Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4Cr98hGhSQj78HEHscoMXwiZWBU.roa
File: 4Cr98hGhSQj78HEHscoMXwiZWBU.roa (raw, json)
Hash identifier: Oq4NaZ2+vsKxQlHSUkhYDQhJhjaHL851u+/6GIgWjhg=
Subject key identifier: E0:2A:FD:F2:11:A1:49:08:FB:F0:71:07:B1:CA:0C:5F:08:99:58:15
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185966C02159D8ABF4C19057538D27CAC8C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4Cr98hGhSQj78HEHscoMXwiZWBU.roa
Signing time: Mon 09 Jan 2023 12:05:38 +0000
ROA not before: Mon 09 Jan 2023 12:05:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:966b:1510/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:6c:02:15:9d:8a:bf:4c:19:05:75:38:d2:7c:ac:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 9 12:05:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e02afdf211a14908fbf07107b1ca0c5f08995815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:40:44:82:0e:16:24:96:81:21:22:05:4d:8c:
ad:c2:9e:13:5c:b2:c2:98:51:d8:6f:36:38:e7:4a:
77:8a:e7:85:5a:05:a6:c4:7f:de:e6:b8:6f:72:b8:
c8:b9:c3:74:14:e0:7e:90:61:a7:82:9d:bc:6b:bc:
78:4d:ce:a4:82:ca:36:81:6d:44:4f:7b:fa:65:aa:
33:ca:eb:5e:81:e9:c0:f2:eb:7d:48:da:76:d0:ca:
ab:1b:a3:f6:17:93:57:0f:22:b8:ad:74:1d:58:f1:
03:76:13:b3:1f:ca:ba:23:9a:1c:cb:3d:3b:8a:d9:
1c:6e:3a:eb:7e:29:5c:e9:55:24:06:7e:95:46:68:
59:94:61:f6:88:84:90:71:4a:31:f7:fd:15:58:1b:
6a:51:dc:d3:0a:f2:9c:47:b9:82:9c:ae:05:24:2a:
f7:1a:40:a3:18:58:04:e2:0e:98:d5:2b:63:3e:82:
ac:6c:79:2f:7a:5e:71:e4:71:1d:d1:7e:7d:d1:3d:
74:25:a7:05:3f:cf:a3:76:05:68:5d:58:2f:aa:c9:
82:1d:a1:8a:fc:1a:a8:10:91:e6:d3:30:2c:07:2a:
1d:bf:d5:d0:f6:f2:e3:b2:1d:c5:38:35:e7:5e:cb:
df:a6:d0:ee:c6:10:4b:77:ae:be:ea:43:b3:e4:7c:
76:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2A:FD:F2:11:A1:49:08:FB:F0:71:07:B1:CA:0C:5F:08:99:58:15
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/4Cr98hGhSQj78HEHscoMXwiZWBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:ea:bc:d4:dc:3b:36:38:15:af:54:da:d6:c6:6f:db:a9:ef:
be:93:29:67:6d:47:03:3e:cc:55:b7:4e:66:94:27:01:e7:9c:
be:61:7c:f3:0a:f0:52:53:ee:de:f7:8f:48:f8:9a:86:fc:fa:
a0:a2:fc:6a:57:e6:af:0b:37:70:b9:d6:4a:f4:cc:26:de:21:
61:1b:e6:ba:f3:4a:7c:02:14:c4:4f:11:43:07:9d:66:4f:20:
8b:92:23:36:17:08:59:c9:d0:0b:7b:fe:ee:6c:33:10:96:ff:
79:d6:c9:89:eb:e4:4c:56:df:ba:d8:f9:63:a8:97:8b:c4:67:
9e:0f:49:ff:64:81:29:64:4f:7a:5e:47:a6:95:a3:b6:ec:c7:
58:3f:4e:ce:2b:3e:7a:f2:50:29:81:a9:1a:84:e7:e6:1c:54:
71:6a:f2:6b:e0:77:8d:b8:ca:e7:ec:a5:16:11:cc:f1:70:db:
ec:a1:88:24:78:36:87:4f:fd:76:ed:68:64:05:8f:4f:77:5e:
e9:2b:64:fc:0e:f0:a4:b1:fc:c1:4c:52:1e:d7:2a:b8:25:31:
1c:de:3f:5e:5d:b1:fe:30:e2:99:30:d0:56:c7:71:e9:b4:4a:
ac:a7:a9:97:ca:8c:e9:eb:e5:d1:c9:1c:c2:0a:4e:fa:57:24:
fa:7c:6f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:53:44 2025 by rpki-client