Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2w7pxdAnbalikK8fm4PEWmodCWM.roa
File: 2w7pxdAnbalikK8fm4PEWmodCWM.roa (raw, json)
Hash identifier: 9AMI/grIOxMNfAncgsdjkAZlXKhh+xrPkxjfoA3Q1JI=
Subject key identifier: DB:0E:E9:C5:D0:27:6D:A9:62:90:AF:1F:9B:83:C4:5A:6A:1D:09:63
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018422CD009DCE76AE21F169727EEEA6E808
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2w7pxdAnbalikK8fm4PEWmodCWM.roa
Signing time: Sat 29 Oct 2022 08:12:51 +0000
ROA not before: Sat 29 Oct 2022 08:12:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:22:cd:00:9d:ce:76:ae:21:f1:69:72:7e:ee:a6:e8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 29 08:12:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db0ee9c5d0276da96290af1f9b83c45a6a1d0963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:62:d8:da:d9:4f:23:bf:25:88:6f:18:7b:
98:b3:dc:d2:cd:af:ca:d4:65:ed:f9:1a:3e:23:cd:
67:3d:c4:8e:be:87:e0:86:d8:a6:76:3f:ef:a5:7c:
1a:6d:f8:27:8c:41:34:40:21:bc:5b:f6:73:10:c0:
db:61:0f:ad:5d:87:21:e8:9c:cd:44:90:34:00:e0:
d3:73:96:37:ec:73:cf:8a:f3:2c:51:3d:d5:31:15:
89:5f:90:0a:eb:ff:01:48:6f:1a:51:18:db:d1:db:
e3:e8:07:b4:55:b4:07:8d:d7:a0:2a:5e:f7:47:d0:
9f:68:12:7e:fe:5f:34:52:88:43:ca:bb:22:bb:d9:
fc:ef:9d:50:fe:41:fa:ce:a2:89:50:b4:7d:4d:67:
4f:ba:21:3b:a3:4f:6b:7c:03:b2:74:d0:ad:e2:4c:
46:4f:fe:2e:84:8d:95:04:31:5b:98:ec:cf:ac:9b:
11:a7:e8:d9:17:42:0a:05:fb:fa:ac:92:54:78:8c:
48:f3:2c:ce:b7:8f:12:44:fa:a1:b8:2c:e1:dc:f3:
01:1d:df:58:ba:7d:84:85:6e:23:d0:5d:8c:81:4a:
63:4c:b6:6e:d9:61:ea:c1:fc:3f:06:23:6e:be:a7:
1e:66:9c:56:96:d8:74:46:62:8f:47:04:3f:35:f1:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0E:E9:C5:D0:27:6D:A9:62:90:AF:1F:9B:83:C4:5A:6A:1D:09:63
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2w7pxdAnbalikK8fm4PEWmodCWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:15:35:1c:8d:20:4a:28:73:c2:33:f0:5c:f4:e3:a1:fe:2f:
e2:09:02:f3:84:13:5d:1c:7f:29:27:3b:de:9e:19:83:b7:51:
b3:82:a6:1a:64:b2:ca:51:74:be:66:d3:38:0a:e3:20:4a:87:
6a:ea:a9:27:2c:51:cf:51:63:cb:26:9d:cd:5a:1e:72:5f:4a:
b8:bc:4b:50:7a:35:b4:f7:8a:92:ca:d4:af:88:bd:bd:92:42:
6d:e6:73:2a:07:09:9e:42:79:10:3d:c1:4e:aa:a8:8c:ad:72:
d1:f3:90:4f:91:0b:dd:26:c7:87:1b:66:01:7a:88:24:da:5f:
14:0e:cb:48:f3:de:f1:26:f5:83:2b:bd:2e:ef:38:56:eb:4f:
be:d0:dc:9e:83:c1:64:b1:1b:81:12:a1:19:1f:cd:f1:ef:88:
07:cc:d5:72:b9:d5:b2:2c:a3:9c:19:4b:a1:92:77:35:01:ff:
d3:26:13:b8:5f:37:3c:d6:6b:f6:0c:00:da:ec:a3:ca:c8:79:
34:d4:e4:c9:ea:5e:09:45:ff:c4:a8:83:17:97:f6:3b:16:1d:
ee:8a:d2:b6:90:f6:08:ca:94:0c:ce:85:ec:ca:95:d4:14:5c:
23:a7:1a:e8:a3:10:c2:91:db:f4:e6:ee:59:04:d7:1f:ff:71:
32:8c:46:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:36 2025 by rpki-client