Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/49Ypj7SJO6CCN6JZsJoB-odJQdI.roa
File: 49Ypj7SJO6CCN6JZsJoB-odJQdI.roa (raw, json)
Hash identifier: AwTQFaVtmyPagmDykpty8sOj1WO+SkernL4orbMiMI4=
Subject key identifier: E3:D6:29:8F:B4:89:3B:A0:82:37:A2:59:B0:9A:01:FA:87:49:41:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018450F430B647BC87DD4B29CA9C3CB3B572
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/49Ypj7SJO6CCN6JZsJoB-odJQdI.roa
Signing time: Mon 07 Nov 2022 07:18:11 +0000
ROA not before: Mon 07 Nov 2022 07:18:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:50:f4:30:b6:47:bc:87:dd:4b:29:ca:9c:3c:b3:b5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 7 07:18:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3d6298fb4893ba08237a259b09a01fa874941d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:13:80:f8:96:a0:cc:2e:35:5a:9f:20:fe:
01:7f:60:44:44:90:29:b7:09:d6:21:cf:f0:7e:5d:
6a:96:16:f8:7f:b5:bd:4c:17:6a:08:f3:25:a6:3b:
d8:f2:d4:5d:ca:49:76:0b:36:c2:74:cb:ed:ff:b2:
39:dc:73:bd:72:7f:72:59:ad:c0:e0:bd:0e:5d:f5:
e6:7d:c4:83:4f:82:4f:ef:ad:e4:d8:7f:a1:fa:6e:
7f:a7:64:72:89:3e:f9:7e:7e:dc:5e:9f:f9:4f:dd:
03:35:c4:10:ad:e0:0c:ed:95:70:ba:7c:53:2b:78:
f3:bd:5d:04:20:9c:0d:d4:29:a8:c5:c5:f3:a6:25:
e3:07:51:bf:80:e3:24:8f:bd:21:c4:80:9d:11:1d:
43:84:2e:c7:dc:cb:12:02:c9:a4:6f:cc:85:cb:98:
a3:48:6a:98:78:f6:a7:f2:d4:2f:5c:d0:61:de:d7:
21:70:48:14:d0:6b:70:5c:4d:00:ce:5c:17:df:49:
7d:ca:ab:c7:fb:59:33:52:0e:b2:93:8c:c2:53:7a:
7e:92:5a:96:ba:94:7a:45:3d:0c:0e:c4:fa:29:86:
37:0c:97:4e:79:4e:96:9e:73:90:52:49:2e:9f:a1:
e9:c0:8e:e7:bb:aa:d5:9d:c4:78:a7:c0:39:77:07:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D6:29:8F:B4:89:3B:A0:82:37:A2:59:B0:9A:01:FA:87:49:41:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/49Ypj7SJO6CCN6JZsJoB-odJQdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:43:2e:36:dd:ff:35:69:0f:3a:7f:c8:fe:3b:bd:fa:70:db:
74:83:d3:21:81:32:85:d2:d2:2f:91:53:8e:cc:63:0b:f3:db:
6a:b2:38:d0:58:a2:3d:19:ae:6a:8a:53:a6:36:3b:e1:bb:ca:
25:72:36:b5:de:ff:a8:ff:d1:fc:a4:02:9a:99:83:7a:37:6c:
87:f9:f5:2d:3b:52:87:40:c3:be:32:d7:ff:32:c0:07:6e:0f:
2e:b2:e8:81:8c:4c:37:c9:4f:04:a8:67:6a:98:df:ce:21:4d:
9b:f2:03:3e:bd:65:a3:3c:b7:86:f6:54:bd:b2:59:ac:00:3d:
00:9f:f5:5f:85:08:5f:e6:f9:88:9b:13:e5:7b:03:f1:d6:95:
38:ed:d2:a7:16:11:e3:57:89:29:51:f2:ae:be:aa:ed:45:58:
a9:8a:b3:4b:1b:6c:df:c7:0a:79:7f:f6:1e:44:30:45:65:32:
8d:fd:d5:0d:07:84:fe:8d:c8:78:4e:ec:84:db:84:e6:4c:19:
5e:a2:97:a5:19:16:31:b8:b9:8a:2b:40:aa:eb:08:9f:45:2f:
cf:77:73:6f:6b:87:ed:8a:56:2b:af:6c:ae:fb:52:69:12:d0:
82:74:e2:89:d4:9a:e9:be:44:43:e2:e1:5a:e3:0d:75:53:32:
4b:57:6f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:00:36 2025 by rpki-client