Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/40UDI5o1ruNTp9YSxoEetAE1rsI.roa
File: 40UDI5o1ruNTp9YSxoEetAE1rsI.roa (raw, json)
Hash identifier: GJzVdWu0gQE6XMhInGDa6kk32XLaHku8nH/o+1Kd6LU=
Subject key identifier: E3:45:03:23:9A:35:AE:E3:53:A7:D6:12:C6:81:1E:B4:01:35:AE:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850D1D2971DF8DA02A693B95A6FE749699
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/40UDI5o1ruNTp9YSxoEetAE1rsI.roa
Signing time: Tue 13 Dec 2022 20:11:32 +0000
ROA not before: Tue 13 Dec 2022 20:11:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0d:1d:29:71:df:8d:a0:2a:69:3b:95:a6:fe:74:96:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 13 20:11:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e34503239a35aee353a7d612c6811eb40135aec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:52:b9:1d:07:fa:88:30:16:71:37:99:a1:
e2:2d:34:5c:45:0a:f7:ff:45:97:07:49:76:21:f2:
6b:a9:76:26:f8:55:3a:3a:3b:f5:3b:56:4a:a3:f8:
54:44:b8:1b:b9:d1:9a:f8:6b:a2:4d:f8:65:13:64:
44:50:ba:80:d0:85:6d:88:fa:bf:a9:b2:41:0b:8e:
ee:35:ac:6c:8d:29:b6:d1:27:b0:0a:d6:d6:e3:a0:
6d:72:69:75:20:12:55:ff:31:28:1c:be:44:4e:3f:
6a:7b:cc:6b:fe:89:57:47:98:23:21:a7:be:93:ee:
3d:93:f8:86:41:29:ae:ba:23:1c:f3:d6:f8:3d:23:
94:9f:92:81:db:5a:ab:ac:c5:eb:75:60:99:2a:cf:
6c:7f:0d:58:e3:42:1a:80:a8:ca:21:9a:ea:ee:65:
df:ac:bb:69:da:00:82:ff:02:b6:af:0e:f6:47:d1:
6c:a7:60:9b:de:4f:4f:b9:3b:2e:97:8d:ea:f7:24:
57:88:d7:e0:47:1a:6b:3d:b5:52:a7:f6:b4:a1:99:
a8:09:8a:14:ec:ed:99:6c:f2:4d:27:f8:e7:78:3a:
7b:27:85:44:06:82:04:18:1d:c9:97:7f:b3:0e:b8:
36:d8:6f:7c:3d:99:8d:5a:b9:78:47:97:69:c8:5e:
4d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:45:03:23:9A:35:AE:E3:53:A7:D6:12:C6:81:1E:B4:01:35:AE:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/40UDI5o1ruNTp9YSxoEetAE1rsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:60:aa:fc:dd:7f:ab:a8:8d:63:e1:29:98:30:96:4a:2d:d1:
73:b8:f1:88:f9:32:c5:04:de:44:e3:5c:73:75:4a:9a:9a:dc:
c0:85:aa:ad:3b:66:e1:b4:89:cb:b6:a5:fa:3d:a6:a0:22:8f:
24:15:fc:1f:45:dd:25:4a:78:39:8e:9d:8b:96:34:c7:05:59:
ee:58:41:c2:48:63:16:d1:67:b7:b2:1a:aa:e7:a4:a8:94:2e:
e9:e4:55:56:c1:1f:88:88:91:9d:c3:06:35:4e:fa:b7:04:76:
4f:9f:44:c2:62:3f:3a:58:2c:57:4d:16:38:2f:2d:57:04:cc:
f1:b0:e8:3e:9f:15:5d:26:91:c3:6a:55:f1:2d:9d:e0:7e:c6:
5f:98:60:a4:e5:15:bc:1a:2a:6b:11:2e:3f:67:a2:97:f1:4c:
ce:73:48:33:da:73:f4:80:6a:d2:d7:4e:93:56:d3:68:3c:94:
53:86:6f:49:bb:aa:c0:97:a3:3c:e0:65:48:e5:6b:57:17:0f:
c3:04:9a:98:55:52:4e:d2:95:33:e2:0f:84:c0:51:52:01:d2:
f9:36:d6:a0:30:a9:76:66:33:44:95:a2:86:86:7a:4d:7c:df:
3c:76:44:d2:82:13:31:1a:7b:c2:6b:67:1e:37:c2:a4:d5:24:
1a:d9:b2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:55 2025 by rpki-client