Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3O5vTwG7gzQ-DfZiXxoXcvT-fiI.roa
File: 3O5vTwG7gzQ-DfZiXxoXcvT-fiI.roa (raw, json)
Hash identifier: N/eGFsQC9vPr+N3tBMhxoasg/H26CKlz7l0QbEecp4k=
Subject key identifier: DC:EE:6F:4F:01:BB:83:34:3E:0D:F6:62:5F:1A:17:72:F4:FE:7E:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6B046144
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3O5vTwG7gzQ-DfZiXxoXcvT-fiI.roa
Signing time: Wed 16 Feb 2022 05:16:41 +0000
ROA not before: Wed 16 Feb 2022 05:16:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1795449156 (0x6b046144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 05:16:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcee6f4f01bb83343e0df6625f1a1772f4fe7e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:52:59:97:cb:3f:40:e0:27:b3:2e:4c:9a:
e6:34:a3:f9:33:01:ad:92:4f:74:6c:64:c2:2c:d9:
87:2d:b8:10:b2:67:d1:83:76:d1:61:84:47:a8:52:
28:71:c0:56:38:e0:e4:a1:35:21:1c:c6:53:7b:34:
18:c4:3b:08:3b:60:d2:d2:59:19:15:8c:32:42:7b:
17:c7:30:64:69:6a:d8:78:36:95:de:a0:90:32:d9:
02:ee:39:12:61:64:0e:13:2e:82:22:ba:47:02:a3:
28:d6:8f:41:92:8a:df:66:0c:ca:69:28:70:82:80:
5f:95:2e:9e:99:09:18:49:9c:c8:ef:36:85:35:e9:
56:5c:8a:db:24:e4:03:af:a6:73:50:25:9d:0c:08:
3e:09:26:98:c0:78:3d:e1:c4:90:8a:6f:d2:13:d0:
46:79:80:08:c5:50:f5:35:d4:68:59:6b:3f:d6:6c:
93:fb:bb:17:12:6d:a7:1b:ef:9a:a2:51:d4:6b:34:
6b:d0:07:a0:97:c2:03:a7:02:0f:6c:0e:f7:11:ff:
8b:72:b7:9c:cf:3a:20:6f:24:59:20:f4:d8:ab:31:
1c:a8:d6:18:cf:ee:d1:82:09:b5:dc:5a:43:51:66:
ac:97:0b:6b:ae:12:07:7c:5b:60:c1:59:14:96:bb:
61:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EE:6F:4F:01:BB:83:34:3E:0D:F6:62:5F:1A:17:72:F4:FE:7E:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3O5vTwG7gzQ-DfZiXxoXcvT-fiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:23:5e:fe:75:8d:f2:94:86:dd:97:a3:89:fc:c8:ad:46:6c:
87:35:f0:0a:87:58:60:d1:ee:c7:9f:5b:d3:70:12:3d:ae:c6:
3a:e1:0f:b1:dc:38:6d:e9:ca:fe:11:e8:cc:b8:10:8d:96:d5:
2f:23:ee:d4:8a:e0:c7:fe:db:0a:15:b6:f8:4e:0c:ff:63:ed:
46:eb:3c:3d:00:9b:9c:c1:46:14:7f:9f:bf:d2:32:93:75:e9:
11:8b:00:b3:69:86:1c:45:f9:8b:e4:20:b6:e6:82:0c:69:7d:
09:3f:04:9d:97:ad:ab:8e:3c:fa:fb:00:20:0a:40:fb:bb:15:
f1:0b:c9:6c:08:30:95:cf:a4:c6:49:3a:5e:2d:71:07:1e:65:
04:f6:17:56:69:f3:44:4a:19:2a:9e:f8:e4:9d:72:50:09:2c:
bc:46:ce:0b:51:2e:e2:a0:a9:90:b4:b6:0c:b5:a3:24:98:b9:
ea:15:db:ae:3b:af:8a:40:55:00:0f:f7:b0:c6:bf:86:8e:5c:
19:60:a5:1a:b5:33:a3:f8:07:eb:55:6e:f9:c7:2e:3f:99:f9:
75:57:73:86:af:db:f9:83:a8:15:27:39:68:cb:9d:2a:0d:82:
cb:14:1f:ba:20:fd:3e:50:f2:b0:76:b0:17:34:1f:0f:81:3a:
e5:e6:af:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:10:47 2025 by rpki-client