Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/44Jb6KZPgYwcJsry1ekvIeyNIQw.roa
File: 44Jb6KZPgYwcJsry1ekvIeyNIQw.roa (raw, json)
Hash identifier: yf8uHOCEcO7YJxYWhk9jtiDl9e8Lpgn6IBc34JOXEfI=
Subject key identifier: E3:82:5B:E8:A6:4F:81:8C:1C:26:CA:F2:D5:E9:2F:21:EC:8D:21:0C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185236EFF2284C55B7A02A3E43408B0274D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/44Jb6KZPgYwcJsry1ekvIeyNIQw.roa
Signing time: Sun 18 Dec 2022 04:12:34 +0000
ROA not before: Sun 18 Dec 2022 04:12:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:23:6e:ff:22:84:c5:5b:7a:02:a3:e4:34:08:b0:27:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 18 04:12:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3825be8a64f818c1c26caf2d5e92f21ec8d210c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b2:80:db:85:a1:a6:39:0a:5a:b7:c9:e5:f6:
54:c1:a6:fa:b7:1a:d2:72:7f:4c:1d:19:29:25:ea:
53:e5:ac:e3:df:10:a7:4a:b5:cb:ae:3e:14:e3:85:
a9:13:b9:22:a5:e4:2e:47:0f:45:2e:31:53:d6:ab:
54:a2:da:81:91:8c:35:e6:e0:25:ff:7a:48:f4:ab:
ee:32:5f:1c:33:1f:81:88:0e:4d:df:2b:db:80:3e:
ef:f7:5d:6a:3b:b6:34:31:30:cb:c2:6d:80:e0:21:
61:90:af:95:d6:1c:30:df:6a:69:d6:8d:b3:b4:c5:
81:e7:9d:b0:bd:0e:1f:73:36:68:3c:6e:45:5e:0a:
cb:cc:cd:8f:5b:1e:65:1c:31:7e:2c:a3:cf:26:c6:
b7:37:ac:90:0d:82:c6:de:46:68:66:68:6a:6a:d3:
98:9d:4a:92:8b:62:e4:a1:9a:b6:df:b1:79:42:ec:
c9:14:15:2c:89:ac:62:e8:f3:a0:bc:00:0e:e5:4a:
fa:6b:03:d1:26:75:38:46:e2:1b:02:bd:e0:13:eb:
db:29:2e:f7:8e:e5:80:91:a5:26:7a:3a:a5:c7:e7:
77:94:d6:7a:7b:29:88:f3:c8:ba:83:76:ac:df:4d:
dc:b5:86:ce:c0:a5:74:41:b1:d7:c4:d8:07:96:0a:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:5B:E8:A6:4F:81:8C:1C:26:CA:F2:D5:E9:2F:21:EC:8D:21:0C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/44Jb6KZPgYwcJsry1ekvIeyNIQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:3b:7f:55:2a:e3:b2:e6:2d:1a:0e:26:a7:a4:9c:3c:7c:2b:
c5:67:a3:ec:e5:80:32:9c:77:01:9b:94:5e:c8:3f:89:12:04:
33:de:a3:2e:39:ef:f1:79:73:44:94:6a:fa:85:6c:c5:71:e0:
f1:fc:6d:4d:fd:1d:98:9d:38:4a:cf:61:b7:36:49:98:c8:11:
4a:ba:b2:a8:74:d8:40:a0:74:aa:d2:4a:d4:8a:26:87:0c:4c:
de:1f:f3:f2:6e:eb:35:0f:f5:3b:48:f1:03:c8:a7:26:f5:0f:
d0:57:cf:85:25:2c:a2:92:a6:00:d7:ef:21:5c:1f:21:6c:6e:
85:60:0d:1e:0a:5c:b9:08:34:3a:98:00:f8:f5:1e:5c:b3:82:
fa:41:2c:f7:12:8f:f3:1d:53:5d:36:b7:5a:3b:c4:f5:73:e2:
7c:ef:50:9d:0b:aa:06:3b:fb:39:67:e5:10:e5:bc:c9:2d:22:
ea:55:87:85:b6:d5:ce:53:81:30:b2:ad:ae:cc:c3:ef:b4:03:
7e:43:b3:55:9e:c3:76:6d:71:19:ff:5d:a6:fc:c6:27:20:50:
67:99:9e:e1:21:9d:d2:6c:a0:5f:2c:8a:5e:61:f7:d9:6a:56:
9b:7e:8f:4e:5d:19:c2:31:4b:7d:69:4d:39:38:fe:c9:b3:58:
f9:73:f9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:34 2025 by rpki-client