Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2hpjW7T-7qy0VN3HS3UF6leeZto.roa
File: 2hpjW7T-7qy0VN3HS3UF6leeZto.roa (raw, json)
Hash identifier: 1F5qGPY45PvwTsWqg9mA5+GbGmfCQ2ovQdOovbWaQYc=
Subject key identifier: DA:1A:63:5B:B4:FE:EE:AC:B4:54:DD:C7:4B:75:05:EA:57:9E:66:DA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181D2C92D290183128AA1BAE3D8728E8786
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2hpjW7T-7qy0VN3HS3UF6leeZto.roa
Signing time: Wed 06 Jul 2022 09:13:28 +0000
ROA not before: Wed 06 Jul 2022 09:13:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d2:c9:2d:29:01:83:12:8a:a1:ba:e3:d8:72:8e:87:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 6 09:13:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da1a635bb4feeeacb454ddc74b7505ea579e66da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:13:57:27:12:59:6b:b4:4e:e5:21:fa:c6:67:
6f:b6:27:f9:2f:63:b1:b5:a2:0c:4d:ac:8b:5b:e5:
20:8b:bb:68:d9:55:16:c2:23:15:f8:2a:fb:03:c5:
50:00:22:d0:f1:6a:91:5b:15:65:3f:df:ee:33:2e:
82:25:cc:03:6d:8d:56:37:ce:51:26:2e:6d:05:0e:
c0:fb:af:99:bf:3a:e0:e7:36:c8:26:9e:36:d4:3f:
e3:5e:9b:b5:3d:ed:49:38:4e:40:14:b5:f9:d1:95:
d2:d0:6e:5b:7a:c7:ef:71:65:5b:7a:30:fa:04:05:
2c:96:4a:e7:7f:94:3b:a4:50:ce:0b:a1:9a:53:2e:
60:72:a3:69:eb:b3:59:1d:ca:c1:48:b5:33:2d:37:
3c:a0:37:04:54:ee:15:86:d5:31:83:e1:b7:58:89:
c4:28:69:a6:ac:62:98:97:24:c3:2f:9f:fe:05:c2:
0d:79:47:f4:b0:0b:c5:85:8a:af:94:bc:9c:d1:7f:
21:6a:16:cd:08:53:a5:60:c5:b3:4e:ae:e0:f9:a8:
eb:c2:cf:ff:1b:4a:ef:c9:4c:24:25:97:3a:75:5b:
22:8e:ad:cc:a6:d4:57:06:54:1f:fe:b9:85:7e:d4:
8b:41:ec:bc:fe:bb:42:c0:09:6b:7e:99:23:45:36:
86:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1A:63:5B:B4:FE:EE:AC:B4:54:DD:C7:4B:75:05:EA:57:9E:66:DA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2hpjW7T-7qy0VN3HS3UF6leeZto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5a:45:a9:07:a7:8f:28:98:7d:85:50:a8:db:77:93:ab:0f:af:
7a:8f:a5:7d:9e:93:19:77:fb:ae:02:b1:e4:5e:f4:c6:35:c9:
e2:82:84:cd:02:21:03:b6:b4:c4:4d:b5:62:1b:23:08:09:da:
aa:6e:9d:bb:43:6a:f9:14:b7:3f:47:a5:a6:5a:4e:92:af:df:
e0:c3:68:a2:36:33:a1:b5:69:60:0b:2c:cf:79:5f:8d:7d:70:
e2:1f:e1:02:66:93:5d:08:8f:e3:79:86:b6:53:35:54:01:f5:
ab:9c:0f:d6:21:93:0c:a2:37:8a:04:08:7d:89:81:5d:61:9f:
37:62:fe:e8:95:b3:ff:f6:ff:4b:12:17:4f:c6:6e:49:2f:17:
e6:36:56:c6:86:58:18:9a:04:3a:a9:2e:be:51:22:a7:3a:44:
a6:5d:a0:b4:38:20:57:ad:76:3f:bf:c2:9c:52:f1:34:af:06:
25:8f:80:83:28:7c:d1:bb:f2:95:c8:f2:09:26:13:d5:94:fe:
98:36:6d:e2:89:0b:eb:92:e0:9e:fb:02:7e:3a:01:53:91:e4:
6c:d5:47:87:e4:dc:44:f6:4f:b4:7e:93:4a:6f:9b:17:4b:b5:
03:0e:0c:52:a3:96:71:b6:a6:c9:3d:5d:5e:79:90:9c:7b:d7:
36:6c:dd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:22:34 2025 by rpki-client