Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Evtqw6AtCLAfwRo-tF8xRYfzZ4.roa
File: 2Evtqw6AtCLAfwRo-tF8xRYfzZ4.roa (raw, json)
Hash identifier: VYevIXVaUiaL+bAehAW2auPXsntUiJh9Q7a1kv9ters=
Subject key identifier: D8:4B:ED:AB:0E:80:B4:22:C0:7F:04:68:FA:D1:7C:C5:16:1F:CD:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018513C5E0C465BC1030BB09316CA123A2F7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Evtqw6AtCLAfwRo-tF8xRYfzZ4.roa
Signing time: Thu 15 Dec 2022 03:13:33 +0000
ROA not before: Thu 15 Dec 2022 03:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:13:c5:e0:c4:65:bc:10:30:bb:09:31:6c:a1:23:a2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 03:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d84bedab0e80b422c07f0468fad17cc5161fcd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3e:dc:21:4e:c2:77:a3:d9:90:75:99:90:d8:
5e:02:43:4c:f0:20:e3:8c:cc:c8:4f:26:ae:5f:d5:
5d:36:79:f9:11:ea:60:ba:0e:16:f2:06:d8:08:cd:
dc:c6:18:43:92:10:85:d8:0c:4e:7f:11:87:d5:89:
bf:dc:2f:61:ff:c9:78:ea:93:05:ce:48:37:83:2a:
b6:c0:49:c4:bf:7a:67:ca:a1:bd:03:51:80:31:69:
92:5e:c8:8a:d9:07:d4:fb:3a:39:d8:90:b8:35:f5:
81:af:0a:3b:7a:c6:d5:18:74:2e:d4:48:4a:92:e7:
3a:97:0c:0a:ed:eb:43:fe:0b:bf:50:40:bf:00:f6:
36:81:ac:ef:01:42:07:1f:fd:20:c8:17:42:b8:37:
22:72:46:e8:5f:83:f4:6a:0c:67:ca:15:26:b8:af:
07:e6:bb:18:96:f1:df:d6:3f:d5:35:eb:e6:f9:5b:
ba:39:ce:5e:77:d5:3d:c3:02:b4:38:ff:fb:09:2e:
90:c7:1e:c9:74:1e:a2:a8:61:74:67:af:22:10:78:
84:8b:13:1a:07:aa:e9:3a:76:c6:a4:41:19:bf:ba:
e1:34:8e:31:c1:54:25:f1:2b:86:ea:b4:bc:70:17:
ea:03:6a:34:21:4b:5e:c2:08:35:bd:d8:4a:3c:d7:
56:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4B:ED:AB:0E:80:B4:22:C0:7F:04:68:FA:D1:7C:C5:16:1F:CD:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2Evtqw6AtCLAfwRo-tF8xRYfzZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:76:ab:f3:e4:fb:aa:41:98:76:86:06:28:44:43:fb:59:09:
24:ee:3f:0b:77:e7:41:ad:49:40:c5:18:a4:a5:0d:b1:4a:20:
60:a5:87:de:ce:2e:58:0e:e2:06:66:dc:89:e5:1f:88:ab:84:
d6:da:18:8e:80:2a:22:e4:aa:96:a8:c2:12:2c:16:4e:ac:8c:
fb:6c:49:d5:e7:ec:5b:7c:d5:60:a3:ee:51:58:14:be:85:04:
91:39:b3:dd:1c:1b:dd:fb:8b:e2:45:5b:1e:65:96:23:9f:2e:
03:e7:14:75:d3:78:06:df:eb:b6:f3:10:0b:a2:40:46:13:a8:
17:51:ce:35:9f:b7:a1:fe:84:84:79:37:39:ea:47:af:9a:ff:
94:c3:88:9a:d5:25:62:79:37:06:29:f2:0c:81:36:82:c5:41:
65:93:44:08:dc:94:fa:2a:30:ef:72:00:41:f0:79:50:47:49:
f6:db:8b:43:d5:5f:47:da:1b:81:cc:28:d7:9d:b2:8c:4f:60:
1d:92:14:89:01:a5:ef:9a:29:20:3e:95:81:10:41:9c:39:81:
b9:46:56:b8:68:6e:d0:6f:8b:58:3b:9d:e9:7e:01:5d:57:d7:
9e:78:6f:41:09:94:52:41:92:36:66:a4:57:99:1d:7e:ce:b6:
a8:d3:b5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:26 2025 by rpki-client