Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3482JUoC1Wd406j1FHk3OB1yqAM.roa
File: 3482JUoC1Wd406j1FHk3OB1yqAM.roa (raw, json)
Hash identifier: 2Sj7XuY+onZLCI1Fd0nscPJyqihHbWSbUVfept6GK5Q=
Subject key identifier: DF:8F:36:25:4A:02:D5:67:78:D3:A8:F5:14:79:37:38:1D:72:A8:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183EB7454E8C5BB0195EA8A0B89F49E7341
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3482JUoC1Wd406j1FHk3OB1yqAM.roa
Signing time: Tue 18 Oct 2022 14:16:53 +0000
ROA not before: Tue 18 Oct 2022 14:16:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:eb:74:54:e8:c5:bb:01:95:ea:8a:0b:89:f4:9e:73:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 18 14:16:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df8f36254a02d56778d3a8f5147937381d72a803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:60:9c:1b:70:4b:ae:dc:98:19:26:88:0f:ee:
de:de:b6:4f:15:64:3f:0b:ae:40:53:c6:d6:9a:6d:
24:96:9b:40:61:ea:88:53:c3:67:99:4f:9a:0c:e4:
d1:29:a5:bf:6c:83:a4:3b:74:1f:e0:95:67:28:b6:
d4:d2:86:a4:4d:35:1f:45:ee:f9:c7:69:e4:42:60:
0f:cf:c2:3d:e7:f7:11:19:04:df:ca:ca:5d:a3:9b:
f4:e4:e3:e2:db:76:c7:85:b1:24:57:cf:f3:ba:b9:
65:01:04:c3:6e:e8:14:91:68:16:d8:0d:e8:76:f6:
16:2e:cf:82:55:9e:08:23:58:e1:b8:38:4b:69:63:
d5:7a:89:7a:dc:d2:db:9d:a9:97:9f:fc:31:01:b8:
1f:e6:09:34:dd:35:9a:df:5c:23:62:a0:83:c6:70:
1d:55:2c:fb:98:1c:ef:ff:b7:25:6a:5c:5a:bc:24:
d3:92:9f:5f:48:c4:8e:01:f8:95:f1:7c:7c:0b:65:
07:dd:70:84:f7:39:06:d4:ec:99:9d:16:e4:5b:4b:
4f:0a:1b:12:10:d0:7b:0a:7c:fc:5b:c1:87:1e:87:
83:c5:db:47:a2:5d:82:32:5e:c6:79:46:7e:76:0b:
fd:73:21:11:bc:6c:76:74:da:a7:99:97:33:f2:43:
26:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8F:36:25:4A:02:D5:67:78:D3:A8:F5:14:79:37:38:1D:72:A8:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3482JUoC1Wd406j1FHk3OB1yqAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:3a:b8:f4:89:14:49:8a:a1:cf:68:9b:aa:a3:3b:b7:31:97:
1d:a2:b6:84:3f:18:c9:9b:65:f8:28:89:dd:f0:34:6b:c8:bf:
97:9a:95:31:32:4d:58:47:bd:fd:b1:6a:82:74:58:9f:a0:50:
f5:b5:ca:61:30:3f:c0:54:f2:df:17:50:34:0a:e8:09:39:3f:
f3:23:62:e6:44:c5:4f:5e:c2:92:68:4b:5e:82:f1:aa:00:7f:
cb:d2:34:d3:b7:30:83:d7:63:1e:d5:64:f3:32:f3:20:44:e4:
69:e1:9c:2f:ff:da:f8:b5:46:a3:e2:e8:40:29:aa:26:fe:4b:
23:e4:d4:2b:57:c8:4b:df:56:ed:fe:66:e7:02:b8:0d:7f:04:
d0:5e:08:09:5c:65:3e:2e:ba:c4:f4:ad:30:ca:4b:e9:5a:de:
bd:f0:32:e8:37:d3:df:29:ad:81:ac:2e:5a:1f:90:66:58:d7:
8a:68:83:a3:21:ab:8a:bf:0a:bd:9f:e0:9c:cc:10:55:90:d2:
58:cd:aa:c6:c7:62:76:ab:65:02:56:24:3b:5e:fb:80:1a:e8:
e3:84:e3:5e:51:94:a2:3c:d8:72:f4:a7:cd:1c:1c:de:95:0c:
7b:fe:13:5f:99:53:f1:c4:14:49:2e:3c:80:c9:3a:46:8b:e3:
a8:16:e2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:37:53 2025 by rpki-client