Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2xTW29hEDoEEzESb72vW5AfoodQ.roa
File: 2xTW29hEDoEEzESb72vW5AfoodQ.roa (raw, json)
Hash identifier: VrTkVem9iC9BhHErmG9L5SMB65Gsl/fiSA4FotyyZN8=
Subject key identifier: DB:14:D6:DB:D8:44:0E:81:04:CC:44:9B:EF:6B:D6:E4:07:E8:A1:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6CAE0ACB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2xTW29hEDoEEzESb72vW5AfoodQ.roa
Signing time: Tue 22 Feb 2022 04:24:05 +0000
ROA not before: Tue 22 Feb 2022 04:24:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1823345355 (0x6cae0acb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 04:24:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db14d6dbd8440e8104cc449bef6bd6e407e8a1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:df:aa:b7:fd:ad:2f:bb:ab:17:2d:41:97:e4:
68:97:b1:79:0c:a5:10:24:16:53:ad:29:31:bf:cf:
ef:7e:a4:ce:e7:ec:14:bd:4e:4f:bd:9f:5a:52:f9:
71:b8:57:50:4d:c0:b3:6f:01:6a:1c:79:94:6a:04:
9f:a6:69:bf:ae:a7:85:be:88:01:cc:df:0d:7e:fd:
8f:e0:b1:8c:19:ae:f8:e7:bc:82:2b:99:66:2e:ee:
00:bc:c9:cf:fe:e6:9f:5a:17:7a:9b:08:be:13:eb:
51:0f:61:84:8d:9e:3a:92:5e:9d:f5:75:48:af:44:
48:91:8d:93:e2:bb:70:53:79:41:7b:1b:ce:f1:32:
32:94:a2:38:eb:b5:6a:a8:1e:2e:3c:fd:d1:0a:58:
be:ab:c9:3f:76:cf:f6:03:f7:11:51:57:3b:ec:88:
4e:7d:e3:ea:44:6e:93:96:5d:6d:ba:16:60:9c:50:
d4:1e:2d:07:66:17:5d:83:62:12:97:69:38:03:58:
ab:fc:ea:05:09:c7:d4:cf:8e:3a:8c:e2:cb:76:86:
9a:2b:11:39:10:ef:09:f9:6d:a8:0c:e5:7d:fc:c7:
6e:e7:e6:c7:f5:dd:de:b7:cd:48:40:b6:42:3d:b9:
f8:79:b9:ae:e3:2d:27:fe:5d:14:1e:31:87:08:c5:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:14:D6:DB:D8:44:0E:81:04:CC:44:9B:EF:6B:D6:E4:07:E8:A1:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2xTW29hEDoEEzESb72vW5AfoodQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:9d:ee:32:68:9e:9d:6f:5a:91:a0:c0:41:15:d8:b8:c4:29:
8f:ca:55:c5:dc:1e:e9:d1:24:f9:64:74:b2:da:ea:71:af:7a:
16:42:ca:5f:c2:a0:f0:b0:b4:3f:f7:aa:58:8d:8b:bd:c5:d4:
93:cb:1a:b2:89:13:f7:9d:ba:fb:eb:dc:c4:67:7b:d1:96:9c:
1d:e9:85:0c:ac:a8:2a:5a:04:df:e3:7d:e2:f9:d4:25:61:1a:
12:fc:1c:b7:2c:1e:a9:59:0a:48:de:d8:0d:cf:dd:5d:d1:3e:
47:0e:69:e4:1b:58:0e:c8:58:de:94:ce:ab:da:18:51:b9:00:
0b:f2:1a:81:61:bb:39:34:71:53:f3:f4:d8:f8:a8:4d:30:f6:
e2:17:75:e6:79:4a:9c:24:38:17:14:92:6e:a6:fd:e7:4e:d6:
19:a3:95:fe:15:40:bf:8c:c3:d7:2c:f9:3b:c6:a8:75:b9:ec:
a5:f3:23:76:51:f2:06:0e:24:58:8b:7d:6c:74:dc:33:80:e6:
9d:f5:b2:c5:6e:22:37:e5:bf:0d:ac:fc:88:ec:ee:37:c5:97:
43:c1:51:df:b2:bf:23:87:fe:2c:1f:15:b6:ff:b3:7e:87:c0:
e1:95:a8:14:95:38:f0:7c:ec:af:66:b4:d1:4b:41:86:17:13:
04:b6:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:11:32 2025 by rpki-client