:85:6b:cb:fc:97:ca:a2:1c:17:2a:31:d6:7c:56:96:5d:8d:
24:57:93:ea:64:c9:99:cf:c9:79:78:c4:ff:8f:97:a0:49:ca:
83:47:cd:42:9e:53:17:9f:66:d0:99:9e:86:d0:22:80:c4:3f:
d5:c7:83:f8:ed:4b:01:e2:93:a8:76:fe:b3:11:b8:bc:0b:26:
1a:cf:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:17 2025 by rpki-client